last executing test programs: 18m53.613762702s ago: executing program 2 (id=4185): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x1, 0x10, 0x1, {0x22, 0x422}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8, 0x6c}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000800)={0x14, &(0x7f0000000700)={0x20, 0x2, 0xad, {0xad, 0xa, "a5cc8b5909a1d7e766593be2d5d5a782915c87da4a02d653d886939a58a17edb8b8fb3ebef01cb18ed175cad449020d904a40380f8348099eb717e3e9c1b4901d1bfb5c4276f5f1a0ef7af96629a7c603ec71ccaebc9ec70df23c0e1ed6dcd20fca07a4e0955b36c186dc311db7b970dcfb755f5ebbe4e376ae4477dd67813c7b98cac3a4ac82671b094845d9e43c4132431a7d3f6cbe23fd974bdcd8e10951cd2f73cf8678c8ef0f565e8"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000b00)={0x34, &(0x7f0000000940)={0x20, 0xe, 0x5c, "453f7573fee7528b90a74cbfd2656a10aa41cfc47e284c329869c9b2674ea76c448b1fc410db7bc596c33abb6b7c90d2bbb9db6ba3cbbe9ea5d586ad2d2c2130737ba0a2b08c2baef9cdde05ee58ce8a6e68c0c15bf87a08f6c9eb59"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a40)={0xc0, 0xa1, 0x4, 0x7f}, &(0x7f0000000a80)={0x40, 0xa0, 0x4}, &(0x7f0000000ac0)={0xc0, 0xa2, 0x2f, "7fa58beac4fd4cae183416c0026a4d5740780c2556d1e51a24d31a04a151c75faeba1dc06be10b830777f8ee6bd9a5"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)={0x40, 0x10, 0xe0, {0xe0, 0x6, "3b41c009b97ee9bf9fa065a288e4d86b2288efc5be904029b959e38c900afdc8eb50c6ad9df4d4676c7d7f24aec3819586ebc505225c86f01613dd1e2da4d56fabf1b67f068edf6740b9c05cc1baa10880ee356c98df65074db557f4942c89dcee28cf20e3aab53ff5d57e7cad6c3376ac2ce9bdc79ba34b3d9ab718625b79d72ac38b590c678b1ecc9e46fb289a9b179c4372252705d5af27fe383061a332612461ef29a645fb01580102b29a7f676c6e791e06f367b009e4fe5741c5435cb20c19616eed529067aac97b96f4c14948fa548902a82a22a02369d6456371"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f0000000440)=ANY=[@ANYBLOB="002208000000c3f9d9a75fda22e62d579e997d802580008e6c21ff55f104f352"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x9d4}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0xb, "3256a8179c5bc1bc1a996d"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa7}, &(0x7f0000000340)={0x20, 0x1, 0x4f, "1fcc11406143701b2dab5059c651e1db8cf260461303ccc69f5ee550aad2e3ab3eb1a154a343e0f7510549c36ac7c40b4de2c30fc0f2bf8672d679abb87b4f7bb70a03885225f7b679a060547e7150"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, &(0x7f0000000080)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000580)={0x14, &(0x7f0000000480)={0x0, 0x1, 0xa1, {0xa1, 0x9, "bb5e67cc5f0bf77339e452a77d09891833e29b02383e5a03b1743175216dfa98b0a4bdda52808490e7be21176e1c1594e4fb991a0e0818046b7f4cc326f88aa1120be1f03141a703a7a85900b9d66a2cc27e443c79eb8ed851fe28aaf3ba094575ff9c4e4d90b9447871bcd826533785e91b65874fbe39938db99409606255d4c3812e3d39fbd0e8ba360845048edaa0a65a6350cd6bde5107f62b28b86374"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x1c, &(0x7f00000005c0)={0x40, 0x17, 0x41, "4e5d274059566f24e3248782ad01e9794cff8c265aa0cdd6714e5fcc0fe5a6e08f2254156fdf52f6aa6b2f218a19583b8500136087264b8706a3a75be7e6d2b4a5"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x6}}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 18m52.980651379s ago: executing program 2 (id=4186): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000540)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x8, r2, 0x0, 0x8, 0x256a5e, 0x67, &(0x7f0000000600)="47c48fb3e428176b09d30a671b1a240836e687b6694e033be65e78a712462f86f95eb8723db0c80af6940902f8e64c24d103396e6f4bb38b179d0bbd5a0f07674e8e85009898c22f283e3ca33c4f6c8dba07f82dc95b826df83d71921a9bcd2e04fb3ddc71dd64", 0x10000}) 18m52.951594094s ago: executing program 2 (id=4187): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x1, 0x8, 0x73e9}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="f20f5ce266b8f5008ec8b9120a0000b800000080ba000000000f30470f67658667f3420f090fc7724866baf80cb8d1342d84ef66bafc0cb000eeb9410200000f3226650f01f866baf80cb8bbff468fef66bafc0cb000ee", 0x57}], 0x1, 0x11, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m52.88199637s ago: executing program 2 (id=4188): timer_create(0x1, &(0x7f0000000bc0)={0x0, 0x3d, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000c00)=0x0) (async) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000d40)={{r1, r2+10000000}, {0x77359400}}, &(0x7f0000000c80)) (async) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r4) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') (async) getsockname(r3, &(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000400)=0x80) (async) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0xee00) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) write$binfmt_misc(r3, &(0x7f0000000340), 0x2000011a) recvmmsg$unix(r3, &(0x7f00000021c0)=[{{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/201, 0xc9}], 0x6}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/235, 0xeb}, {&(0x7f0000000840)=""/131, 0x83}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f00000009c0)=""/238, 0xee}], 0x5, &(0x7f0000000b40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000c80)=""/180, 0xb4}, {&(0x7f0000000d40)}], 0x2, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000e00)=""/112, 0x70}, {&(0x7f0000000e80)=""/178, 0xb2}, {&(0x7f0000000f40)=""/255, 0xff}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/128, 0x80}, {&(0x7f00000020c0)=""/6, 0x6}, {&(0x7f0000002100)=""/22, 0x16}], 0x7}}], 0x4, 0x40012021, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r6, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) r7 = syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) (async) shutdown(r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) io_setup(0x7, &(0x7f0000000040)=0x0) io_submit(r11, 0x1, &(0x7f0000000640)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x82, r10, 0x0}]) io_cancel(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0xace6, 0x0, 0x2}, 0x0) fcntl$addseals(r5, 0x409, 0x8) (async) setpgid(r7, r7) 18m52.823171731s ago: executing program 2 (id=4190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x47be, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x3f80ee88) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) socket$kcm(0x21, 0x2, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, 0x0, 0x0) r7 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYBLOB="2c656664957fb5b4a819d4546e6f3d8d4fa0448543be12127ce23b6e695d4e94390c41d8e43a096101254a47d4f789faaa188378aad3d5aba952a59134da4f", @ANYRESHEX=r7, @ANYBLOB]) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f00000003c0)={0xfea, 0x2, 0x29727fdd, 0x0, 0xd, 0xb}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0}}, 0x4004) io_setup(0x80001000, &(0x7f0000000080)) socket$unix(0x1, 0x5, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x210082, 0x40) r11 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') execveat$binfmt(r10, r11, &(0x7f0000000540)={[0x0, &(0x7f0000000280)='mqprio\x00', 0x0, &(0x7f0000000740)='\x00U\xb9B\xef\xdd\x81S\xc7\x8c\xa66-\x1c\x9d\xba3\xd9<~\\\xf0o\x10\xd0=\n\xc6\nG\xab\xe1\xb0p\xea\x02\xcdC\xec|\xf0\x1b\xf2@\xf1\x1a\xff\xf2>\xdato\x1e\xcdks\xa1\xce\xe8\xff\xf6\xcf+\x1e\xe5\x11f\xdd\xad\x02\xcc=\x9a\xeap\xee\xf1~\xa8\xf6(\xfa\x9fr\xb9\xd2\xd8\x9bP\x1b6\xcb\xaf\x00\xcd\x81\xd4w!\x83\xf0l#\x00\x0e\x99\x0e\xbf\xdc\x9a\xd8`\xd2J\x0f\x14\xd63PEB*N\x86\xf2E\xf8\xbfK\x92', &(0x7f00000004c0)='ethtool\x00', &(0x7f0000000800)='veth0_macv\x1c\xef\xc8\x7f\xf3L\x187\xe6\xbd\xb7\x17\x95\xd8\xba\xee\xfb \xa3\x88\xe2\xf0e\x1c\x0e\xa14S\xa0\xf5\xf5\x9e\xf3>\x9aT\xc4\xb87\xed\x8b\xf0\xa5\x1e*J\x15\x84,\x176\xca{\x9c\x17\xadV\xe4\xbc\xf7p\x89\x8a\x87y\xa3\xdb\xb3+dV{K\x91\xa990x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r4, &(0x7f0000000340), 0x8) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8001, 0x0, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1092, 0x40000}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) preadv2(r7, &(0x7f0000000340)=[{&(0x7f0000000480)=""/148, 0x94}], 0x1, 0x3, 0x88c7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x1014840, 0x0) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0xee00, 0xee01, 0xee01) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000040)={0x1}) setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='./bus\x00') capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) 18m34.541743959s ago: executing program 4 (id=4265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000700)={0x7, 0x0, [{0x80000001, 0x80, 0x6, 0x7, 0x6c, 0x800, 0x9}, {0x4, 0x0, 0x5, 0x0, 0x635, 0x7e8, 0x9}, {0xd, 0x9, 0x3, 0x6, 0x4, 0xfffffffe, 0x80000001}, {0x7, 0x7, 0x3, 0x14, 0x7, 0x77fe, 0x9}, {0x4, 0x4, 0x2, 0x81, 0x5, 0x0, 0x814}, {0x80000000, 0xfffffffd, 0x0, 0x1, 0x10004, 0x3, 0x7f}, {0x80000008, 0x4, 0x1, 0x801, 0xffffffff, 0x40, 0xfc6}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f01cf000066b805008ed00f300f300fc79d53bf00000f0057000f01c3", 0x5f}], 0x1, 0x14, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x9, @vbi={0x400007fe, 0xffffffff, 0x3, 0x788683bc, [0x157, 0x7], [0x1800000], 0x1}}) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003b00)='GW') timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"bad597e67be235252bf66075480dd87f5dcf16c4f68fdbaf41bc531877cb26715cbbfe6320f7a90000000060347d13d2ed03cd70db1598911a57bfd2f01df87d60a35069f4c5649b05560e6f33ed350170a21c268aa8763a5651248bc321dcf09ae9f0a712e7dfc2cfeeeed0fb9d1087da9428ec5efd9389319e66e96aa670111bb84119c4918e63cf78c9bbe9ff8d30b9fc86a1aa2c4236db97f6c9b2ccc15b85cb46c511fe454abcdb92ffe7605e95f6437aa656927ca88c5df5020a52121740fe81a4cdb7f4726c8d581b875ddba789ecc9ee4c89033de8ce3b8cfb37f39480f8b9c84a67306f1dceddcd2978acb29d5d0b1aa140e12e0056afaf7ba107663cc42b6f1da9fdafe5ced8e62117198008ec7387c28ccccd5ddb1aa10cf7eb277aa3e8f5088e388db6c8960f46d47b454e44121b8724523fb04d088730c02aaa20d66e6b4050ca407084ad72e808006a970ce61cdb3b1ddcf32a4762b997580e9004c7d065903c0f3c6fa745e474d1d46b204e61f1f46c7b75c6940b74c34b6904df5582e995a65829bc2d6707dedbfce67b202589a98d6787c644874b9d09b67266977f5bd69b93d256cc5038bb1d9dd5d5aaf4798af04bdd60854e0e492f45f15a4d2bf4a7a66587c3b5c6d62c8e94e5c40af74f4288a1f95c0e2a60e38f4d1f3ecb8c843e2054af5a937135dd939d25d4c2a90076fb0cc1b4797516aabd53fc5e52732011348239d36c04c306a60413dbac58b986b1c7c949fdc5ffe2ff0f41dbfb6dadcba0d49daace175a88c03cc71fe2dc9911598e665e361d3f2acc4fdf06d697c8eabc56eb200b961e7b44bfc89957357b3d4d9779f3beb093b2424d97cd10574a3fac98d0f8c7dba639095c3f9bd7eb77c7ef33a1b313cc54cc75d7e26f48e5a2aa310a55ae0d5b8b1a2f84ad51ecfe86f45adbfd2ab85c4c7184847969b322fa8b0b8ca6d1480400658474cabe83e2977acdabdbc4f49c06c25ea6a187475539fb065da1ad098580fcc7f0b4579bd7be7d9053d8dd2ca4ead2eac4919d82836a108aed9258963b2893685d69ff92f3a4991eaa7c7f69bcd593fbdff741d705a7eec62c888b20e24d8000a59aa5428aefb097848ac137d693903994c4b8140f18ab6673b93f86a1f1abe4edc0a9c289064103bc4137e06aad7ddf5d8647438cc4bc28e436053c24426eae682f1b9c55661881e03137463f0f1bf4b4f5f8573697bf4b9cafd1afc842eaf6636dfbbe9b6b78eff826e7dcf0a61693bc506dd36bcdb0fd79964310c344a766cf5605992b030d7b3ef1728a4878670d5acb0f0a845695845ea3ce8f49985cadf42bbf4d27f3cff72cdb07d63d717bda4a09d537462e017ead005dae8a435e00"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18m34.311015961s ago: executing program 4 (id=4268): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000900)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x44081, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d00000000000100000000009062666539337c7d01000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r6 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120138adf34daadfdf91cf8a40000102030109022d0001010710090904000d02030100fc09217fff050122b10f0905810340000308640905020310000201085b6f8647ee474661077122caf60f651c707da53d6c840c22840ac41fd7e2814ffbc2157304bb"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$uac1(r6, &(0x7f0000000500)={0x14, &(0x7f0000000240)={0x0, 0x21, 0x32, {0x32, 0x2, "25eabfae31bec4b21c75012d6ca47303b0194364e6fbe37b7fd8111aab1f2fa676dece164f49bc9529f3aebdf3273eb6"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xe0, @string={0xe0, 0x3, "5a6a9232f1c68df5df2994529cf6f99ce5a4ca09ec76031880e2a021a03828bb09f9c49f76856e52994b3567837d29a32aeeee51a0a44ec072c69c41dc086cae0ae74462c948d4e132bc3efcabea39450300abbd496e704da283b171ec03a6983d724406000000b51bf26c600bfe78e31e0a28e5eb1edb608b91766048ca3f1ede5866260ed384d7a6bd2d8ec340967332dc608b16bddc83dd00ba36650d51fb2bfa6a23737909a4dac7bee306c658da1fea09dd108e3f9bf30afb23f1e99f37bd9076c3a3e280174c2844f061d8960000000000000000000031829bce14"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x0, 0x15, 0x66, "dc39677e9e4e69b6d40d8a93f4664e90a8f15087d4fdbed1c8bf9a3e4fac443e6b2b761ee84ef710da700ad6d4d108d2a72cb0be3e868db7b7411732c99bde45f0640cc6d709fed989a6ab9e7e83d4e79537fcad6fc6976063435f8e67758e57e13c610500bd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0x20, 0x81, 0x1, 's'}, &(0x7f0000000700)={0x20, 0x82, 0x3, "ff8637"}, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)={0x20, 0x84, 0x1, 'o'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "926c38"}}) sendto$inet6(r5, &(0x7f0000000080)="49f18cdc4e09dc662fc0a029d4b857dd940bd7b7fc1ca1b1cd8b9ea4ace5032e820d4816bd77", 0x26, 0x44005, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb2, 0x7, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 18m30.218412896s ago: executing program 4 (id=4291): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x5, 0xcd57b463201d2845, 0xffffffff, {0x77359400}, {}, {}, 0x1, @canfd={{0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "5cf46e3ae2e3cabc357f14ea53f8d7ccd6fe5fee071f4279d0e4883362faffc0a2842431bc380a491c4a65e709ca3cd71b6da7766892b1100997d9daefc91154"}}, 0x80}, 0x1, 0x0, 0x0, 0x400c0091}, 0x8040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 18m29.981601901s ago: executing program 4 (id=4294): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, &(0x7f0000000040)={0xc, 0x10a, 0x800, 0x6, 0x5ba}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e00660000070290780a010102ac1414aa11ff092112"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x318, 0x0, 0x298, 0xfeffffff, 0x298, 0x0, 0x350, 0x350, 0xffffffff, 0x350, 0x350, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @private=0xa010102, 0xffffffff, 0xffffff00, 'batadv_slave_0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x67, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr, 0x0, 0x0, 'lo\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x3, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@broadcast, @empty, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x11, 0x1, 0x1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x1, 0x0, 0x0, 0x5, 0x2], 0x1, 0x5}, {0x4, [0x3, 0x0, 0x1, 0x0, 0x0, 0x6], 0x4, 0x6}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x39}, @loopback, 0xff000000, 0xff, 'batadv_slave_1\x00', 'bridge0\x00', {0xff}, {}, 0x32, 0x1, 0x19}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 18m29.550672159s ago: executing program 4 (id=4296): socket(0x40000000015, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c040, 0x1e5) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) unshare(0x2040400) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0xadc42f8ecc487f2c, &(0x7f0000000080)=0x5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, 0x0, 0x20, 0xfffffc01, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001a500)=""/102397, 0x18ffd) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4}, &(0x7f0000000000)) 18m29.433816958s ago: executing program 33 (id=4296): socket(0x40000000015, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c040, 0x1e5) pipe(0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) unshare(0x2040400) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sched_setscheduler(0x0, 0xadc42f8ecc487f2c, &(0x7f0000000080)=0x5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf0, 0x0, 0x20, 0xfffffc01, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8040}, 0x800) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001a500)=""/102397, 0x18ffd) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4}, &(0x7f0000000000)) 11m2.361843699s ago: executing program 5 (id=6383): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2bb2c8aee8eb5d2f94ceca2fe10f643ab4b2175645937b87a6de6ca0b9bf40bdfb18b035f93fd4ed029c10a2cdcca4110e92e9b4c8d68500871497ad02"], 0x50) socket$qrtr(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4844) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000ac0)}], 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) 11m2.300825811s ago: executing program 5 (id=6384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 11m2.117898826s ago: executing program 5 (id=6385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x18689, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) mount$fuse(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x20000, 0x0) 11m1.14856546s ago: executing program 5 (id=6387): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fgetxattr(r2, 0x0, &(0x7f0000000280)=""/198, 0xc6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "d49e0b1f09a3e05cb898141464441748655937bb34d22f02362479246bb6372d891a3b5dafa58a6abc5a678d6874fc8fb5f8a529c6e30103484f2667c174fb6cda19ea0a9301bc3238eb816e9c3882f243bcd4bd7115b26dacf5923f060498d471cb4f789562fcda119739dd1a5b0e4e1a4a64dbd7b398bd4e7a247d81f968f2e945f293fc3860bf11f0424193fce743067d27f0ac187b44b128a4999547f73d8c35d3c2bd8b51bbc9a31123f773be89e109cc71b8ec29a539083c0cba15b0899c7181ba154c28b3c4e2ebe360ac44f942a703b9a3a37fbbefe9ae0de04a32336a6eba07b2fb6ad426d56e17291bb1a9d1fcdaa939378bab6dd2eac37b369ef163c9e0fc8039352c24d8147fcc2e2559b47066abd21a3a5f83f239a2227d17d4ca90f60ed9acc243ed38818e3883a985106b54dc157b67022525a74e8f9cb99852760359278d5d22294a70433ba4cec5147fbb09b1d0008ba76257f1c5af6b8d6bf3bcfd5a468a566a4e98fe5f264f2663b72cb421c90d8b7883ddfb5749b27a3e146f9d8538706fea61b07c6e064446337439b9d5a5dc82f6c63c57d6ba0e709b7c1b15fa8367f8e6df2cf59b0b30740ef47c5cccffce5911569591ce4ab62275964cd147e87a30cc6e71f7e40e161997cdbadcfbfb6c54e0289ac137508b7b5339414e4ab7afcc420148e37d49b664cc07c8178a3b50f566c5bdd3aa9217ef909805972bd63ee1d729b282cd866c183744b20da3227f9d43843236b571c8d3237408c266e08d0699ebd30e0820362664ab323b15d3ae9896d6120aae6ef9085f53a2b39cc31238b031476c86e6b16d7703fcbacc7269ce8622eab1cfdf82a364209ec4ac912db924bb76bc35ddf8d0e7a3aff0d08a48c07be47303b59653d9409f14dc59ac33cae5e010466f54d86772e43e3680863bb9bf10c971f16a731e601d7fcdbb91d7146e7834d89059ad522d70398c2bacf113ed791e32f933dfa23f5d6d11bfc9d9e0f04a34b0eddd99d16cd9712485e0a5c9aaf1ebf3f14d00005f8960b6145cbb7d4522692ebe1f9491f87a29ed67c5fb60f5e69bde2a758742999fc986a2dbf6199977e9b446691bf9f95d0abd84557c77ea13356c977d0f098ab9fec85acbd6447f2e6893e2fa6a0a7b272dab66e69b7def48f8b3583a53a0941fb3e4367fa8d56e05ee3b265f17ca0439fcdcea276f7f0a9bf4c2a324d7143658007cf4019e8da69ba1b7dff4383714cbcb71dfe6f1b1ac5d5e99394cb2c360ddb1889d92cd36f8fc72ac865f1c6445957b2a57c1af59ef8d2e9fe328ec2bde763d65c4dea965042f540515bf2f879d1b26309ebc1d7f76c569fa88fbe61845e96e93d3b6025b6285777e59495943596c128fdacc545263ce458bf99f57d7e5dc77f65cf650902b5b6d5af9359334759843365bf0dfb244817a40e8cc9030"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r8, 0x7ac, &(0x7f0000000100)={0x0, 0x1804, 0x40}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 11m0.007167911s ago: executing program 5 (id=6389): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8090) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3, 0x0, 0xf, 0x80000006, 0x3}, 0x0, 0x0) 10m58.801220291s ago: executing program 5 (id=6390): r0 = userfaultfd(0x801) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x71}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x4, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x739}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_emit_vhci(0x0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x90}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x100, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x4745504a}) 10m42.489123521s ago: executing program 34 (id=6390): r0 = userfaultfd(0x801) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x71}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x4, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x739}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x200}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x3f00000000000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000200000/0x3000)=nil, 0x3000, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) close_range(r0, r0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_emit_vhci(0x0, 0xd) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x90}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0x1, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x100, "3a8e0300d614000001000100000040004000000000000016c713b41e2a3600", 0x4745504a}) 8m56.231316589s ago: executing program 7 (id=6870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f00000005c0)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xd5d55000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000240)={0x0, r2}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 8m53.803195671s ago: executing program 7 (id=6875): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="582e8ce3ba8105e413abc3072cbe21bb3933a8c9082780f29ef2c966043b9912eb", @ANYBLOB="67bd3d2f8079505a997d51c519e46af24699b1a1b0a7ba61b04905a08245bc2cfef185131769fb735b37c66d2c827a053fd822288c94a73fe4267b0cd9589c66e352a4909819bbff25ab3dbfad253981eef8469035af3ba1d9eafa05f010921e96f794e1d37728d044a23c90522bf7e9e10e72fd1a1e", @ANYRESHEX=r1, @ANYRES64], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f00000000c0)) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="768dcc56dae2607d50a1090000000b11200000b37488dffc00"/36], 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) prlimit64(0x0, 0x1, &(0x7f0000000180)={0x8000, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 8m50.250626256s ago: executing program 7 (id=6888): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bae000/0x400000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000160000000800000040"], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xd00a}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4020ae46, &(0x7f00000001c0)={0x5ec, 0x1}) 8m48.098029917s ago: executing program 7 (id=6893): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) 8m47.793909188s ago: executing program 7 (id=6894): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x82c02, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/251) 8m46.556710993s ago: executing program 7 (id=6897): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000900)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x44081, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d00000000000100000000009062666539337c7d01000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r6 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120138adf34daadfdf91cf8a40000102030109022d0001010710090904000d02030100fc09217fff050122b10f0905810340000308640905020310000201085b6f8647ee474661077122caf60f651c707da53d6c840c22840ac41fd7e2814ffbc2157304bb"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$uac1(r6, &(0x7f0000000500)={0x14, &(0x7f0000000240)={0x0, 0x21, 0x32, {0x32, 0x2, "25eabfae31bec4b21c75012d6ca47303b0194364e6fbe37b7fd8111aab1f2fa676dece164f49bc9529f3aebdf3273eb6"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "5a6a9232f1c68df5df2994529cf6f99ce5a4ca09ec76031880e2a021a03828bb09f9c49f76856e52994b3567837d29a32aeeee51a0a44ec072c69c41dc086cae0ae74462c948d4e132bc3efcabea39450300abbd496e704da283b171ec03a6983d724406000000b51bf26c600bfe78e31e0a28e5eb1edb608b91766048ca3f1ede5866260ed384d7a6bd2d8ec340967332dc608b16bddc83dd00ba36650d51fb2bfa6a23737909a4dac7bee306c658da1fea09dd108e3f9bf30afb23f1e99f37bd9076c3a3e280174c2844f061d896000000000000000000003182"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x0, 0x15, 0x66, "dc39677e9e4e69b6d40d8a93f4664e90a8f15087d4fdbed1c8bf9a3e4fac443e6b2b761ee84ef710da700ad6d4d108d2a72cb0be3e868db7b7411732c99bde45f0640cc6d709fed989a6ab9e7e83d4e79537fcad6fc6976063435f8e67758e57e13c610500bd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0x20, 0x81, 0x1, 's'}, &(0x7f0000000700)={0x20, 0x82, 0x3, "ff8637"}, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)={0x20, 0x84, 0x1, 'o'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "926c38"}}) sendto$inet6(r5, &(0x7f0000000080)="49f18cdc4e09dc662fc0a029d4b857dd940bd7b7fc1ca1b1cd8b9ea4ace5032e820d4816bd77", 0x26, 0x44005, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb2, 0x7, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 8m29.892734979s ago: executing program 35 (id=6897): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000900)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x44081, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d00000000000100000000009062666539337c7d01000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r6 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r8 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000a40)=ANY=[@ANYBLOB="120138adf34daadfdf91cf8a40000102030109022d0001010710090904000d02030100fc09217fff050122b10f0905810340000308640905020310000201085b6f8647ee474661077122caf60f651c707da53d6c840c22840ac41fd7e2814ffbc2157304bb"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$uac1(r6, &(0x7f0000000500)={0x14, &(0x7f0000000240)={0x0, 0x21, 0x32, {0x32, 0x2, "25eabfae31bec4b21c75012d6ca47303b0194364e6fbe37b7fd8111aab1f2fa676dece164f49bc9529f3aebdf3273eb6"}}, &(0x7f0000000ac0)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "5a6a9232f1c68df5df2994529cf6f99ce5a4ca09ec76031880e2a021a03828bb09f9c49f76856e52994b3567837d29a32aeeee51a0a44ec072c69c41dc086cae0ae74462c948d4e132bc3efcabea39450300abbd496e704da283b171ec03a6983d724406000000b51bf26c600bfe78e31e0a28e5eb1edb608b91766048ca3f1ede5866260ed384d7a6bd2d8ec340967332dc608b16bddc83dd00ba36650d51fb2bfa6a23737909a4dac7bee306c658da1fea09dd108e3f9bf30afb23f1e99f37bd9076c3a3e280174c2844f061d896000000000000000000003182"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000580)={0x0, 0x15, 0x66, "dc39677e9e4e69b6d40d8a93f4664e90a8f15087d4fdbed1c8bf9a3e4fac443e6b2b761ee84ef710da700ad6d4d108d2a72cb0be3e868db7b7411732c99bde45f0640cc6d709fed989a6ab9e7e83d4e79537fcad6fc6976063435f8e67758e57e13c610500bd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0x20, 0x81, 0x1, 's'}, &(0x7f0000000700)={0x20, 0x82, 0x3, "ff8637"}, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)={0x20, 0x84, 0x1, 'o'}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "926c38"}}) sendto$inet6(r5, &(0x7f0000000080)="49f18cdc4e09dc662fc0a029d4b857dd940bd7b7fc1ca1b1cd8b9ea4ace5032e820d4816bd77", 0x26, 0x44005, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb2, 0x7, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 5m25.136269958s ago: executing program 1 (id=7709): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r2, 0x4b63, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x2000003, 0x2013, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x0, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x2, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0xfc, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x17, 0x0, 0x8, 0xb, 0xa4, 0x6, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xd, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0xf, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x10, 0x0, 0x8080000, 0x8, 0x4, 0x3d01, 0x70000, [0xa9, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x4, 0x2004cb, 0x0, 0xa1d, 0x4068ff, 0x5, 0x0, 0x3, 0xa], 0xdddd0000, 0x202}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 5m24.93407482s ago: executing program 1 (id=7711): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xb, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000100)=0x808c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20040055}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000340)={0x3, 0x0, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) 5m24.430700789s ago: executing program 1 (id=7713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f00000001c0)={0x0, 0x0, {0x4d39580f, 0x2, 0x3008, 0x3, 0xb, 0x6, 0x1}}) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = open$dir(&(0x7f0000000340)='./bus\x00', 0x48000, 0x127) fanotify_mark(0xffffffffffffffff, 0x2, 0x4000020, r4, &(0x7f0000000380)='./bus\x00') r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) r6 = socket(0x2f485722d4e4bbcd, 0x805, 0x2f) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r6, 0x0, 0xc080) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) ioctl$EVIOCSFF(r7, 0x40304580, &(0x7f0000000280)={0x57, 0x80, 0x8000, {0xd, 0x3}, {0x12, 0x3}, @ramp={0x4, 0x9, {0x401, 0x4, 0x6, 0x1ff}}}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x6, 0x1) r8 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba80000012", 0x2d}], 0x1}, 0x40840) set_mempolicy_home_node(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffd) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0200000000000000000200000a200004801c000180090001006d617371000000000c00028008000240000000170900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0) 5m23.228131548s ago: executing program 1 (id=7718): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) unshare(0x2a060400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0xc0010117, 0x0, 0x1}, {0x400000b3, 0x0, 0x7}]}) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/keys\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc880, 0x7, 0x2000277}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) getpeername(r3, &(0x7f0000001500)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000001580)=0x80) r6 = socket$kcm(0xa, 0x2, 0x73) io_setup(0x1, &(0x7f0000001040)=0x0) io_pgetevents(r7, 0xffffffffffffffff, 0x4, &(0x7f0000001300)=[{}, {}, {}, {}], &(0x7f0000001380)={0x0, 0x3938700}, &(0x7f0000001400)={&(0x7f00000013c0)={[0x2]}, 0x8}) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0xfffffe4f}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1d) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100009a36bb9f52e28e2f58e37023b8cc9bf293de6f6d0605b093d0e5699b39a795f9de4a60074647525e793ac7e73cb9e76f3a346ecb62c787f622cf9229a88bfc4cba45d8e9e8ff1d3881dcd454dddf9a8871a67d023208fd0742d25192d103d0dea6d4f9e64ad774c88adc780624e06015bad582b5d5262cd943b6b3169334a8fa9799f3b2158fbc5f31becfea7bca243f418ce7fd7b"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x20040810) 5m22.954224868s ago: executing program 1 (id=7719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000100)={0xf010000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x980915, 0xfffffffe, '\x00', @p_u8=0x0}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='mpol=prefer=']) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r7) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000c000000200001801400020065727370616e300000f4e563803cdd7c353837db00096200000000000000080003000100000018000180140002006475"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 5m22.694512844s ago: executing program 1 (id=7721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019980)=""/102400, 0x19000) sendmsg$nl_generic(r2, &(0x7f00000019c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x4}, 0x18) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m22.324050686s ago: executing program 36 (id=7721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019980)=""/102400, 0x19000) sendmsg$nl_generic(r2, &(0x7f00000019c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x4}, 0x18) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 22.292992695s ago: executing program 9 (id=8803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)={0x14, r1, 0x701, 0x70bd2f, 0x0, {0x19}}, 0x14}}, 0x0) 21.868285522s ago: executing program 9 (id=8806): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7d37]}, 0x8) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b29090930f70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0xa, 0x3, 0x0) 18.847227142s ago: executing program 9 (id=8823): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = creat(0x0, 0x12a) sendmsg$key(r4, &(0x7f0000000100)={0x10000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010003200020100000011000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500000000000a"], 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000003c0)={@multicast2, @remote, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x8, 0x1, 0x0, 0x4, {{0x49, 0x4, 0x0, 0x5, 0x124, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x4d, 0x2, [{0x5, 0x8, "4babf1fec646"}, {0x2, 0xa, "e018e1e357d44f4a"}, {0x2, 0x12, "892b213ee1db481dd56f7445ef8e0c15"}, {0x5, 0x12, "06b317e511e243883f27fbf8af05eadc"}, {0x1, 0x11, "c755a48025b15ca47df5811abcfb73"}]}, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x0, [{@empty, 0x7}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x7}, {@private=0xa010100, 0x1}, {@empty, 0x7}]}, @cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "7875e1f145f396680fb6"}, {0x2, 0xa, "b32908a897e4d3e0"}, {0x7, 0x6, "a054504d"}, {0x6, 0x12, "6da83fece5cba3dca32099c45c38637a"}, {0x6, 0x12, "67670223d9b8026932626e98c335d375"}, {0x5, 0x11, "f38f2acc4c1dad946a086424afc5d3"}, {0x1, 0xe, "27c84f47572d912f1385db3f"}, {0x2, 0x12, "707b342a0983e965032dd4ea8309270b"}]}, @timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0x8, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa1e0}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @generic={0x8, 0x2, 0x4, 0x4, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x10, 0xeb, &(0x7f0000000500)=""/235, 0x40f00, 0x8, '\x00', r7, 0x0, r5, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r5], &(0x7f0000000880)=[{0x2, 0x2, 0xb, 0x9}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xf, 0x7}, {0x5, 0x3, 0x7, 0x6}, {0x2, 0x1, 0xd, 0xb}, {0x2, 0x3, 0x7, 0xc}, {0x5, 0x1, 0x5, 0x8}, {0x2, 0x3, 0xa, 0x9}], 0x10, 0x5}, 0x94) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) creat(0x0, 0x12a) (async) sendmsg$key(r4, &(0x7f0000000100)={0x10000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010003200020100000011000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500000000000a"], 0xa0}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00'}) (async) getsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f00000003c0)={@multicast2, @remote}, &(0x7f0000000400)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000780)={'erspan0\x00', &(0x7f0000000600)={'syztnl0\x00', r6, 0x8, 0x1, 0x0, 0x4, {{0x49, 0x4, 0x0, 0x5, 0x124, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @loopback, {[@cipso={0x86, 0x4d, 0x2, [{0x5, 0x8, "4babf1fec646"}, {0x2, 0xa, "e018e1e357d44f4a"}, {0x2, 0x12, "892b213ee1db481dd56f7445ef8e0c15"}, {0x5, 0x12, "06b317e511e243883f27fbf8af05eadc"}, {0x1, 0x11, "c755a48025b15ca47df5811abcfb73"}]}, @timestamp_prespec={0x44, 0x2c, 0xd8, 0x3, 0x0, [{@empty, 0x7}, {@empty, 0x7}, {@rand_addr=0x64010102, 0x7}, {@private=0xa010100, 0x1}, {@empty, 0x7}]}, @cipso={0x86, 0x77, 0x0, [{0x5, 0xc, "7875e1f145f396680fb6"}, {0x2, 0xa, "b32908a897e4d3e0"}, {0x7, 0x6, "a054504d"}, {0x6, 0x12, "6da83fece5cba3dca32099c45c38637a"}, {0x6, 0x12, "67670223d9b8026932626e98c335d375"}, {0x5, 0x11, "f38f2acc4c1dad946a086424afc5d3"}, {0x1, 0xe, "27c84f47572d912f1385db3f"}, {0x2, 0x12, "707b342a0983e965032dd4ea8309270b"}]}, @timestamp_addr={0x44, 0x14, 0xd1, 0x1, 0x8, [{@rand_addr=0x64010102, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0xe, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa1e0}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @generic={0x8, 0x2, 0x4, 0x4, 0xf}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x10, 0xeb, &(0x7f0000000500)=""/235, 0x40f00, 0x8, '\x00', r7, 0x0, r5, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r5], &(0x7f0000000880)=[{0x2, 0x2, 0xb, 0x9}, {0x2, 0x5, 0xb, 0x8}, {0x2, 0x1, 0xf, 0x7}, {0x5, 0x3, 0x7, 0x6}, {0x2, 0x1, 0xd, 0xb}, {0x2, 0x3, 0x7, 0xc}, {0x5, 0x1, 0x5, 0x8}, {0x2, 0x3, 0xa, 0x9}], 0x10, 0x5}, 0x94) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000040)=0x2) (async) 17.959427079s ago: executing program 9 (id=8827): r0 = socket(0x29, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') pread64(r1, 0x0, 0x0, 0x1000000000) syz_emit_ethernet(0x5e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000005200000329bd7000fedbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008885}, 0x24004810) 17.793952454s ago: executing program 9 (id=8829): openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x23, 0x25, {0x25, 0x5, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x4, 0x4, 0x4, 0x10005, 0xc000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) dup2(r4, r2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) signalfd(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) 16.481340617s ago: executing program 9 (id=8834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000019380)={'vxcan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x23e, 0x9, {{0x1e, 0x4, 0x2, 0x25, 0x78, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x8, [0x80000000, 0x4, 0x16aa, 0x3, 0x0]}, @ssrr={0x89, 0x7, 0x21, [@private=0xa010100]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x10, "6e37b40312c7d6db3671c2d9a620"}, {0x6, 0x7, "bf1b8ecce7"}, {0x0, 0x11, "394efde5ed9d1b48ca1876e77198f2"}, {0x2, 0x6, "d81d3797"}, {0x7, 0x2}, {0x2, 0x9, "1168c23e283ef7"}]}]}}}}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) syz_socket_connect_nvme_tcp() socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000c00}, 0x8008) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) sync() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 13.664822757s ago: executing program 8 (id=8843): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, &(0x7f0000000040), 0x5005) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000080)='/dev/dri/card#\x00', 0x214000, &(0x7f0000000240)={@align=0x383c, {0x2, 0x7, 0x7, 0x411a}}, 0x5, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000340)=0x9}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000080), &(0x7f00000003c0)=@buf="1e62abb84c33f83d2fcdb6dbdebb5f39e0ad04bc5ffee0f4985552dc96afadf160cfb8d4dbb694cf40b7e9aa32eda1df2ad5aae1024e254ce83aa0e389c6dcd2c0cc0f4e8975752ca72ccf8ac9494feb845eceb1b70b910e677c7134f9ac115c3f2abe4da7ed9dcf67c898f3ed01eed400efccb3cab7665ac8c8fa26caf603c143b6a10ca7a21af37193331c10aa0d80195e73ae3f7eb5fc3f947f478c1b83aa068a8893ffbe9f8fa9c8f0346af63ee20121f6ea8232e4826773bde9a008fb649bf96e33aa5efaa5e30f4e7f2882f522ab59c6e8beef5e3aa6c0d15aeac8ad38fa97c889406323f20fac46fb", 0x2}, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000600)=ANY=[], 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff}, 0xc) fanotify_init(0x1, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f00000004c0)="9a9878fe19f81736ce26a0d8cb716708cdb41f22e6eda1903beee46a2908fce162b9289ec574362c38cb44fa96bd02699ac90893b2104c11152da7ceae677e6dc0760a52ecc237d51a83d9e7005a68b58174fb71705e96ae9f5ccdc079c5116f53d0", &(0x7f00000007c0)=""/106, &(0x7f0000000780)="ec03bf6de8c51fe0716b6767f0ff8389168b747405c0ecd84e6f9b2e6ee3b2283462a01aa3ef52c24672157c403610ff80479e734a5b52bbdfd092335c12", &(0x7f0000000600)="401ce025a36db4eb7807f2ec0d3c9abd0b07a4518740fe0d0528b8fb3ed7737f8835fb02a1d708e77b826899f3111bf78c9699b93ecbca2a247bec4307511c2eedc864a3ccace50eb01792602e5a5eb4bca9f50c2fcdb480811d86a72859e23583cf1080ba4e5aaef1984fdac900f4723ea165c6f44120cabc02d015a7c321fdc98e341a8c73f83a8584dca63c60f5fafb4d270e353c50d8d6f9acb4e1450000ca2389", 0x274fef73, 0xffffffffffffffff, 0x4}, 0x38) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x1000, @empty}}, 0x0, 0x9, 0x0, 0x0, 0xd2, 0x0, 0x9e}, 0x9c) sendto$inet6(r10, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0}) 12.006886273s ago: executing program 8 (id=8847): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1, 0x200000000000000}, 0x38) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 11.080135879s ago: executing program 8 (id=8850): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r1 = dup2(0xffffffffffffffff, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000080180000000700000000001c00020001009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x804, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x42002, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) poll(0x0, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x6, 0xea, 0x1000000002, 0x800, 0x0, 0x6}, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) dup2(r4, r3) 10.754626034s ago: executing program 6 (id=8851): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="cfc306", 0x3, 0x0, 0x0, 0x0) 10.055027439s ago: executing program 8 (id=8852): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) creat(&(0x7f00000003c0)='./file0\x00', 0xb1) openat(0xffffffffffffff9c, 0x0, 0x84040, 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x10001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x427e}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002c0007012bbd5000ffdb4060077c000008000180e1ffdc8018000380"], 0x34}}, 0xc010) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x302, 0x98e, 0xfe, 0xe0100000, 0x0}) 9.772845507s ago: executing program 6 (id=8853): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x0, 0x15e2) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) dup(r0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f0000000080)={'gretap0\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'pimreg\x00', &(0x7f0000000300)=@ethtool_channels={0x3d, 0x8, 0x8, 0x3, 0x0, 0x4, 0xfff, 0x5, 0xe6c1d4a9}}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) sched_getscheduler(r1) 8.801999705s ago: executing program 6 (id=8854): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) mount$bind(0x0, 0x0, 0x0, 0x2102404, 0xfeffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000300)=0x4, 0x4) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff00052406000005240200000d240f"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x4080) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000240)={0x9, 0x80000, r0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0xa0004, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c636163686561c0a133a8ea8d8161642c736d6159ec55e8726f6f743d2f6465762f6472692f6361726423002c6f626a5f757365723d2c9ee8e480da6e1cda0a736d61636b66"]) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0xe148, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x4000054) 8.374112543s ago: executing program 8 (id=8857): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000b350664dbd15f6bc0248f6063d8e157552c17eaa704cd07b346052454201faf38378d5c4a24593f0302a9a7eb441413e4e57fdfd857255089d898bdd8d5112ccbf6012fe9532abea0ac4bbfc88243ad377d1ca03db679e1db2dccb24f27ccf71c9d741b3544273b91386ea1bf8030fcc35886d8527784ce3abcce785310ee7013c5b81d9be3a006a6865f1f4ce81ae525183f7a1ff4d1598f7daaf38e1d1c2d2fc0156b8ac09d638c88d9685af6c3c622ed8005b6e74e17f9b070cb63eebf", @ANYRES16, @ANYBLOB="010025bd7000fddbdf251300000008000100", @ANYRES32=0x0, @ANYBLOB="04001380"], 0x20}}, 0x4000) 8.256437333s ago: executing program 0 (id=8858): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000000)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8) r1 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) io_uring_setup(0x5e9, &(0x7f0000000080)={0x0, 0x1539, 0x1, 0x2, 0x175}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 8.23376156s ago: executing program 8 (id=8859): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000019380)={'vxcan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x23e, 0x9, {{0x1d, 0x4, 0x2, 0x25, 0x74, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x8, [0x80000000, 0x4, 0x16aa, 0x3, 0x0]}, @ssrr={0x89, 0x7, 0x21, [@private=0xa010100]}, @cipso={0x86, 0x3d, 0x3, [{0x1, 0x10, "6e37b40312c7d6db3671c2d9a620"}, {0x6, 0x7, "bf1b8ecce7"}, {0x0, 0x11, "394efde5ed9d1b48ca1876e77198f2"}, {0x2, 0x6, "d81d3797"}, {0x2, 0x9, "1168c23e283ef7"}]}]}}}}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) syz_socket_connect_nvme_tcp() socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000c00}, 0x8008) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) sync() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 7.658081081s ago: executing program 0 (id=8860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000024000000d0000000500270012000000050017000000000006000a00ffff0000060008"], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ptrace(0x4207, 0x0) 7.39541684s ago: executing program 0 (id=8862): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000}}, 0x120) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000aa5000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000f36000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffe5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000200)="c303162bad9e3fcbe66a171740024bdbe07a95e98218", 0x16}, {&(0x7f00000013c0)="62acddb8d6f8d03b4e2f0b5dca56204668e6e4501e4870e3dc9b9863fe2791845b71ee1c53e3c2124bc5f42c08ba2faa8ce5f16dd3757e2442a82b17a2", 0x3d}, {&(0x7f0000001400)}, {&(0x7f00000014c0)="c800cffb51", 0x5}, {0x0}, {&(0x7f0000001600)="4945406d3332b6d714e1618f", 0xc}], 0x6) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [], {0x4, 0x4}}, 0x24, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x4b, "ba0af2b137d4b2d46b2c52c5bd15b547105d63f3e426f5cf097000", "895eb838028245e487746279afd4afc52f36c36a1e383cfbed8f861d06b0ce28", "3b1b766ddf1fdbb70900000000000000ee5036170a0000e000", "accc686cd42187452797772042aacd5211fd7dcd6b0400", "03d8e0d7148f792fa0702f56da64523ed98ff6d64a94891f409cfae6f5ebbbdb", "4dcf4f58bc33bbfc68d7e2db", 0xfd, 0xe0, 0x40002, 0x2, 0x5}}) 6.697699779s ago: executing program 0 (id=8864): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x3) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000}}, 0x120) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000aa5000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000f36000/0xd000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffe5c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(r0, &(0x7f0000001640)=[{&(0x7f0000000200)="c303162bad9e3fcbe66a171740024bdbe07a95e98218", 0x16}, {&(0x7f00000013c0)="62acddb8d6f8d03b4e2f0b5dca56204668e6e4501e4870e3dc9b9863fe2791845b71ee1c53e3c2124bc5f42c08ba2faa8ce5f16dd3757e2442a82b17a2", 0x3d}, {&(0x7f0000001400)}, {&(0x7f00000014c0)="c800cffb51", 0x5}, {0x0}, {&(0x7f0000001600)="4945406d3332b6d714e1618f", 0xc}], 0x6) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'geneve0\x00', &(0x7f0000000480)=@ethtool_drvinfo={0x4b, "ba0af2b137d4b2d46b2c52c5bd15b547105d63f3e426f5cf097000", "895eb838028245e487746279afd4afc52f36c36a1e383cfbed8f861d06b0ce28", "3b1b766ddf1fdbb70900000000000000ee5036170a0000e000", "accc686cd42187452797772042aacd5211fd7dcd6b0400", "03d8e0d7148f792fa0702f56da64523ed98ff6d64a94891f409cfae6f5ebbbdb", "4dcf4f58bc33bbfc68d7e2db", 0xfd, 0xe0, 0x40002, 0x2, 0x5}}) 6.080017839s ago: executing program 0 (id=8865): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x10}}, 0x8041) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x10, 0xffff}, {0x7, 0xfff2}, {0xffe0, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xc0, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 5.92968345s ago: executing program 0 (id=8867): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x1d4c, &(0x7f0000000140)={0x0, 0x64b13e, 0x80, 0x6, 0x58}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000100)=0xc) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0xa) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f00000004c0)={r5, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r7, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r6, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r8}) 5.202552568s ago: executing program 6 (id=8869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000007"], 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) io_uring_setup(0x1162, &(0x7f0000002380)={0x0, 0x2fd9, 0x1fffff}) 4.657755261s ago: executing program 3 (id=8870): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x0, &(0x7f0000000000)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x8) r1 = socket$kcm(0x2, 0x922000000001, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$sock_attach_bpf(r1, 0x1, 0x25, &(0x7f00000002c0), 0x8) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) io_uring_setup(0x5e9, &(0x7f0000000080)={0x0, 0x1539, 0x1, 0x2, 0x175}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 3.819816324s ago: executing program 6 (id=8871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000a00)={&(0x7f00000001c0)=@can, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000240)="ed4f3356867e5c0e19c0328e266521e7e3a8fd58dadd5c586e11fcf09bb2dbd596539db0ec4349f1bea28faef5511f7a2dffea07955235b7f5a4f901b9c91318197e2bfc74782c71709cbac93893fba7b38984f7c655958c1da4710090c464b9fc71464feb95453613df51", 0x6b}, {&(0x7f00000002c0)="7108c69a869b0e850eabc56ea6ccbbb4e0097a0588d9f2478be2f3c0cd7b70e4a97bc0e52bef4609f2a85ea50034e17e821332fb7a09798d00d73f8275c67d09853d43f842869885c303358bf25cb3d1b8bc9c4a1d7b8cdec7bd6c812a7e89fa611ea4bd0792fc64e1a83a77ef7d3e045149972c1d9278999684ba2b5b97727d720b9f379ae394869d5914170a3157671139235c567f4b3f3614a9a66354fae009", 0xa1}, {&(0x7f00000007c0)="040d8d55bac8af5eb58639ca5e13da1c5f74d363b9b4de7b674dd8c9b676b365769077872eb442bd05bc7e499bfd9235848ddbb6749a5d8269aafb8575a6c3098f9536db4d5b5e88ce9f72cd075172c394954ebd4de411308b9f3bce03ab7a8799af436d821c69e3efee72ffe3e88ea836dfb160c28b437e1a35ba5320c75c292790a170e3a9222c017ed224145de69f2fc0cbcb5eae0c5218f407c87da42da2ba7d75a9795efef3b6676da3b506de998fcb6aa8899af731578e20a3035f443f0b1ac476cdb8f51479922cb1baadfde152282b332a61709d517eaf98feaf73ffd2517f7dda2f9ac5cbe2", 0xea}], 0x3, &(0x7f0000000900)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xb56}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0xfffffffa}}, @mark={{0x14, 0x1, 0x24, 0xd9c}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffb}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14}}], 0xd8}, 0x4000) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010603010902120001000000000904"], 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='scalable', 0x8) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x40, 0x17, 0x6, "0fdb9fa60b77"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="200507"], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="400d03"], 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000fc0)={0x14, &(0x7f0000000ec0)={0x0, 0x21, 0xb3, {0xb3, 0xf, "9343975b63bea380a937b57092784d0231a2353e0b56a30a44beb7522fe99f346b0ec1e937d3473fc363c6dafe407bdea380ba4438878574655f88037e47ca40902ac8be626ffc1bfff259e812f785e31363677c8520cba5f76f80f14a8c9decc8ee177eb1b5ede727731eca8fba8dd8359f3f59d6432fb9598ea690c95a7269c54089a8c1f04010199494c665ab6356917e545eb28f1697797e0bc9138f8cbb74ea6d7c88bb558e4e3810c509af3d36d3"}}, &(0x7f0000000f80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, &(0x7f0000001140)={0x2c, &(0x7f0000001000)={0x40, 0x17, 0x8, "3f008ff9d44438e6"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000010c0)={0xc0, 0x5, 0x6, "c19a00d7bf09"}, &(0x7f0000001100)}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, 0x0, r1, &(0x7f0000000340)='./file0\x00', 0x137) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000600)=""/4, 0x4, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000500)='GPL\x00', 0xa3d1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x10, 0x80, 0x69, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0x8001, 0x3}, {0x6, 0x24, 0x1a, 0x2a, 0x30}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xb7, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5c, 0x4, 0xf7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x1, 0xc}}}}}}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x201, 0x4c, 0x4, 0x8, 0x10, 0x5}, 0x19, &(0x7f0000000a80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "98c6d11750be62a78f0759e4efd22c5e"}]}, 0x8, [{0x96, &(0x7f0000000ac0)=@string={0x96, 0x3, "078d57ff75a7b00c2041a0fec4b5102edc8f0d476b078c83a681763998e77a5973743043d51d5b77562940dc147c6807191f3e8b7b01e5b363456aacde1c8f77bb17fc01ae22351295d74a702d3ea672ecc73a24d745e6ff130397cd23d2b96662c909a78d5db96f45f97bed7b41620f8b32131ac1e99c6490cde7db1f64d9fc7ad5d9d3656b7ff558df530d6877f9eca1350c01"}}, {0x96, &(0x7f0000000b80)=@string={0x96, 0x3, "dc561a8c040bc7de7abc012b78a88ef9edb45e39c566f7178cca00aea9a0d389f4a593204b0985d2934a480dc9fc387dadeb8de5a0ce0f90e0b2b809027c2c586000ac1b57e4b79663722084cf08d95c663a3645820d40691053a5f1f4b57a2625397575a0a9dd6f70027a4a62cbbce01bc081e44c63aa795477713b93c2d417b384f2a1ce3109c278ba29d3aafaa953883db0d1"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1809}}, {0x5f, &(0x7f0000000c80)=@string={0x5f, 0x3, "60be45d0f20981fcbd0419aea7eb748fc8203b78cd056ea61b5516143a3315c271d6964203117f37edfdaeb3d4a377cd17cb33d34cf7d187d39c0f91cd2a658750994058e3b65330db52197fb1b7fffdbc0c20642ec81d457df4ea4cc5"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x448}}, {0x7c, &(0x7f0000000d40)=@string={0x7c, 0x3, "981cd572368d55f81adbe4f4199f470c755de0891a2adaf8e7ba6777ed243c3c24921ff3d147dbbeae12fb166654493b31033f375259a87d8d975ffb192e8dfc3df83eeace2605be8c419576963f32ff2f5883d0049cfb3d99a6266d708adfec0e886dd41a915348af1cf406cf62758db4b7aa7af80505490ca9"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x1401}}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000140)={0x3, r5}) 3.483135785s ago: executing program 3 (id=8872): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) read$FUSE(r2, &(0x7f0000003b80)={0x2020}, 0x2020) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) read$FUSE(r2, &(0x7f0000005bc0)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r7, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000007c0)='numa_maps\x00') read$FUSE(r8, &(0x7f0000002840)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40014) 2.542149618s ago: executing program 3 (id=8873): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004002}, 0x8040) unshare(0x28000600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r6, 0x0, 0x0, 0x6) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.161876346s ago: executing program 3 (id=8874): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019980)=""/102400, 0x19000) sendmsg$nl_generic(r2, &(0x7f00000019c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000004ac0)=ANY=[@ANYBLOB="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"], 0x12b0}, 0x1, 0x0, 0x0, 0x4}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000003d80)=ANY=[@ANYBLOB="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"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000001a40)=0x0) sendmsg$nl_generic(r6, &(0x7f0000003d40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000005dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x2250}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x94, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}, @exit_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x110b, 0x2}}, &(0x7f00000002c0)={0x0, 0xfffffffffffffd53, 0x30}}}], 0x0, 0x0, 0x0}) 1.889674954s ago: executing program 3 (id=8875): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000500)) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@empty, {0x0, 0x4, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_clone3(&(0x7f0000001940)={0x4008000, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0), {0x33}, &(0x7f0000000700)=""/15, 0xf, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000019c0)=r4, 0x12) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @local}, 0x8) 1.791386677s ago: executing program 3 (id=8876): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x7, 0x7, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x9, 0x687, 0x6, 0xfffa}, 0x1d, [0x108e8fd7, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x20002, 0x20003, 0xffffff00, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x7, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0x9, 0x1f461e2c, 0x1000004, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c72, 0x80000000, 0xf28, 0xffffffff, 0x11, 0x4, 0x2, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0xcb, 0x0, 0x7, 0x6, 0x2000008, 0x5, 0x1, 0x40], [0x10000009, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e7, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1001, 0xfffffffc, 0xe0000000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0xfffffffc, 0x0, 0xfffffffe, 0x8, 0x4, 0x10001, 0x9, 0x3fe, 0x401, 0x400006, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x5, 0x5, 0x6, 0xb, 0x38, 0xfffffffe, 0x5, 0x16c, 0x2, 0x7f, 0x7, 0x1, 0x3, 0x9, 0x425, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0x9, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0x2, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0xfffffffa, 0x2, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0xe, 0x8f, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0xff, 0xf, 0x5, 0x1, 0x6, 0x5, 0x0, 0x10000003, 0xfffffffe, 0x1ff, 0x3, 0x7, 0xfd, 0x3, 0x6, 0x10003, 0x6, 0x7fff, 0x1, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x1d, 0xffffffff, 0x80000004, 0x7, 0x8, 0xc8, 0xee5, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x5, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x6, 0xc, 0x7, 0x5, 0x6c1b, 0x800, 0x9, 0x8000009, 0xb1c, 0x1, 0x1fd, 0xffff3441, 0xfff]}, 0x45c) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000880)=@allocspi={0x23c, 0x16, 0x20, 0x70bd2c, 0x25dfdbfc, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x4e23, 0x8, 0x4e20, 0x6, 0x2, 0x20, 0xa0, 0x2, r2, r3}, {@in=@multicast2, 0x4d6, 0x32}, @in=@local, {0xb41c, 0x4, 0xa4d5, 0x1, 0x4, 0x9, 0x9, 0xb}, {0x3, 0x7a45, 0x4, 0x6713}, {0x0, 0x8, 0x1000}, 0x70bd25, 0x3506, 0x2, 0x3, 0x4, 0x14}, 0xfffffff8, 0x7}, [@algo_auth_trunc={0x141, 0x14, {{'cmac-aes-neon\x00'}, 0x7a8, 0x2c0, "aa7dc542448f491b90bb89fd600d3d20c6fe32b9952a96b6e6f5fdecd97b2d6b2bd876d249c6d058e12a3896a7c7ca48fdc85e5a2e0fd2a1cab389896fac98e24ed06a33caf3704309e331fc90f8418998deca1a9adf2650eff6706c00c096d8c16e5a94c6722fbde03d695a0186ed71e59cd5bd4463c9e618e9a39fce16f06b9e62f732eae61a2b7327595c768eb770e0c8eac0c668741a20b2c194241e6a079eb55c60fbbb2d3eff26fd1595140fb3bff8645806136cc92db369f1ef1a853cb2b9f5ee3718a2e8eda7d4cf783052145422f5e8f90a1b9593a82a20b61f5a2565a0c8aff059d1b9c19a60c7c2168f2012e706978d"}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40014}, 0x40800) fcntl$setpipe(r1, 0x407, 0x4000004) write$P9_RLOCK(r1, &(0x7f0000000200)={0x8, 0x35, 0x2}, 0x8) fcntl$setpipe(r1, 0x407, 0x2) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) r6 = syz_open_pts(r4, 0x20800) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x44) 518.931375ms ago: executing program 6 (id=8877): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x12bb81, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0xa, 0x0, 0xb49, 0x2, 0x1, 0xfffffff0, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0xfd, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r1, &(0x7f0000000200)=ANY=[@ANYRES32=r3], &(0x7f0000000280)='+_\x95+\x00', 0x5, 0x2) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES16=r4, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYRES16=r0], 0x15) request_key(0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) r7 = dup2(0xffffffffffffffff, r1) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) 0s ago: executing program 37 (id=8834): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000019380)={'vxcan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x23e, 0x9, {{0x1e, 0x4, 0x2, 0x25, 0x78, 0x65, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x55, 0x0, 0x8, [0x80000000, 0x4, 0x16aa, 0x3, 0x0]}, @ssrr={0x89, 0x7, 0x21, [@private=0xa010100]}, @cipso={0x86, 0x3f, 0x3, [{0x1, 0x10, "6e37b40312c7d6db3671c2d9a620"}, {0x6, 0x7, "bf1b8ecce7"}, {0x0, 0x11, "394efde5ed9d1b48ca1876e77198f2"}, {0x2, 0x6, "d81d3797"}, {0x7, 0x2}, {0x2, 0x9, "1168c23e283ef7"}]}]}}}}}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x756}) syz_socket_connect_nvme_tcp() socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000c00}, 0x8008) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) sync() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x6, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) kernel console output (not intermixed with test programs): ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1959.136801][ T30] audit: type=1400 audit(1817.080:97952): avc: denied { ioctl } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1959.205295][ T30] audit: type=1400 audit(1817.348:97953): avc: denied { read write } for pid=5828 comm="syz.0.8464" name="virtual_nci" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.230015][ T30] audit: type=1400 audit(1817.348:97954): avc: denied { read write open } for pid=5828 comm="syz.0.8464" path="/dev/virtual_nci" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1959.336165][ T5833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1959.354564][ T5834] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1959.567151][ T5842] FAULT_INJECTION: forcing a failure. [ 1959.567151][ T5842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1959.588515][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.8466 Tainted: G L syzkaller #0 PREEMPT(full) [ 1959.588544][ T5842] Tainted: [L]=SOFTLOCKUP [ 1959.588550][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1959.588560][ T5842] Call Trace: [ 1959.588565][ T5842] [ 1959.588572][ T5842] dump_stack_lvl+0x100/0x190 [ 1959.588595][ T5842] should_fail_ex.cold+0x5/0xa [ 1959.588615][ T5842] _copy_to_user+0x32/0xd0 [ 1959.588634][ T5842] simple_read_from_buffer+0xcb/0x170 [ 1959.588661][ T5842] proc_fail_nth_read+0x1af/0x230 [ 1959.588693][ T5842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1959.588719][ T5842] ? security_file_permission+0x76/0x210 [ 1959.588744][ T5842] ? rw_verify_area+0xce/0x6d0 [ 1959.588767][ T5842] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1959.588793][ T5842] vfs_read+0x1e4/0xb40 [ 1959.588818][ T5842] ? __pfx_vfs_read+0x10/0x10 [ 1959.588842][ T5842] ? rcu_is_watching+0x12/0xc0 [ 1959.588864][ T5842] ? __fget_files+0x21f/0x3d0 [ 1959.588884][ T5842] ksys_read+0x12a/0x250 [ 1959.588908][ T5842] ? __pfx_ksys_read+0x10/0x10 [ 1959.588934][ T5842] ? rcu_is_watching+0x12/0xc0 [ 1959.588954][ T5842] do_syscall_64+0x115/0x870 [ 1959.588973][ T5842] ? clear_bhb_loop+0x40/0x90 [ 1959.588992][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.589009][ T5842] RIP: 0033:0x7f785b55d68e [ 1959.589022][ T5842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1959.589039][ T5842] RSP: 002b:00007f785c50cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1959.589056][ T5842] RAX: ffffffffffffffda RBX: 00007f785c50d6c0 RCX: 00007f785b55d68e [ 1959.589067][ T5842] RDX: 000000000000000f RSI: 00007f785c50d0a0 RDI: 0000000000000003 [ 1959.589078][ T5842] RBP: 00007f785c50d090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.589088][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1959.589098][ T5842] R13: 00007f785b816128 R14: 00007f785b816090 R15: 00007fff63878388 [ 1959.589114][ T5842] [ 1960.501701][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1960.533491][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1960.563745][ T5853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8470'. [ 1960.567864][ T10] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1960.634774][ T10] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1960.688569][ T5859] fuse: Bad value for 'fd' [ 1960.701036][ T5858] 9p: Bad value for 'rfdno' [ 1960.737307][ T10] usb 10-1: USB disconnect, device number 40 [ 1961.310523][ T2170] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1961.588049][ T2170] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1961.633756][ T2170] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.699756][ T2170] usb 9-1: config 0 descriptor?? [ 1961.726250][ T3558] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1961.750163][ T2170] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1961.917524][ T3558] usb 4-1: device descriptor read/64, error -71 [ 1962.061588][ T5721] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1962.180719][ T3558] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1962.195787][ T2170] cpia1 9-1:0.0: unexpected state after lo power cmd: 01 [ 1962.251604][ T5721] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1962.264764][ T5721] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1962.281857][ T5721] usb 10-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1962.293431][ T5721] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.305183][ T5721] usb 10-1: config 0 descriptor?? [ 1962.343164][ T3558] usb 4-1: device descriptor read/64, error -71 [ 1962.474235][ T3558] usb usb4-port1: attempt power cycle [ 1962.593956][ T2170] gspca_cpia1: usb_control_msg 01, error -71 [ 1962.607410][ T2170] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1962.632305][ T2170] usb 9-1: USB disconnect, device number 74 [ 1962.775345][ T5721] sony 0003:054C:1000.0051: ignoring exceeding usage max [ 1962.803011][ T5721] sony 0003:054C:1000.0051: hidraw0: USB HID v0.7f Device [HID 054c:1000] on usb-dummy_hcd.9-1/input0 [ 1962.826703][ T5721] sony 0003:054C:1000.0051: failed to claim input [ 1962.863319][ T3558] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1962.886937][ T3558] usb 4-1: device descriptor read/8, error -71 [ 1963.285974][ T3558] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1963.353860][ T2170] usb 10-1: USB disconnect, device number 41 [ 1963.364175][ T3558] usb 4-1: device descriptor read/8, error -71 [ 1963.505843][ T3558] usb usb4-port1: unable to enumerate USB device [ 1963.655741][ T30] kauditd_printk_skb: 2748 callbacks suppressed [ 1963.655951][ T30] audit: type=1400 audit(1821.565:100703): avc: denied { write } for pid=5865 comm="syz.3.8474" path="socket:[192101]" dev="sockfs" ino=192101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1963.740839][ T5867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1963.748483][ T30] audit: type=1400 audit(1821.584:100704): avc: denied { write } for pid=5865 comm="syz.3.8474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1963.769693][ T5867] audit: audit_lost=3599 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.778817][ T5867] audit: backlog limit exceeded [ 1963.785374][ T5867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1963.791996][ T30] audit: type=1400 audit(1821.584:100705): avc: denied { write } for pid=5865 comm="syz.3.8474" path="socket:[192101]" dev="sockfs" ino=192101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1963.806146][ T5867] audit: audit_lost=3600 audit_rate_limit=0 audit_backlog_limit=64 [ 1963.825439][ T5867] audit: backlog limit exceeded [ 1963.831672][ T5867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1966.073135][ T5922] fuse: Bad value for 'fd' [ 1969.278799][ T30] kauditd_printk_skb: 386 callbacks suppressed [ 1969.278826][ T30] audit: type=1400 audit(1826.742:101090): avc: denied { create } for pid=5953 comm="syz.8.8497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.355594][ T30] audit: type=1400 audit(1826.751:101091): avc: denied { create } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.416920][ T30] audit: type=1400 audit(1826.751:101092): avc: denied { create } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.479005][ T30] audit: type=1400 audit(1826.751:101093): avc: denied { write } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.535198][ T30] audit: type=1400 audit(1826.779:101094): avc: denied { read } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.596221][ T30] audit: type=1400 audit(1826.779:101095): avc: denied { read } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.654777][ T30] audit: type=1400 audit(1826.779:101096): avc: denied { write } for pid=5953 comm="syz.8.8497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.680935][ T30] audit: type=1400 audit(1826.779:101097): avc: denied { read } for pid=5953 comm="syz.8.8497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.702153][ T30] audit: type=1400 audit(1826.779:101098): avc: denied { read } for pid=5953 comm="syz.8.8497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1969.724605][ T30] audit: type=1400 audit(1826.779:101099): avc: denied { create } for pid=5959 comm="syz.9.8499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1969.891906][ T5966] 9p: Bad value for 'rfdno' [ 1970.016462][ T5968] vxcan0: tx address claim with dlc 0 [ 1970.106213][ T5971] vxcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1970.160741][ T5973] fuse: Bad value for 'fd' [ 1970.436093][ T5979] netlink: 436 bytes leftover after parsing attributes in process `syz.9.8504'. [ 1970.445298][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8504'. [ 1971.231261][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8505'. [ 1971.943489][ T5991] lo speed is unknown, defaulting to 1000 [ 1972.608901][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8512'. [ 1973.947377][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8506'. [ 1973.968744][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8506'. [ 1974.561257][ T5721] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1974.751118][ T5721] usb 10-1: Using ep0 maxpacket: 32 [ 1974.756997][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 1974.757012][ T30] audit: type=1400 audit(1831.799:101369): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.759097][ T5721] usb 10-1: config 0 has an invalid interface number: 16 but max is 0 [ 1974.763364][ T30] audit: type=1400 audit(1831.799:101370): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.791368][ T5721] usb 10-1: config 0 has no interface number 0 [ 1974.820675][ T30] audit: type=1400 audit(1831.799:101371): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.820711][ T30] audit: type=1400 audit(1831.799:101372): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.820742][ T30] audit: type=1400 audit(1831.799:101373): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.820772][ T30] audit: type=1400 audit(1831.836:101374): avc: denied { ioctl } for pid=6024 comm="syz.9.8517" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1974.910120][ T30] audit: type=1400 audit(1831.938:101375): avc: denied { read write } for pid=32156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1974.980028][ T30] audit: type=1400 audit(1831.938:101376): avc: denied { read write open } for pid=32156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1974.980225][ T5721] usb 10-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1975.018666][ T5721] usb 10-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1975.026851][ T30] audit: type=1400 audit(1831.938:101377): avc: denied { ioctl } for pid=32156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1975.035205][ T5721] usb 10-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1975.054783][ T30] audit: type=1400 audit(1832.039:101378): avc: denied { read } for pid=6032 comm="syz.8.8519" dev="nsfs" ino=4026533836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1975.065483][ T5721] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.094182][ T5721] usb 10-1: Product: syz [ 1975.116486][ T5721] usb 10-1: Manufacturer: syz [ 1975.132185][ T5721] usb 10-1: SerialNumber: syz [ 1975.207860][ T5721] usb 10-1: config 0 descriptor?? [ 1975.215415][ T6025] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1975.223566][ T6025] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1975.235299][ T5721] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1975.376430][ T2170] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1975.846097][ T2170] usb 9-1: Using ep0 maxpacket: 8 [ 1975.864001][ T2170] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1975.880260][ T2170] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1975.923290][ T2170] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1975.955678][ T2170] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1975.986518][ T2170] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1976.001690][ T2170] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1976.022943][ T2170] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.270347][ T2170] usb 9-1: GET_CAPABILITIES returned 0 [ 1976.281539][ T2170] usbtmc 9-1:16.0: can't read capabilities [ 1976.490049][ T5721] usb 9-1: USB disconnect, device number 75 [ 1976.636829][ T2170] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1976.906443][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8527'. [ 1976.972734][ T2170] usb 4-1: Using ep0 maxpacket: 32 [ 1976.983471][ T2170] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 1976.991974][ T2170] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1977.001199][ T2170] usb 4-1: config 0 has no interface number 0 [ 1977.012069][ T2170] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1977.021251][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1977.029413][ T2170] usb 4-1: Product: syz [ 1977.033572][ T2170] usb 4-1: Manufacturer: syz [ 1977.038217][ T2170] usb 4-1: SerialNumber: syz [ 1977.045142][ T2170] usb 4-1: config 0 descriptor?? [ 1977.481480][ T6064] No such timeout policy "syz0" [ 1977.563546][ T2170] usb 10-1: USB disconnect, device number 42 [ 1977.866439][ T2170] usb 4-1: USB disconnect, device number 34 [ 1978.507928][ T6071] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8529'. [ 1978.556260][ T6073] binder: 6072:6073 ioctl ae01 b returned -22 [ 1978.813572][ T6078] 9p: Bad value for 'wfdno' [ 1979.853896][ T6103] netlink: 260 bytes leftover after parsing attributes in process `syz.3.8540'. [ 1979.973148][ T6106] FAULT_INJECTION: forcing a failure. [ 1979.973148][ T6106] name failslab, interval 1, probability 0, space 0, times 0 [ 1979.985923][ T6106] CPU: 0 UID: 0 PID: 6106 Comm: syz.3.8541 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.985952][ T6106] Tainted: [L]=SOFTLOCKUP [ 1979.985959][ T6106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1979.985971][ T6106] Call Trace: [ 1979.985979][ T6106] [ 1979.985986][ T6106] dump_stack_lvl+0x100/0x190 [ 1979.986014][ T6106] should_fail_ex.cold+0x5/0xa [ 1979.986035][ T6106] ? kmem_cache_alloc_node_noprof+0x5b/0x6f0 [ 1979.986061][ T6106] should_failslab+0xc2/0x120 [ 1979.986089][ T6106] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1979.986113][ T6106] ? __alloc_skb+0x140/0x710 [ 1979.986137][ T6106] ? __alloc_skb+0x5b7/0x710 [ 1979.986162][ T6106] __alloc_skb+0x140/0x710 [ 1979.986185][ T6106] ? __alloc_skb+0x5b7/0x710 [ 1979.986208][ T6106] ? __pfx___alloc_skb+0x10/0x10 [ 1979.986231][ T6106] ? netlink_autobind.isra.0+0x160/0x370 [ 1979.986255][ T6106] netlink_alloc_large_skb+0x69/0x150 [ 1979.986277][ T6106] netlink_sendmsg+0x680/0xda0 [ 1979.986299][ T6106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.986324][ T6106] ____sys_sendmsg+0x9e1/0xb70 [ 1979.986343][ T6106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1979.986364][ T6106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1979.986386][ T6106] ? kstrtouint_from_user+0x13c/0x1d0 [ 1979.986414][ T6106] ___sys_sendmsg+0x190/0x1e0 [ 1979.986440][ T6106] ? __pfx____sys_sendmsg+0x10/0x10 [ 1979.986461][ T6106] ? get_pid_task+0x106/0x250 [ 1979.986486][ T6106] ? rcu_is_watching+0x12/0xc0 [ 1979.986516][ T6106] __sys_sendmsg+0x160/0x210 [ 1979.986541][ T6106] ? __pfx___sys_sendmsg+0x10/0x10 [ 1979.986571][ T6106] ? rcu_is_watching+0x12/0xc0 [ 1979.986593][ T6106] do_syscall_64+0x115/0x870 [ 1979.986613][ T6106] ? clear_bhb_loop+0x40/0x90 [ 1979.986634][ T6106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1979.986653][ T6106] RIP: 0033:0x7f0e0919ce59 [ 1979.986667][ T6106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1979.986685][ T6106] RSP: 002b:00007f0e0a10b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1979.986703][ T6106] RAX: ffffffffffffffda RBX: 00007f0e09416090 RCX: 00007f0e0919ce59 [ 1979.986715][ T6106] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 000000000000000b [ 1979.986726][ T6106] RBP: 00007f0e0a10b090 R08: 0000000000000000 R09: 0000000000000000 [ 1979.986737][ T6106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1979.986747][ T6106] R13: 00007f0e09416128 R14: 00007f0e09416090 R15: 00007ffeb4bb60a8 [ 1979.986764][ T6106] [ 1979.987858][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8541'. [ 1980.429672][ T653] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1980.448916][ T30] kauditd_printk_skb: 417 callbacks suppressed [ 1980.448967][ T30] audit: type=1400 audit(1836.911:101796): avc: denied { map_create } for pid=6104 comm="syz.3.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1980.816102][ T653] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1980.835511][ T30] audit: type=1400 audit(1836.921:101797): avc: denied { map_create } for pid=6104 comm="syz.3.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1980.872664][ T653] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1980.926980][ T653] usb 9-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 1980.969787][ T30] audit: type=1400 audit(1836.921:101798): avc: denied { map_read map_write } for pid=6104 comm="syz.3.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.001798][ T653] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.184133][ T653] usb 9-1: config 0 descriptor?? [ 1981.190492][ T30] audit: type=1400 audit(1836.921:101799): avc: denied { prog_load } for pid=6104 comm="syz.3.8541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1981.211481][ T30] audit: type=1400 audit(1836.921:101800): avc: denied { bpf } for pid=6104 comm="syz.3.8541" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1981.332195][ T6122] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1981.338763][ T6122] audit: audit_lost=3602 audit_rate_limit=0 audit_backlog_limit=64 [ 1981.346738][ T6122] audit: backlog limit exceeded [ 1981.363340][ T6117] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1981.369890][ T6117] audit: audit_lost=3603 audit_rate_limit=0 audit_backlog_limit=64 [ 1981.486054][ T6125] FAULT_INJECTION: forcing a failure. [ 1981.486054][ T6125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1981.499517][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.3.8545 Tainted: G L syzkaller #0 PREEMPT(full) [ 1981.499548][ T6125] Tainted: [L]=SOFTLOCKUP [ 1981.499555][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1981.499566][ T6125] Call Trace: [ 1981.499573][ T6125] [ 1981.499580][ T6125] dump_stack_lvl+0x100/0x190 [ 1981.499604][ T6125] should_fail_ex.cold+0x5/0xa [ 1981.499628][ T6125] _copy_from_user+0x2e/0xd0 [ 1981.499649][ T6125] userio_char_write+0xc1/0x450 [ 1981.499667][ T6125] ? __pfx_userio_char_write+0x10/0x10 [ 1981.499684][ T6125] ? bpf_struct_ops_prepare_trampoline+0x3a0/0x420 [ 1981.499707][ T6125] ? security_file_permission+0x76/0x210 [ 1981.499733][ T6125] ? rw_verify_area+0xce/0x6d0 [ 1981.499758][ T6125] vfs_write+0x2aa/0x1050 [ 1981.499784][ T6125] ? __pfx_userio_char_write+0x10/0x10 [ 1981.499800][ T6125] ? lock_release+0x24d/0x310 [ 1981.499818][ T6125] ? __pfx_vfs_write+0x10/0x10 [ 1981.499842][ T6125] ? __fget_files+0x215/0x3d0 [ 1981.499859][ T6125] ? rcu_is_watching+0x12/0xc0 [ 1981.499880][ T6125] ? __fget_files+0x215/0x3d0 [ 1981.499896][ T6125] ? lock_release+0x24d/0x310 [ 1981.499913][ T6125] ? __fget_files+0x21f/0x3d0 [ 1981.499933][ T6125] ksys_write+0x12a/0x250 [ 1981.499959][ T6125] ? __pfx_ksys_write+0x10/0x10 [ 1981.499985][ T6125] ? rcu_is_watching+0x12/0xc0 [ 1981.500006][ T6125] do_syscall_64+0x115/0x870 [ 1981.500026][ T6125] ? clear_bhb_loop+0x40/0x90 [ 1981.500046][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1981.500063][ T6125] RIP: 0033:0x7f0e0919ce59 [ 1981.500078][ T6125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1981.500095][ T6125] RSP: 002b:00007f0e0a0ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1981.500114][ T6125] RAX: ffffffffffffffda RBX: 00007f0e09416180 RCX: 00007f0e0919ce59 [ 1981.500126][ T6125] RDX: 0000000000000002 RSI: 0000200000000580 RDI: 0000000000000003 [ 1981.500136][ T6125] RBP: 00007f0e0a0ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1981.500147][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1981.500158][ T6125] R13: 00007f0e09416218 R14: 00007f0e09416180 R15: 00007ffeb4bb60a8 [ 1981.500176][ T6125] [ 1981.511958][ T6126] fuse: Bad value for 'fd' [ 1981.646174][ T6127] misc userio: The device must be registered before sending interrupts [ 1981.935770][ T653] sony 0003:054C:1000.0052: ignoring exceeding usage max [ 1982.032598][ T653] sony 0003:054C:1000.0052: hidraw0: USB HID v0.7f Device [HID 054c:1000] on usb-dummy_hcd.8-1/input0 [ 1982.082156][ T653] sony 0003:054C:1000.0052: failed to claim input [ 1983.435020][ T6153] bridge0: entered allmulticast mode [ 1983.837933][ T653] usb 9-1: USB disconnect, device number 76 [ 1983.896072][ T6154] SELinux: syz.3.8551 (6154) wrote to user. This is no longer supported. [ 1983.958605][ T6151] lo speed is unknown, defaulting to 1000 [ 1984.377351][ T6165] binder: 6160:6165 ioctl 4018620d 0 returned -22 [ 1984.850707][ T803] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1985.026254][ T803] usb 4-1: Using ep0 maxpacket: 16 [ 1985.039331][ T803] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1985.049910][ T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1985.067809][ T803] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1985.086547][ T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.096174][ T803] usb 4-1: Product: syz [ 1985.104954][ T803] usb 4-1: Manufacturer: syz [ 1985.116765][ T803] usb 4-1: SerialNumber: syz [ 1985.150363][ T803] usb 4-1: 0:2 : does not exist [ 1985.163326][ T803] usb 4-1: unit 9 not found! [ 1985.409880][ T803] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 1985.442377][ T803] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 1985.458533][ T803] usb 4-1: 4:0: cannot get min/max values for control 7 (id 4) [ 1985.459454][ T6194] syzkaller1: entered allmulticast mode [ 1985.471268][ T803] usb 4-1: 4:0: cannot get min/max values for control 8 (id 4) [ 1985.482325][ T803] usb 4-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1985.497580][ T803] usb 4-1: 4:0: cannot get min/max values for control 10 (id 4) [ 1985.529391][ T803] usb 4-1: USB disconnect, device number 35 [ 1985.584086][T26443] udevd[26443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1985.884513][ T30] kauditd_printk_skb: 420 callbacks suppressed [ 1985.884529][ T30] audit: type=1400 audit(1842.070:102184): avc: denied { read write } for pid=32156 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1985.974076][ T30] audit: type=1400 audit(1842.070:102185): avc: denied { read write } for pid=2599 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1986.082081][ T30] audit: type=1400 audit(1842.070:102186): avc: denied { read write open } for pid=2599 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1986.129556][ T30] audit: type=1400 audit(1842.070:102187): avc: denied { ioctl } for pid=2599 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1986.157127][ T30] audit: type=1400 audit(1842.116:102188): avc: denied { read write open } for pid=32156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1986.208531][ T30] audit: type=1400 audit(1842.116:102189): avc: denied { ioctl } for pid=32156 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1986.284553][ T30] audit: type=1400 audit(1842.199:102190): avc: denied { read write } for pid=6201 comm="syz.8.8565" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.309972][ T2170] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1986.340545][ T30] audit: type=1400 audit(1842.199:102191): avc: denied { read write open } for pid=6201 comm="syz.8.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.384538][ T30] audit: type=1400 audit(1842.199:102192): avc: denied { ioctl } for pid=6201 comm="syz.8.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.467750][ T30] audit: type=1400 audit(1842.208:102193): avc: denied { ioctl } for pid=6201 comm="syz.8.8565" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1986.847107][ T2170] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1986.858070][ T2170] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1986.879512][ T2170] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1986.917915][ T2170] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1986.945457][ T2170] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1986.967849][ T2170] usb 9-1: Product: syz [ 1986.972118][ T2170] usb 9-1: Manufacturer: syz [ 1986.979600][ T2170] usb 9-1: SerialNumber: syz [ 1987.216640][ T2170] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 77 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1987.680607][ T803] usb 9-1: USB disconnect, device number 77 [ 1987.694346][ T803] usblp0: removed [ 1987.990548][ T6247] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8571'. [ 1988.196639][ T6249] binder: BINDER_SET_CONTEXT_MGR already set [ 1988.214351][ T6249] binder: 6245:6249 ioctl 4018620d 200000000100 returned -16 [ 1988.370444][ T6253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=6253 comm=syz.6.8573 [ 1988.378520][ T6252] binder: BINDER_SET_CONTEXT_MGR already set [ 1988.389594][ T6252] binder: 6245:6252 ioctl 4018620d 200000004a80 returned -16 [ 1988.892061][ T6263] xt_hashlimit: size too large, truncated to 1048576 [ 1988.950478][ T6265] FAULT_INJECTION: forcing a failure. [ 1988.950478][ T6265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1989.010106][ T6265] CPU: 1 UID: 0 PID: 6265 Comm: syz.6.8575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1989.010127][ T6265] Tainted: [L]=SOFTLOCKUP [ 1989.010131][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1989.010138][ T6265] Call Trace: [ 1989.010142][ T6265] [ 1989.010146][ T6265] dump_stack_lvl+0x100/0x190 [ 1989.010160][ T6265] should_fail_ex.cold+0x5/0xa [ 1989.010174][ T6265] _copy_from_iter+0x1f4/0x1690 [ 1989.010188][ T6265] ? _copy_from_iter+0x270/0x1690 [ 1989.010199][ T6265] ? __pfx__copy_from_iter+0x10/0x10 [ 1989.010214][ T6265] ? __pfx__copy_from_iter+0x10/0x10 [ 1989.010233][ T6265] copy_page_from_iter+0x238/0x300 [ 1989.010251][ T6265] skb_copy_datagram_from_iter+0x399/0x720 [ 1989.010268][ T6265] tun_get_user+0x1889/0x3c20 [ 1989.010286][ T6265] ? inode_has_perm+0x16d/0x1d0 [ 1989.010307][ T6265] ? __pfx_tun_get_user+0x10/0x10 [ 1989.010328][ T6265] ? __file_has_perm+0x336/0x460 [ 1989.010341][ T6265] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1989.010357][ T6265] ? tun_get+0x191/0x370 [ 1989.010369][ T6265] ? rcu_is_watching+0x12/0xc0 [ 1989.010382][ T6265] ? tun_get+0x191/0x370 [ 1989.010394][ T6265] ? lock_release+0x24d/0x310 [ 1989.010405][ T6265] tun_chr_write_iter+0xdc/0x200 [ 1989.010420][ T6265] vfs_write+0x6ac/0x1050 [ 1989.010436][ T6265] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1989.010452][ T6265] ? __pfx_vfs_write+0x10/0x10 [ 1989.010467][ T6265] ? lock_release+0x24d/0x310 [ 1989.010479][ T6265] ksys_write+0x12a/0x250 [ 1989.010499][ T6265] ? __pfx_ksys_write+0x10/0x10 [ 1989.010515][ T6265] ? rcu_is_watching+0x12/0xc0 [ 1989.010527][ T6265] do_syscall_64+0x115/0x870 [ 1989.010539][ T6265] ? clear_bhb_loop+0x40/0x90 [ 1989.010551][ T6265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1989.010562][ T6265] RIP: 0033:0x7ffa9ff5d68e [ 1989.010570][ T6265] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1989.010581][ T6265] RSP: 002b:00007ffaa0e20fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1989.010592][ T6265] RAX: ffffffffffffffda RBX: 00007ffaa0e216c0 RCX: 00007ffa9ff5d68e [ 1989.010600][ T6265] RDX: 000000000000fe4f RSI: 0000200000000000 RDI: 00000000000000c8 [ 1989.010607][ T6265] RBP: 00007ffaa0e21090 R08: 0000000000000000 R09: 0000000000000000 [ 1989.010613][ T6265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1989.010619][ T6265] R13: 00007ffaa0216128 R14: 00007ffaa0216090 R15: 00007ffcf99e28b8 [ 1989.010629][ T6265] [ 1989.600740][ T6274] input: syz0 as /devices/virtual/input/input132 [ 1989.762435][ T5721] usb 9-1: new low-speed USB device number 78 using dummy_hcd [ 1989.832505][ T6288] fuse: Unknown parameter 'user00000000000000000000' [ 1989.937033][ T5721] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1989.945907][ T5721] usb 9-1: config 0 has no interface number 0 [ 1989.952112][ T5721] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1989.966960][ T5721] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1989.979216][ T5721] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1989.997310][ T5721] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.007996][ T5721] usb 9-1: config 0 descriptor?? [ 1990.016014][ T6269] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1990.031675][ T5721] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1990.332641][ T5721] usb 9-1: USB disconnect, device number 78 [ 1991.000792][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8587'. [ 1991.012517][ T6303] gtp0: entered allmulticast mode [ 1991.121671][ T6308] binder: BINDER_SET_CONTEXT_MGR already set [ 1991.137890][ T6308] binder: 6304:6308 ioctl 4018620d 200000000100 returned -16 [ 1991.183520][ T6308] binder: BINDER_SET_CONTEXT_MGR already set [ 1991.202895][ T6308] binder: 6304:6308 ioctl 4018620d 200000004a80 returned -16 [ 1991.311613][ T30] kauditd_printk_skb: 545 callbacks suppressed [ 1991.311632][ T30] audit: type=1400 audit(1847.081:102721): avc: denied { read } for pid=6304 comm="syz.8.8588" path="socket:[194761]" dev="sockfs" ino=194761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1991.376669][ T30] audit: type=1400 audit(1847.081:102722): avc: denied { read } for pid=6304 comm="syz.8.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1991.424558][ T30] audit: type=1400 audit(1847.081:102723): avc: denied { read } for pid=6304 comm="syz.8.8588" path="socket:[194761]" dev="sockfs" ino=194761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1991.451768][ T30] audit: type=1400 audit(1847.081:102724): avc: denied { read } for pid=6304 comm="syz.8.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1991.473371][ T30] audit: type=1400 audit(1847.108:102725): avc: denied { read } for pid=6304 comm="syz.8.8588" path="socket:[194761]" dev="sockfs" ino=194761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1991.512673][ T6305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1991.524347][ T6305] audit: audit_lost=3622 audit_rate_limit=0 audit_backlog_limit=64 [ 1991.536428][ T6305] audit: backlog limit exceeded [ 1991.542761][ T6305] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1991.549598][ T30] audit: type=1400 audit(1847.108:102726): avc: denied { read } for pid=6304 comm="syz.8.8588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1992.187190][ T2170] usb 10-1: new full-speed USB device number 43 using dummy_hcd [ 1992.642241][ T653] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1992.757319][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8593'. [ 1992.793955][ T653] usb 4-1: device descriptor read/64, error -71 [ 1993.066866][ T653] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1993.238611][ T653] usb 4-1: device descriptor read/64, error -71 [ 1993.301602][ T6327] random: crng reseeded on system resumption [ 1993.358201][ T653] usb usb4-port1: attempt power cycle [ 1993.758388][ T653] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1993.818118][ T653] usb 4-1: device descriptor read/8, error -71 [ 1994.105140][ T653] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1994.140718][ T653] usb 4-1: device descriptor read/8, error -71 [ 1994.279279][ T653] usb usb4-port1: unable to enumerate USB device [ 1996.598034][ T2170] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1996.749325][ T5722] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1996.757724][ T30] kauditd_printk_skb: 5311 callbacks suppressed [ 1996.757739][ T30] audit: type=1400 audit(1852.101:108006): avc: denied { ioctl } for pid=6382 comm="syz.8.8613" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1996.789403][ T30] audit: type=1400 audit(1852.101:108007): avc: denied { ioctl } for pid=6382 comm="syz.8.8613" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1996.814399][ T30] audit: type=1400 audit(1852.101:108008): avc: denied { ioctl } for pid=6382 comm="syz.8.8613" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1996.856866][ T30] audit: type=1400 audit(1852.165:108009): avc: denied { ioctl } for pid=6374 comm="syz.9.8609" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1996.890154][ T30] audit: type=1400 audit(1852.175:108010): avc: denied { ioctl } for pid=6382 comm="syz.8.8613" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1996.919812][ T2170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1996.934175][ T2170] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1996.938680][ T5722] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1996.944059][ T2170] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1996.944096][ T2170] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1996.944115][ T2170] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.951042][ T2170] usb 10-1: config 0 descriptor?? [ 1996.953478][ T5722] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1996.972347][ T30] audit: type=1400 audit(1852.184:108011): avc: denied { ioctl } for pid=6374 comm="syz.9.8609" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1997.000674][ T5722] usb 9-1: config 0 descriptor?? [ 1997.061137][ T30] audit: type=1400 audit(1852.248:108012): avc: denied { ioctl } for pid=6374 comm="syz.9.8609" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1997.090295][ T30] audit: type=1400 audit(1852.248:108013): avc: denied { ioctl } for pid=6374 comm="syz.9.8609" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1997.115700][ T30] audit: type=1400 audit(1852.248:108014): avc: denied { unmount } for pid=3674 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1997.135203][ T30] audit: type=1400 audit(1852.248:108015): avc: denied { ioctl } for pid=6374 comm="syz.9.8609" path="/dev/raw-gadget" dev="devtmpfs" ino=821 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1997.686805][ T5722] usb 9-1: string descriptor 0 read error: -71 [ 1997.704566][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.706314][ T5722] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1997.716106][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.743986][ T5722] gp8psk: usb in 128 operation failed. [ 1997.754937][ T5722] gp8psk: usb in 137 operation failed. [ 1997.761401][ T5722] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1997.773304][ T5722] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1997.783924][ T5722] usb 9-1: media controller created [ 1997.862011][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1997.889525][ T5722] gp8psk_fe: Frontend attached [ 1997.892961][ T2170] usbhid 10-1:0.0: can't add hid device: -71 [ 1997.901482][ T2170] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1997.902037][ T5722] usb 9-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 1997.933798][ T5722] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1997.936295][ T2170] usb 10-1: USB disconnect, device number 44 [ 1998.043916][ T5722] gp8psk: usb in 138 operation failed. [ 1998.060359][ T5722] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1998.069973][ T5722] gp8psk: found Genpix USB device pID = 203 (hex) [ 1998.121009][ T5722] usb 9-1: USB disconnect, device number 79 [ 1998.155502][ T5722] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1998.703779][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1998.726116][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1999.040224][ T6407] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 1999.212309][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8617'. [ 1999.378234][ T6414] netlink: 'syz.6.8622': attribute type 14 has an invalid length. [ 1999.404014][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8622'. [ 1999.445292][ T2135] netdevsim netdevsim6 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.448991][ T6414] netlink: 'syz.6.8622': attribute type 14 has an invalid length. [ 1999.463757][ T6415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6415 comm=syz.6.8622 [ 1999.485032][ T2135] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.489982][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8622'. [ 1999.506880][ T2135] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.580692][ T2135] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1999.832791][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8624'. [ 1999.982558][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8627'. [ 1999.994477][ T6427] netlink: 75 bytes leftover after parsing attributes in process `syz.8.8627'. [ 2001.647632][ T5618] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 2002.022084][ T6441] binder: BINDER_SET_CONTEXT_MGR already set [ 2002.028212][ T6441] binder: 6437:6441 ioctl 4018620d 200000000100 returned -16 [ 2002.225600][ T30] kauditd_printk_skb: 1888 callbacks suppressed [ 2002.225622][ T30] audit: type=1400 audit(1857.121:109904): avc: denied { map } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2002.533588][ T30] audit: type=1400 audit(1857.130:109905): avc: denied { read } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2002.666203][ T5721] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2002.753427][ T30] audit: type=1400 audit(1857.139:109906): avc: denied { ioctl } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2003.088670][ T30] audit: type=1400 audit(1857.139:109907): avc: denied { read write } for pid=3674 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2003.117939][ T5721] usb 10-1: Using ep0 maxpacket: 32 [ 2003.167811][ T5721] usb 10-1: config 0 has an invalid interface number: 37 but max is 1 [ 2003.195988][ T30] audit: type=1400 audit(1857.185:109908): avc: denied { ioctl } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2003.222230][ T5721] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2003.241646][ T5721] usb 10-1: config 0 has no interface number 0 [ 2003.258867][ T5721] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2003.286083][ T5721] usb 10-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2003.298807][ T30] audit: type=1400 audit(1857.185:109909): avc: denied { ioctl } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2003.328644][ T5721] usb 10-1: Product: syz [ 2003.332945][ T5721] usb 10-1: Manufacturer: syz [ 2003.337695][ T5721] usb 10-1: SerialNumber: syz [ 2003.344159][ T5721] usb 10-1: config 0 descriptor?? [ 2003.349374][ T30] audit: type=1400 audit(1857.195:109910): avc: denied { read write open } for pid=3674 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2003.375819][ T30] audit: type=1400 audit(1857.204:109911): avc: denied { ioctl } for pid=3674 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2003.417586][ T30] audit: type=1400 audit(1857.259:109912): avc: denied { ioctl } for pid=6437 comm="syz.8.8630" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2003.450928][ T6448] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2003.885987][ T6442] No such timeout policy "syz0" [ 2003.920605][ T10] usb 10-1: USB disconnect, device number 45 [ 2004.076848][ T6466] binder: BINDER_SET_CONTEXT_MGR already set [ 2004.083818][ T6466] binder: 6465:6466 ioctl 4018620d 200000000100 returned -16 [ 2004.544175][ T6466] binder: BINDER_SET_CONTEXT_MGR already set [ 2004.550174][ T6466] binder: 6465:6466 ioctl 4018620d 200000004a80 returned -16 [ 2004.919302][ T6475] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2005.938742][ T10] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 2006.162763][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2006.178005][ T10] usb 10-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 2006.190318][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2006.236071][ T10] usb 10-1: config 0 descriptor?? [ 2006.252427][ T2170] kernel read not supported for file /dsp (pid: 2170 comm: kworker/0:2) [ 2006.354838][ T6498] FAULT_INJECTION: forcing a failure. [ 2006.354838][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 2006.377786][ T6498] CPU: 0 UID: 0 PID: 6498 Comm: syz.3.8649 Tainted: G L syzkaller #0 PREEMPT(full) [ 2006.377815][ T6498] Tainted: [L]=SOFTLOCKUP [ 2006.377822][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2006.377831][ T6498] Call Trace: [ 2006.377839][ T6498] [ 2006.377845][ T6498] dump_stack_lvl+0x100/0x190 [ 2006.377866][ T6498] should_fail_ex.cold+0x5/0xa [ 2006.377885][ T6498] ? fs_reclaim_acquire+0x70/0x100 [ 2006.377900][ T6498] ? tomoyo_realpath_from_path+0xb6/0x690 [ 2006.377924][ T6498] should_failslab+0xc2/0x120 [ 2006.377947][ T6498] __kmalloc_noprof+0xe0/0x840 [ 2006.377965][ T6498] ? kfree+0x1e5/0x6c0 [ 2006.377983][ T6498] tomoyo_realpath_from_path+0xb6/0x690 [ 2006.378008][ T6498] tomoyo_path_number_perm+0x23c/0x580 [ 2006.378027][ T6498] ? tomoyo_path_number_perm+0x22e/0x580 [ 2006.378047][ T6498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2006.378066][ T6498] ? ktime_get+0x9f/0x320 [ 2006.378080][ T6498] ? ktime_get+0x1a4/0x320 [ 2006.378101][ T6498] ? rcu_is_watching+0x12/0xc0 [ 2006.378120][ T6498] ? __fget_files+0x215/0x3d0 [ 2006.378135][ T6498] ? hook_file_ioctl_common+0x149/0x410 [ 2006.378165][ T6498] ? lock_release+0x24d/0x310 [ 2006.378180][ T6498] ? __fget_files+0x21f/0x3d0 [ 2006.378196][ T6498] security_file_ioctl+0xd3/0x230 [ 2006.378218][ T6498] __x64_sys_ioctl+0xb7/0x210 [ 2006.378241][ T6498] do_syscall_64+0x115/0x870 [ 2006.378258][ T6498] ? clear_bhb_loop+0x40/0x90 [ 2006.378276][ T6498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.378292][ T6498] RIP: 0033:0x7f0e0919ce59 [ 2006.378311][ T6498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2006.378327][ T6498] RSP: 002b:00007f0e0a12c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2006.378343][ T6498] RAX: ffffffffffffffda RBX: 00007f0e09415fa0 RCX: 00007f0e0919ce59 [ 2006.378353][ T6498] RDX: 00002000000000c0 RSI: 000000004018aebd RDI: 0000000000000004 [ 2006.378365][ T6498] RBP: 00007f0e0a12c090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.378373][ T6498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.378383][ T6498] R13: 00007f0e09416038 R14: 00007f0e09415fa0 R15: 00007ffeb4bb60a8 [ 2006.378399][ T6498] [ 2006.378439][ T6498] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2006.611616][ T10] usb 10-1: string descriptor 0 read error: -71 [ 2006.619109][ T10] pwc: Samsung MPC-C30 USB webcam detected. [ 2006.626523][ T10] pwc: send_video_command error -71 [ 2006.633471][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2006.641068][ T10] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 2006.652969][ T10] usb 10-1: USB disconnect, device number 46 [ 2007.691980][ T30] kauditd_printk_skb: 299 callbacks suppressed [ 2007.691992][ T30] audit: type=1400 audit(1862.187:110201): avc: denied { read write } for pid=31815 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2007.889819][ T30] audit: type=1400 audit(1862.224:110202): avc: denied { read write open } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.025547][ T30] audit: type=1400 audit(1862.224:110203): avc: denied { ioctl } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.083412][ T30] audit: type=1400 audit(1862.224:110204): avc: denied { read write } for pid=2599 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.110744][ T30] audit: type=1400 audit(1862.224:110205): avc: denied { read write open } for pid=2599 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.146262][ T30] audit: type=1400 audit(1862.224:110206): avc: denied { ioctl } for pid=2599 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.187796][ T30] audit: type=1400 audit(1862.325:110207): avc: denied { read write } for pid=29872 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.270144][ T6524] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2008.270998][ T30] audit: type=1400 audit(1862.325:110208): avc: denied { read write open } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2008.287707][ T6524] audit: audit_lost=3638 audit_rate_limit=0 audit_backlog_limit=64 [ 2008.712891][ T5721] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 2008.734586][ T10] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 2008.877028][ T5721] usb 9-1: not running at top speed; connect to a high speed hub [ 2008.888005][ T5721] usb 9-1: config 3 has an invalid interface number: 52 but max is 0 [ 2008.896152][ T5721] usb 9-1: config 3 has no interface number 0 [ 2008.902302][ T5721] usb 9-1: config 3 interface 52 has no altsetting 0 [ 2008.912180][ T5721] usb 9-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=ef.ca [ 2008.921972][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.923331][ T10] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 2008.930081][ T5721] usb 9-1: Product: syz [ 2008.943954][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2008.946389][ T5721] usb 9-1: Manufacturer: syz [ 2008.953955][ T10] usb 10-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2008.957157][ T5721] usb 9-1: SerialNumber: syz [ 2008.967771][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.983065][ T10] usb 10-1: config 0 descriptor?? [ 2009.767780][ T5721] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 2009.792607][ T5721] usb 9-1: selecting invalid altsetting 0 [ 2009.801056][ T2362] pvrusb2: control-write URB failure, status=-71 [ 2009.807523][ T2362] pvrusb2: Device being rendered inoperable [ 2009.822358][ T2362] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2009.835463][ T5721] usb 9-1: USB disconnect, device number 80 [ 2009.853611][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 2009.857640][ T2362] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2009.875087][ T653] Process accounting resumed [ 2009.894869][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2009.921885][ T10] usb 10-1: USB disconnect, device number 47 [ 2010.020356][ T6546] netlink: 'syz.3.8663': attribute type 1 has an invalid length. [ 2010.035947][ T6546] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2010.384124][ T6554] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8665'. [ 2012.089519][ T6567] bond1: option lp_interval: invalid value (0) [ 2012.121195][ T6567] bond1: option lp_interval: allowed values 1 - 2147483647 [ 2012.194676][ T6567] bond1 (unregistering): Released all slaves [ 2013.221074][ T30] kauditd_printk_skb: 442 callbacks suppressed [ 2013.221104][ T30] audit: type=1400 audit(1867.124:110635): avc: denied { create } for pid=6589 comm="syz.6.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2013.283139][ T30] audit: type=1400 audit(1867.133:110636): avc: denied { setopt } for pid=6589 comm="syz.6.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2013.327239][ T30] audit: type=1400 audit(1867.142:110637): avc: denied { create } for pid=6589 comm="syz.6.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2013.406141][ T30] audit: type=1400 audit(1867.161:110638): avc: denied { create } for pid=6589 comm="syz.6.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2013.447289][ T6588] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2013.457209][ T30] audit: type=1400 audit(1867.170:110639): avc: denied { write } for pid=6589 comm="syz.6.8674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2013.463713][ T6588] audit: audit_lost=3644 audit_rate_limit=0 audit_backlog_limit=64 [ 2013.481694][ T6604] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2013.491001][ T6604] audit: audit_lost=3645 audit_rate_limit=0 audit_backlog_limit=64 [ 2013.499255][ T6604] audit: backlog limit exceeded [ 2013.757559][ T6617] fuse: Bad value for 'fd' [ 2013.764010][ T5721] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 2013.947074][ T5721] usb 9-1: Using ep0 maxpacket: 32 [ 2013.961680][ T5721] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 2013.988663][ T5721] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2014.010156][ T5721] usb 9-1: config 0 has no interface number 0 [ 2014.026945][ T5721] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2014.050245][ T5721] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2014.083125][ T5721] usb 9-1: Product: syz [ 2014.096081][ T5721] usb 9-1: Manufacturer: syz [ 2014.129135][ T5721] usb 9-1: SerialNumber: syz [ 2014.156726][ T5721] usb 9-1: config 0 descriptor?? [ 2014.521146][ T6635] No such timeout policy "syz0" [ 2014.664274][ T6633] tipc: Started in network mode [ 2014.671046][ T6633] tipc: Node identity 4, cluster identity 4711 [ 2014.680408][ T10] usb 9-1: USB disconnect, device number 81 [ 2014.689182][ T6633] tipc: Node number set to 4 [ 2015.170844][ T6640] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8687'. [ 2015.333528][ T6646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2015.342568][ T6646] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2015.362330][ T6646] Bluetooth: MGMT ver 1.23 [ 2015.602617][ T6652] comedi comedi0: multiq3: I/O base address not correctly aligned [ 2015.902808][ T6654] lo speed is unknown, defaulting to 1000 [ 2018.659090][ T30] kauditd_printk_skb: 478 callbacks suppressed [ 2018.659108][ T30] audit: type=1400 audit(1872.310:111084): avc: denied { write } for pid=6663 comm="syz.9.8693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2018.723838][ T6665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2018.730935][ T30] audit: type=1400 audit(1872.347:111085): avc: denied { write } for pid=6663 comm="syz.9.8693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2018.750557][ T6665] audit: audit_lost=3657 audit_rate_limit=0 audit_backlog_limit=64 [ 2018.760464][ T6665] audit: backlog limit exceeded [ 2018.770272][ T6665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2018.778093][ T30] audit: type=1400 audit(1872.347:111086): avc: denied { write } for pid=6663 comm="syz.9.8693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2018.798878][ T6665] audit: audit_lost=3658 audit_rate_limit=0 audit_backlog_limit=64 [ 2018.809563][ T6665] audit: backlog limit exceeded [ 2018.831316][ T6665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2018.897987][ T6674] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8696'. [ 2018.959643][ T6674] netlink: 'syz.6.8696': attribute type 21 has an invalid length. [ 2018.991143][ T6674] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8696'. [ 2019.015537][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8696'. [ 2019.088598][ T6674] binder: BINDER_SET_CONTEXT_MGR already set [ 2019.116006][ T6674] binder: 6673:6674 ioctl 4018620d 200000004a80 returned -16 [ 2019.164103][ T6674] Process accounting resumed [ 2019.195667][ T6677] fuse: Bad value for 'fd' [ 2020.080423][ T5722] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2020.243538][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 2020.266080][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2020.298529][ T5722] usb 4-1: config 4 interface 0 has no altsetting 0 [ 2020.315691][ T5722] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2020.325765][ T5722] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 2020.335717][ T5722] usb 4-1: Manufacturer: syz [ 2020.346060][ T5722] usb 4-1: SerialNumber: syz [ 2020.503257][ T653] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 2020.593528][ T6688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.615141][ T6688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.676437][ T653] usb 9-1: Using ep0 maxpacket: 16 [ 2020.766524][ T653] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2020.777399][ T10] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 2020.833352][ T653] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2020.844832][ T653] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2020.859380][ T653] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2020.869552][ T653] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2020.895178][ T653] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2020.905970][ T653] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2020.915718][ T653] usb 9-1: Manufacturer: syz [ 2020.926715][ T653] usb 9-1: config 0 descriptor?? [ 2021.016536][ T10] usb 10-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 2021.030442][ T10] usb 10-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 2021.044745][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2021.053412][ T10] usb 10-1: New USB device found, idVendor=056a, idProduct=0116, bcdDevice= 0.00 [ 2021.063118][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.087905][ T10] usb 10-1: config 0 descriptor?? [ 2021.318473][ T653] rc_core: IR keymap rc-hauppauge not found [ 2021.324501][ T653] Registered IR keymap rc-empty [ 2021.331043][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.343990][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 2021.364200][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2021.374147][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.390984][ T10] usb 10-1: USB disconnect, device number 48 [ 2021.403398][ T653] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2021.434322][ T653] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input134 [ 2021.476067][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.511150][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.543405][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.586762][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.619302][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.653462][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.684410][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.705892][ T6688] comedi comedi0: reset error (fatal) [ 2021.716784][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.719567][ T5722] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2021.738319][ T5722] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2021.748908][ T5722] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2021.756368][ T5722] usb 4-1: media controller created [ 2021.764194][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.766369][ T5722] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2021.790443][ T5722] zl10353_read_register: readreg error (reg=127, ret==0) [ 2021.807406][ T653] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 2021.824121][ T5722] usb 4-1: USB disconnect, device number 40 [ 2021.841882][ T653] mceusb 9-1:0.0: Registered with mce emulator interface version 1 [ 2021.852490][ T653] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2021.869646][ T653] usb 9-1: USB disconnect, device number 82 [ 2022.269438][ T3558] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 2022.470218][ T3558] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 2022.486639][ T3558] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2022.493802][ T3558] usb 10-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2022.504556][ T3558] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2022.538484][ T3558] usb 10-1: config 0 descriptor?? [ 2022.861427][ T6712] binder: 6711:6712 ioctl c0306201 0 returned -14 [ 2023.160763][ T6716] binder: 6711:6716 ioctl 5429 200000001a40 returned -22 [ 2024.171520][ T30] kauditd_printk_skb: 1280 callbacks suppressed [ 2024.171538][ T30] audit: type=1400 audit(1877.404:112359): avc: denied { create } for pid=6725 comm="syz.3.8711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.904265][ T30] audit: type=1400 audit(1877.404:112360): avc: denied { write } for pid=6725 comm="syz.3.8711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.924459][ T30] audit: type=1400 audit(1877.413:112361): avc: denied { read } for pid=6725 comm="syz.3.8711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.944556][ T30] audit: type=1400 audit(1877.413:112362): avc: denied { read } for pid=6725 comm="syz.3.8711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2024.966423][ T30] audit: type=1400 audit(1877.727:112363): avc: denied { read write } for pid=29872 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2024.992888][ T30] audit: type=1400 audit(1877.745:112364): avc: denied { read } for pid=6725 comm="syz.3.8711" dev="nsfs" ino=4026532803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2025.179945][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8711'. [ 2025.337523][ T30] audit: type=1400 audit(1877.764:112365): avc: denied { read write open } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2025.375468][ T30] audit: type=1400 audit(1877.773:112366): avc: denied { read open } for pid=6725 comm="syz.3.8711" path="net:[4026532803]" dev="nsfs" ino=4026532803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2025.414266][ T30] audit: type=1400 audit(1877.782:112367): avc: denied { ioctl } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2025.440562][ T3558] usbhid 10-1:0.0: can't add hid device: -71 [ 2025.477237][ T3558] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2025.478661][ T30] audit: type=1400 audit(1878.078:112368): avc: denied { bpf } for pid=6725 comm="syz.3.8711" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2025.520509][ T3558] usb 10-1: USB disconnect, device number 49 [ 2025.724749][ T6735] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 2025.731287][ T6735] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2025.740565][ T6735] vhci_hcd vhci_hcd.0: Device attached [ 2026.205184][ T6743] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2026.306441][ T803] usb 34-1: SetAddress Request (2) to port 0 [ 2026.372137][ T803] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2026.885936][ T5722] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2027.106328][ T5722] usb 4-1: Using ep0 maxpacket: 32 [ 2027.125325][ T5722] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 2027.141005][ T5722] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2027.174287][ T5722] usb 4-1: config 0 has no interface number 0 [ 2027.226635][ T5722] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2027.352750][ T6753] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2027.404732][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2027.457533][ T5722] usb 4-1: Product: syz [ 2027.489587][ T5722] usb 4-1: Manufacturer: syz [ 2027.506048][ T5722] usb 4-1: SerialNumber: syz [ 2027.531269][ T5722] usb 4-1: config 0 descriptor?? [ 2027.611861][ T6758] binder: BINDER_SET_CONTEXT_MGR already set [ 2027.646353][ T6758] binder: 6757:6758 ioctl 4018620d 200000000100 returned -16 [ 2027.956303][ T6766] No such timeout policy "syz0" [ 2028.116245][ T8290] usb 4-1: USB disconnect, device number 41 [ 2028.364772][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8721'. [ 2028.543922][ T653] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 2028.738878][ T653] usb 10-1: Using ep0 maxpacket: 8 [ 2028.746711][ T653] usb 10-1: config 128 has an invalid interface number: 127 but max is 0 [ 2028.923374][ T5721] IPVS: starting estimator thread 0... [ 2029.031544][ T6778] IPVS: using max 75 ests per chain, 180000 per kthread [ 2029.036209][ T653] usb 10-1: config 128 has no interface number 0 [ 2029.048963][ T653] usb 10-1: config 128 interface 127 has no altsetting 0 [ 2029.063801][ T653] usb 10-1: New USB device found, idVendor=04dd, idProduct=8001, bcdDevice=b1.3f [ 2029.073437][ T653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.082567][ T653] usb 10-1: Product: syz [ 2029.097019][ T653] usb 10-1: Manufacturer: syz [ 2029.121576][ T653] usb 10-1: SerialNumber: syz [ 2029.144481][ T6736] vhci_hcd: connection reset by peer [ 2029.150015][ T2133] vhci_hcd vhci_hcd.0: stop threads [ 2029.168606][ T2133] vhci_hcd vhci_hcd.0: release socket [ 2029.184845][ T2133] vhci_hcd vhci_hcd.0: disconnect device [ 2029.255894][ T6784] xt_HMARK: proto mask must be zero with L3 mode [ 2029.319175][ T6782] overlayfs: conflicting lowerdir path [ 2029.607270][ T30] kauditd_printk_skb: 267 callbacks suppressed [ 2029.607287][ T30] audit: type=1400 audit(1882.424:112636): avc: denied { read write open } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2029.833225][ T6789] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2029.968883][ T30] audit: type=1400 audit(1882.452:112637): avc: denied { ioctl } for pid=29872 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2030.117671][ T30] audit: type=1400 audit(1882.525:112638): avc: denied { read write } for pid=6786 comm="syz.3.8727" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2030.478012][ T30] audit: type=1400 audit(1882.535:112639): avc: denied { read write open } for pid=6786 comm="syz.3.8727" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2030.526025][ T30] audit: type=1400 audit(1882.544:112640): avc: denied { setopt } for pid=6786 comm="syz.3.8727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2030.550311][ T30] audit: type=1400 audit(1882.544:112641): avc: denied { bind } for pid=6786 comm="syz.3.8727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2030.571173][ T30] audit: type=1400 audit(1882.544:112642): avc: denied { name_bind } for pid=6786 comm="syz.3.8727" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2030.617704][ T30] audit: type=1400 audit(1882.544:112643): avc: denied { node_bind } for pid=6786 comm="syz.3.8727" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2030.644006][ T30] audit: type=1400 audit(1882.553:112644): avc: denied { write } for pid=6786 comm="syz.3.8727" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2030.671003][ T30] audit: type=1400 audit(1882.562:112645): avc: denied { connect } for pid=6786 comm="syz.3.8727" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2031.232147][ T6811] overlay: ./file0 is not a directory [ 2031.514811][ T653] safe_serial 10-1:128.127: safe_serial converter detected [ 2031.556742][ T653] safe_serial 10-1:128.127: probe with driver safe_serial failed with error -22 [ 2031.568189][ T653] usb 10-1: USB disconnect, device number 50 [ 2031.968475][ T803] usb 34-1: device descriptor read/8, error -110 [ 2032.257837][ T6824] overlayfs: failed to resolve './file2': -2 [ 2032.279511][ T6824] overlayfs: overlapping lowerdir path [ 2032.391271][ T803] usb usb34-port1: attempt power cycle [ 2032.744801][ T6832] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2032.750920][ T6832] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2032.756998][ T6832] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2032.890054][ T8290] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 2032.997975][ T803] usb usb34-port1: unable to enumerate USB device [ 2033.203229][ T6837] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2033.327579][ T8290] usb 10-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 2033.346903][ T8290] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2033.354065][ T8290] usb 10-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00 [ 2033.382506][ T8290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.401756][ T8290] usb 10-1: config 0 descriptor?? [ 2033.549619][ T6842] binder: BINDER_SET_CONTEXT_MGR already set [ 2033.563568][ T6842] binder: 6838:6842 ioctl 4018620d 200000004a80 returned -16 [ 2033.867058][ T8290] sony 0003:054C:1000.0053: ignoring exceeding usage max [ 2033.900683][ T8290] sony 0003:054C:1000.0053: hidraw0: USB HID v0.7f Device [HID 054c:1000] on usb-dummy_hcd.9-1/input0 [ 2033.940652][ T8290] sony 0003:054C:1000.0053: failed to claim input [ 2034.211981][ T6858] trusted_key: encrypted_key: master key parameter '#%' is invalid [ 2034.415799][ T6859] binder: Unknown parameter 'mabL00000000000000012375P' [ 2034.554736][ T6860] vxfs: WRONG superblock magic 00000000 at 1 [ 2034.562025][ T6860] vxfs: WRONG superblock magic 00000000 at 8 [ 2034.568097][ T6860] vxfs: can't find superblock. [ 2034.713708][ T6862] binder: BINDER_SET_CONTEXT_MGR already set [ 2034.725374][ T6862] binder: 6861:6862 ioctl 4018620d 200000000100 returned -16 [ 2034.943665][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 2035.003122][ T5618] Bluetooth: hci4: command 0x041b tx timeout [ 2035.003405][ T4926] Bluetooth: hci5: command 0x0c1a tx timeout [ 2035.013586][ T6867] binder: BINDER_SET_CONTEXT_MGR already set [ 2035.021382][ T6867] binder: 6861:6867 ioctl 4018620d 200000004a80 returned -16 [ 2035.066693][ T30] kauditd_printk_skb: 2325 callbacks suppressed [ 2035.066709][ T30] audit: type=1400 audit(1887.398:114971): avc: denied { map } for pid=6861 comm="syz.8.8747" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2035.152200][ T30] audit: type=1400 audit(1887.398:114972): avc: denied { read } for pid=6861 comm="syz.8.8747" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2035.196382][ T30] audit: type=1400 audit(1887.398:114973): avc: denied { ioctl } for pid=6861 comm="syz.8.8747" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2035.230878][ T30] audit: type=1400 audit(1887.490:114974): avc: denied { read write } for pid=31815 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.255968][ T30] audit: type=1400 audit(1887.490:114975): avc: denied { read write open } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.283760][ T30] audit: type=1400 audit(1887.490:114976): avc: denied { ioctl } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2035.311097][ T4926] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 2035.341673][ T30] audit: type=1400 audit(1887.564:114977): avc: denied { create } for pid=6869 comm="syz.6.8749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2035.369276][ T30] audit: type=1400 audit(1887.573:114978): avc: denied { prog_load } for pid=6869 comm="syz.6.8749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2035.391498][ T30] audit: type=1400 audit(1887.573:114979): avc: denied { ioctl } for pid=6861 comm="syz.8.8747" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2035.419217][ T30] audit: type=1400 audit(1887.573:114980): avc: denied { ioctl } for pid=6861 comm="syz.8.8747" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2035.888811][ T6858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2035.937746][ T8290] usb 10-1: USB disconnect, device number 51 [ 2037.751727][ T803] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2037.922473][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2037.937464][ T6913] fuse: Unknown parameter '0xffffffffffffffff' [ 2037.949651][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2037.960831][ T803] usb 9-1: Using ep0 maxpacket: 32 [ 2037.974368][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2037.989414][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2037.998972][ T803] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 2038.010917][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2038.031697][ T803] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2038.058574][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8758'. [ 2038.062856][ T803] usb 9-1: config 0 has no interface number 0 [ 2038.135914][ T803] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 2038.146132][ T6903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2038.152121][ T6903] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2038.158163][ T6903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2038.192287][ T803] usb 9-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 2038.302545][ T803] usb 9-1: Product: syz [ 2038.313682][ T803] usb 9-1: Manufacturer: syz [ 2038.322494][ T803] usb 9-1: SerialNumber: syz [ 2038.338682][ T803] usb 9-1: config 0 descriptor?? [ 2038.611416][ T6920] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2039.307897][ T6905] No such timeout policy "syz0" [ 2039.533458][ T5618] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 2039.632787][ T8290] usb 9-1: USB disconnect, device number 83 [ 2039.707443][ T6932] FAULT_INJECTION: forcing a failure. [ 2039.707443][ T6932] name failslab, interval 1, probability 0, space 0, times 0 [ 2039.720836][ T6932] CPU: 1 UID: 0 PID: 6932 Comm: syz.0.8765 Tainted: G L syzkaller #0 PREEMPT(full) [ 2039.720865][ T6932] Tainted: [L]=SOFTLOCKUP [ 2039.720871][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2039.720881][ T6932] Call Trace: [ 2039.720887][ T6932] [ 2039.720892][ T6932] dump_stack_lvl+0x100/0x190 [ 2039.720916][ T6932] should_fail_ex.cold+0x5/0xa [ 2039.720942][ T6932] ? __kmalloc_noprof+0xba/0x840 [ 2039.720962][ T6932] ? lsm_blob_alloc+0x68/0x90 [ 2039.720979][ T6932] should_failslab+0xc2/0x120 [ 2039.721004][ T6932] __kmalloc_noprof+0xe0/0x840 [ 2039.721020][ T6932] ? trace_kmem_cache_alloc+0xdd/0x100 [ 2039.721049][ T6932] lsm_blob_alloc+0x68/0x90 [ 2039.721065][ T6932] security_prepare_creds+0x2d/0x290 [ 2039.721090][ T6932] prepare_creds+0x5d6/0x950 [ 2039.721117][ T6932] __do_sys_landlock_restrict_self+0x65b/0x9e0 [ 2039.721141][ T6932] ? rcu_is_watching+0x12/0xc0 [ 2039.721161][ T6932] do_syscall_64+0x115/0x870 [ 2039.721179][ T6932] ? clear_bhb_loop+0x40/0x90 [ 2039.721198][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2039.721215][ T6932] RIP: 0033:0x7f785b59ce59 [ 2039.721229][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2039.721245][ T6932] RSP: 002b:00007f785c52e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 2039.721262][ T6932] RAX: ffffffffffffffda RBX: 00007f785b815fa0 RCX: 00007f785b59ce59 [ 2039.721273][ T6932] RDX: 0000000000000000 RSI: 000000000000000c RDI: ffffffffffffffff [ 2039.721284][ T6932] RBP: 00007f785c52e090 R08: 0000000000000000 R09: 0000000000000000 [ 2039.721294][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2039.721305][ T6932] R13: 00007f785b816038 R14: 00007f785b815fa0 R15: 00007fff63878388 [ 2039.721323][ T6932] [ 2040.088173][ T6934] hpfs: hpfs_map_sector(): read error [ 2040.117396][ T5618] Bluetooth: hci3: command 0x0406 tx timeout [ 2040.381460][ T5618] Bluetooth: hci4: command 0x041b tx timeout [ 2040.381483][ T4926] Bluetooth: hci5: command 0x0c1a tx timeout [ 2040.498706][ T30] kauditd_printk_skb: 1305 callbacks suppressed [ 2040.498723][ T30] audit: type=1400 audit(1892.473:116286): avc: denied { prog_load } for pid=6935 comm="syz.9.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2040.518627][ T6936] lo speed is unknown, defaulting to 1000 [ 2040.531575][ T30] audit: type=1400 audit(1892.492:116287): avc: denied { bpf } for pid=6935 comm="syz.9.8766" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2040.721418][ T4926] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 2040.856216][ T30] audit: type=1400 audit(1892.492:116288): avc: denied { create } for pid=6935 comm="syz.9.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2040.875965][ T30] audit: type=1400 audit(1892.492:116289): avc: denied { create } for pid=6935 comm="syz.9.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2040.896510][ T30] audit: type=1400 audit(1892.501:116290): avc: denied { bind } for pid=6935 comm="syz.9.8766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2040.987811][ T30] audit: type=1400 audit(1892.501:116291): avc: denied { ioctl } for pid=6935 comm="syz.9.8766" path="socket:[198694]" dev="sockfs" ino=198694 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2041.097203][ T30] audit: type=1400 audit(1892.501:116292): avc: denied { module_request } for pid=6935 comm="syz.9.8766" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 2041.152177][ T30] audit: type=1400 audit(1892.621:116293): avc: denied { prog_load } for pid=6937 comm="syz.3.8767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 2041.261267][ T30] audit: type=1400 audit(1892.630:116294): avc: denied { bpf } for pid=6937 comm="syz.3.8767" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 2041.396649][ T30] audit: type=1400 audit(1892.630:116295): avc: denied { write } for pid=6937 comm="syz.3.8767" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 2041.431613][ T6959] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 2041.509604][ T6962] xt_bpf: check failed: parse error [ 2042.203395][ T6960] binder: 6957:6960 ioctl 5429 200000001a40 returned -22 [ 2044.250236][ T7010] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8785'. [ 2044.717928][ T7006] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 2044.724545][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2044.764318][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 2044.837417][ T7015] vhci_hcd: connection closed [ 2044.838995][ T1346] vhci_hcd vhci_hcd.8: stop threads [ 2044.872510][ T1346] vhci_hcd vhci_hcd.8: release socket [ 2045.091765][ T803] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2045.265371][ T1346] vhci_hcd vhci_hcd.8: disconnect device [ 2045.268466][ T803] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 2045.288602][ T803] usb 49-1: enqueue for inactive port 0 [ 2045.364374][ T803] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 2045.714196][ T4926] Bluetooth: hci5: unexpected event for opcode 0x040d [ 2045.932975][ T30] kauditd_printk_skb: 1131 callbacks suppressed [ 2045.932990][ T30] audit: type=1400 audit(1897.484:117427): avc: denied { write } for pid=6974 comm="syz.3.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2046.033102][ T30] audit: type=1400 audit(1897.493:117428): avc: denied { write } for pid=6974 comm="syz.3.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2046.072164][ T6978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2046.078330][T31815] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2046.082364][ T30] audit: type=1400 audit(1897.493:117429): avc: denied { write } for pid=6974 comm="syz.3.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2046.107519][ T6978] audit: audit_lost=3662 audit_rate_limit=0 audit_backlog_limit=64 [ 2046.116804][ T6978] audit: backlog limit exceeded [ 2046.123718][ T7032] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2046.130537][ T6978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2046.141178][ T7032] audit: audit_lost=3663 audit_rate_limit=0 audit_backlog_limit=64 [ 2046.747236][ T7038] binder: 7035:7038 ioctl c018620c 200000002200 returned -1 [ 2047.845958][ T7057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8798'. [ 2047.902379][ T7057] bond2: entered promiscuous mode [ 2047.934760][ T7057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2048.012419][ T7061] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2048.021407][ T7066] fuse: Unknown parameter '0x0000000000000003' [ 2048.036253][ T7061] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 2048.238620][ T7061] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 2048.602321][ T803] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2048.795000][ T803] usb 9-1: language id specifier not provided by device, defaulting to English [ 2048.821721][ T803] usb 9-1: New USB device found, idVendor=17cc, idProduct=0808, bcdDevice= 1.0e [ 2048.840727][ T803] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2048.857791][ T803] usb 9-1: SerialNumber: syz [ 2049.206553][ T803] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2049.233502][ T803] usb 9-1: MIDIStreaming interface descriptor not found [ 2049.332267][ T803] usb 9-1: USB disconnect, device number 84 [ 2049.472401][T26510] udevd[26510]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2049.513271][ T653] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 2049.854470][ T653] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2049.869395][ T653] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2049.892778][ T653] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.956400][ T653] usb 10-1: config 0 descriptor?? [ 2050.307447][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8811'. [ 2050.309394][ T7113] netlink: 840 bytes leftover after parsing attributes in process `syz.8.8814'. [ 2050.863539][ T653] ath6kl: Failed to read usb control message: -71 [ 2050.870275][ T653] ath6kl: Unable to read the bmi data from the device: -71 [ 2050.883295][ T653] ath6kl: Unable to recv target info: -71 [ 2050.889504][ T653] ath6kl: Failed to init ath6kl core: -71 [ 2050.897162][ T653] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2050.930519][ T653] usb 10-1: USB disconnect, device number 52 [ 2050.975561][ T5722] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2051.127926][ T5722] usb 9-1: device descriptor read/64, error -71 [ 2051.449733][ T7131] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2051.595420][ T30] kauditd_printk_skb: 808 callbacks suppressed [ 2051.595440][ T30] audit: type=1400 audit(1902.523:118191): avc: denied { read write } for pid=7125 comm="syz.3.8820" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2051.643018][ T30] audit: type=1400 audit(1902.523:118192): avc: denied { read write open } for pid=7125 comm="syz.3.8820" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2051.690970][ T5722] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 2051.710197][ T30] audit: type=1400 audit(1902.523:118193): avc: denied { setopt } for pid=7125 comm="syz.3.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2051.732099][ T7133] netlink: 'syz.6.8822': attribute type 8 has an invalid length. [ 2051.829526][ T30] audit: type=1400 audit(1902.532:118194): avc: denied { bind } for pid=7125 comm="syz.3.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2051.848749][ T5722] usb 9-1: device descriptor read/64, error -71 [ 2051.904613][ T30] audit: type=1400 audit(1902.532:118195): avc: denied { name_bind } for pid=7125 comm="syz.3.8820" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2051.928742][ T30] audit: type=1400 audit(1902.532:118196): avc: denied { node_bind } for pid=7125 comm="syz.3.8820" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2051.951055][ T30] audit: type=1400 audit(1902.532:118197): avc: denied { write } for pid=7125 comm="syz.3.8820" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2051.972634][ T30] audit: type=1400 audit(1902.532:118198): avc: denied { connect } for pid=7125 comm="syz.3.8820" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2051.995139][ T5722] usb usb9-port1: attempt power cycle [ 2052.141457][ T30] audit: type=1400 audit(1902.541:118199): avc: denied { name_connect } for pid=7125 comm="syz.3.8820" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2052.184864][ T30] audit: type=1400 audit(1902.550:118200): avc: denied { read } for pid=7125 comm="syz.3.8820" dev="nsfs" ino=4026532803 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2052.214322][ T7141] overlay: Unknown parameter '/' [ 2052.413767][ T4926] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 2052.622683][ T5722] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 2052.655219][ T7149] nbd3: detected capacity change from 0 to 63 [ 2052.669776][ T5722] usb 9-1: device descriptor read/8, error -71 [ 2052.676509][ T7150] nbd: must specify an index to disconnect [ 2052.701248][ T4926] block nbd3: Receive control failed (result -104) [ 2052.937833][ T5722] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 2053.174929][ T5722] usb 9-1: device descriptor read/8, error -71 [ 2053.327370][ T5722] usb usb9-port1: unable to enumerate USB device [ 2053.641535][ T5722] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 2053.838818][ T5722] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 2053.860773][ T5722] usb 4-1: config 0 has no interface number 0 [ 2053.888654][ T5722] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2054.134279][ T5722] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 2054.176214][ T5722] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 2054.200761][ T5722] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 2054.268346][ T5722] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 2054.297504][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.312626][ T5722] usb 4-1: Product: syz [ 2054.320109][ T5722] usb 4-1: Manufacturer: syz [ 2054.327467][ T5722] usb 4-1: SerialNumber: syz [ 2054.348447][ T5722] usb 4-1: config 0 descriptor?? [ 2054.362019][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input135 [ 2054.701115][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8834'. [ 2055.164112][ T7193] overlayfs: failed to resolve './bus': -2 [ 2055.506590][ T7206] xt_hashlimit: size too large, truncated to 1048576 [ 2055.533247][ T7203] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 2055.533247][ T7203] program syz.6.8838 not setting count and/or reply_len properly [ 2055.591066][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.599653][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2056.498322][ T7219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2056.507632][ T7219] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2056.515318][ T7219] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2057.024826][ T30] kauditd_printk_skb: 1244 callbacks suppressed [ 2057.024862][ T30] audit: type=1400 audit(1907.718:119220): avc: denied { search } for pid=7232 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2057.418416][ T803] usb 4-1: USB disconnect, device number 42 [ 2057.439872][ T30] audit: type=1400 audit(1907.718:119221): avc: denied { create } for pid=7233 comm="syz.6.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.444738][ T7232] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2057.460251][ T30] audit: type=1400 audit(1907.718:119222): avc: denied { read } for pid=7233 comm="syz.6.8842" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.460285][ T30] audit: type=1400 audit(1907.718:119223): avc: denied { read open } for pid=7233 comm="syz.6.8842" path="net:[4026532797]" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.511848][ T30] audit: type=1400 audit(1907.718:119224): avc: denied { create } for pid=7233 comm="syz.6.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.541878][ T30] audit: type=1400 audit(1907.727:119225): avc: denied { read } for pid=7233 comm="syz.6.8842" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.578009][ T30] audit: type=1400 audit(1907.727:119226): avc: denied { read open } for pid=7233 comm="syz.6.8842" path="net:[4026532797]" dev="nsfs" ino=4026532797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2057.614823][ T30] audit: type=1400 audit(1907.727:119227): avc: denied { create } for pid=7233 comm="syz.6.8842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2057.690723][ T7232] audit: audit_lost=3755 audit_rate_limit=0 audit_backlog_limit=64 [ 2058.236469][ T4926] Bluetooth: hci3: command 0x0406 tx timeout [ 2058.756336][ T4926] Bluetooth: hci4: command 0x041b tx timeout [ 2058.762551][ T4926] Bluetooth: hci5: command 0x0c1a tx timeout [ 2059.835435][ T7271] binder: 7270:7271 ioctl 5429 200000001a40 returned -22 [ 2061.096544][ T4926] Bluetooth: hci5: unexpected event 0x03 length: 1 < 11 [ 2062.100197][ T7264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2062.116905][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8852'. [ 2062.461366][ T30] kauditd_printk_skb: 653 callbacks suppressed [ 2062.461451][ T30] audit: type=1400 audit(1912.729:119880): avc: denied { write } for pid=7300 comm="syz.3.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2062.504737][ T7301] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2062.510012][ T7311] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2062.513767][ T7310] audit: audit_backlog=66 > audit_backlog_limit=64 [ 2062.522505][ T30] audit: type=1400 audit(1912.738:119881): avc: denied { write } for pid=7300 comm="syz.3.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2062.543826][ T7311] audit: audit_lost=3756 audit_rate_limit=0 audit_backlog_limit=64 [ 2062.552845][ T7311] audit: backlog limit exceeded [ 2062.556372][ T7301] audit: audit_lost=3757 audit_rate_limit=0 audit_backlog_limit=64 [ 2062.559195][ T7311] audit: audit_backlog=65 > audit_backlog_limit=64 [ 2062.577404][ T7310] audit: audit_lost=3758 audit_rate_limit=0 audit_backlog_limit=64 [ 2063.183995][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8859'. [ 2064.726244][ T7339] FAULT_INJECTION: forcing a failure. [ 2064.726244][ T7339] name failslab, interval 1, probability 0, space 0, times 0 [ 2064.738952][ T7339] CPU: 0 UID: 0 PID: 7339 Comm: syz.3.8866 Tainted: G L syzkaller #0 PREEMPT(full) [ 2064.738972][ T7339] Tainted: [L]=SOFTLOCKUP [ 2064.738976][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2064.738982][ T7339] Call Trace: [ 2064.738986][ T7339] [ 2064.738990][ T7339] dump_stack_lvl+0x100/0x190 [ 2064.739005][ T7339] should_fail_ex.cold+0x5/0xa [ 2064.739018][ T7339] should_failslab+0xc2/0x120 [ 2064.739034][ T7339] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2064.739049][ T7339] ? zswap_store+0xc6d/0x2e70 [ 2064.739062][ T7339] zswap_store+0xc6d/0x2e70 [ 2064.739074][ T7339] ? lock_release+0x24d/0x310 [ 2064.739084][ T7339] ? __pfx_zswap_store+0x10/0x10 [ 2064.739096][ T7339] ? folio_free_swap+0x60a/0x9f0 [ 2064.739111][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739123][ T7339] ? folio_free_swap+0x60a/0x9f0 [ 2064.739138][ T7339] ? lock_release+0x24d/0x310 [ 2064.739148][ T7339] ? folio_free_swap+0x3f/0x9f0 [ 2064.739164][ T7339] swap_writeout+0x47e/0x14f0 [ 2064.739177][ T7339] shrink_folio_list+0x51c5/0x60a0 [ 2064.739192][ T7339] ? debug_check_no_obj_freed+0x31f/0x630 [ 2064.739209][ T7339] ? __pfx_shrink_folio_list+0x10/0x10 [ 2064.739239][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739251][ T7339] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2064.739264][ T7339] ? debug_check_no_obj_freed+0x31f/0x630 [ 2064.739279][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739293][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739305][ T7339] ? lock_acquire+0x301/0x370 [ 2064.739314][ T7339] ? __free_frozen_pages+0x59b/0x10a0 [ 2064.739330][ T7339] ? __css_rstat_updated+0x1ce/0x5a0 [ 2064.739341][ T7339] ? __pfx___css_rstat_updated+0x10/0x10 [ 2064.739352][ T7339] reclaim_folio_list+0xdc/0x5d0 [ 2064.739363][ T7339] ? __pfx_flush_tlb_func+0x10/0x10 [ 2064.739376][ T7339] ? __pfx_reclaim_folio_list+0x10/0x10 [ 2064.739387][ T7339] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 2064.739404][ T7339] ? lru_gen_update_size+0x431/0xe20 [ 2064.739416][ T7339] ? lru_gen_del_folio+0x382/0x5f0 [ 2064.739427][ T7339] reclaim_pages+0x428/0x5e0 [ 2064.739440][ T7339] ? __pfx_reclaim_pages+0x10/0x10 [ 2064.739453][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739464][ T7339] ? madvise_cold_or_pageout_pte_range+0xb49/0x2620 [ 2064.739476][ T7339] ? lock_release+0x24d/0x310 [ 2064.739485][ T7339] madvise_cold_or_pageout_pte_range+0x155c/0x2620 [ 2064.739499][ T7339] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2064.739511][ T7339] ? debug_check_no_obj_freed+0x31f/0x630 [ 2064.739527][ T7339] ? __update_page_owner_free_handle.isra.0+0x343/0x4d0 [ 2064.739545][ T7339] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 2064.739561][ T7339] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 2064.739573][ T7339] walk_pgd_range+0xc1a/0x1dd0 [ 2064.739592][ T7339] ? __pfx_walk_pgd_range+0x10/0x10 [ 2064.739606][ T7339] ? folios_put_refs+0x716/0xa90 [ 2064.739620][ T7339] __walk_page_range+0x171/0x850 [ 2064.739634][ T7339] ? folio_batch_move_lru+0x300/0x7d0 [ 2064.739647][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739659][ T7339] ? folio_batch_move_lru+0x32b/0x7d0 [ 2064.739672][ T7339] ? lock_release+0x24d/0x310 [ 2064.739681][ T7339] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2064.739693][ T7339] walk_page_range_vma_unsafe+0x209/0x8f0 [ 2064.739708][ T7339] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 2064.739726][ T7339] ? mlock_drain_local+0x254/0x4e0 [ 2064.739739][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739751][ T7339] ? mlock_drain_local+0x254/0x4e0 [ 2064.739763][ T7339] ? lock_release+0x24d/0x310 [ 2064.739772][ T7339] walk_page_range_vma+0x63/0x90 [ 2064.739787][ T7339] madvise_pageout+0x259/0x540 [ 2064.739797][ T7339] ? __pfx_madvise_pageout+0x10/0x10 [ 2064.739807][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739821][ T7339] ? mt_find+0x687/0x8e0 [ 2064.739835][ T7339] madvise_vma_behavior+0x452/0x2240 [ 2064.739846][ T7339] ? mt_find+0x45e/0x8e0 [ 2064.739858][ T7339] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 2064.739869][ T7339] ? __pfx_mt_find+0x10/0x10 [ 2064.739883][ T7339] ? find_vma_prev+0xd8/0x150 [ 2064.739892][ T7339] ? _kstrtoull+0x13c/0x1f0 [ 2064.739906][ T7339] ? __pfx_find_vma_prev+0x10/0x10 [ 2064.739916][ T7339] ? find_vma+0xbf/0x140 [ 2064.739930][ T7339] ? __pfx_find_vma+0x10/0x10 [ 2064.739945][ T7339] ? kstrtouint+0xdf/0x130 [ 2064.739959][ T7339] madvise_walk_vmas+0x2fe/0xa90 [ 2064.739970][ T7339] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 2064.739981][ T7339] ? rcu_is_watching+0x12/0xc0 [ 2064.739994][ T7339] madvise_do_behavior+0x1ea/0x510 [ 2064.740006][ T7339] ? __pfx_madvise_do_behavior+0x10/0x10 [ 2064.740017][ T7339] ? down_read+0x13b/0x4c0 [ 2064.740032][ T7339] do_madvise+0x195/0x240 [ 2064.740042][ T7339] ? __pfx_do_madvise+0x10/0x10 [ 2064.740054][ T7339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2064.740069][ T7339] ? ksys_write+0x1ac/0x250 [ 2064.740084][ T7339] ? __pfx_ksys_write+0x10/0x10 [ 2064.740100][ T7339] __x64_sys_madvise+0xa9/0x110 [ 2064.740111][ T7339] do_syscall_64+0x115/0x870 [ 2064.740122][ T7339] ? clear_bhb_loop+0x40/0x90 [ 2064.740134][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2064.740145][ T7339] RIP: 0033:0x7f0e0919ce59 [ 2064.740155][ T7339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2064.740165][ T7339] RSP: 002b:00007f0e0a12c028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2064.740177][ T7339] RAX: ffffffffffffffda RBX: 00007f0e09415fa0 RCX: 00007f0e0919ce59 [ 2064.740184][ T7339] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 2064.740191][ T7339] RBP: 00007f0e0a12c090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.740197][ T7339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.740203][ T7339] R13: 00007f0e09416038 R14: 00007f0e09415fa0 R15: 00007ffeb4bb60a8 [ 2064.740218][ T7339] [ 2068.071670][ T30] kauditd_printk_skb: 1613 callbacks suppressed [ 2068.071687][ T30] audit: type=1400 audit(1917.915:121491): avc: denied { read write } for pid=3674 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2068.103320][ T30] audit: type=1400 audit(1917.915:121492): avc: denied { read write open } for pid=3674 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2068.130365][ T30] audit: type=1400 audit(1917.915:121493): avc: denied { ioctl } for pid=3674 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2068.157776][ T30] audit: type=1400 audit(1917.952:121494): avc: denied { read } for pid=7366 comm="syz.3.8873" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2068.183007][ T30] audit: type=1400 audit(1917.952:121495): avc: denied { read open } for pid=7366 comm="syz.3.8873" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2068.209937][ T30] audit: type=1400 audit(1917.952:121496): avc: denied { ioctl } for pid=7366 comm="syz.3.8873" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2068.234474][ T30] audit: type=1400 audit(1918.044:121497): avc: denied { read } for pid=7366 comm="syz.3.8873" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2068.259454][ T30] audit: type=1400 audit(1918.044:121498): avc: denied { read open } for pid=7366 comm="syz.3.8873" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2068.286210][ T30] audit: type=1400 audit(1918.044:121499): avc: denied { ioctl } for pid=7366 comm="syz.3.8873" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2068.312189][ T30] audit: type=1400 audit(1918.109:121500): avc: denied { read write } for pid=7366 comm="syz.3.8873" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 2068.566242][ T7371] binder: 7369:7371 ioctl 5429 200000001a40 returned -22 [ 2068.751569][ T7373] input: syz0 as /devices/virtual/input/input136 [ 2068.779880][ T7373] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8875'. [ 2069.224439][ T8290] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2069.386905][ T8290] usb 4-1: Using ep0 maxpacket: 8 [ 2069.394260][ T8290] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 2069.402440][ T8290] usb 4-1: config 0 has no interface number 0 [ 2069.408575][ T8290] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2069.419385][ T8290] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2069.430967][ T8290] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2069.441935][ T8290] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2069.454954][ T8290] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2069.464353][ T8290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2069.474811][ T8290] usb 4-1: config 0 descriptor?? [ 2069.495055][ T8290] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2070.251963][ T7404] xt_l2tp: v2 doesn't support IP mode [ 2070.259569][ T7404] netlink: 'syz.6.8877': attribute type 10 has an invalid length. [ 2070.270627][ T7404] .`: (slave netdevsim1): Releasing backup interface [ 2070.283621][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8877'. [ 2070.706705][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2070.714367][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2070.722902][ T5618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2070.730349][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2070.738828][ T5618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2071.100882][ T7406] lo speed is unknown, defaulting to 1000 [ 2072.042849][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.050029][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.058705][ T7406] bridge_slave_0: entered allmulticast mode [ 2072.067298][ T7406] bridge_slave_0: entered promiscuous mode [ 2072.077742][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.084882][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.093830][ T7406] bridge_slave_1: entered allmulticast mode [ 2072.108004][ T7406] bridge_slave_1: entered promiscuous mode [ 2072.121053][ T8290] usb 4-1: USB disconnect, device number 43 [ 2072.132035][ T8290] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 2072.169776][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2072.184498][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2072.220039][ T7406] team0: Port device team_slave_0 added [ 2072.230141][ T7406] team0: Port device team_slave_1 added [ 2072.255446][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2072.264838][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.298195][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.315440][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.323147][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.353441][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.412511][ T7406] hsr_slave_0: entered promiscuous mode [ 2072.418859][ T7406] hsr_slave_1: entered promiscuous mode [ 2072.437232][ T7406] debugfs: 'hsr0' already exists in 'hsr' [ 2072.453909][ T7406] Cannot create hsr debugfs directory [ 2072.720120][ T7406] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2072.746790][ T7406] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2072.824890][ T7406] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2072.840840][ T7406] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2072.889566][ T7406] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2072.907119][ T7406] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2072.973956][ T4926] Bluetooth: hci2: command tx timeout [ 2073.019616][ T7406] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 2073.043779][ T7406] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 2073.224116][ T7406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2073.249364][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2073.270864][ T7406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2073.289164][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2073.307175][ T7406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2073.320057][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2073.329193][ T7406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2073.338487][ T7406] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2073.512478][ T30] kauditd_printk_skb: 1305 callbacks suppressed [ 2073.512495][ T30] audit: type=1400 audit(1922.935:122659): avc: denied { search } for pid=7448 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2073.552877][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2073.584799][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 2073.599481][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.606594][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.621447][ T30] audit: type=1804 audit(1923.027:122660): pid=7481 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.8885" name="/newroot/213/file0" dev="fuse" ino=1 res=1 errno=0 [ 2073.654595][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.661745][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.681564][ T30] audit: type=1400 audit(1923.064:122661): avc: denied { read write } for pid=31815 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2073.715926][ T7481] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8885'. [ 2073.747778][ T30] audit: type=1400 audit(1923.064:122662): avc: denied { read write open } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2073.783922][ T7406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2073.800240][ T30] audit: type=1400 audit(1923.064:122663): avc: denied { ioctl } for pid=31815 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2073.833838][ T30] audit: type=1400 audit(1923.083:122664): avc: denied { create } for pid=7480 comm="syz.3.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2073.884465][ T30] audit: type=1400 audit(1923.083:122665): avc: denied { write } for pid=7480 comm="syz.3.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2073.920807][ T30] audit: type=1400 audit(1923.083:122666): avc: denied { read } for pid=7480 comm="syz.3.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2073.944317][ T30] audit: type=1400 audit(1923.083:122667): avc: denied { read } for pid=7480 comm="syz.3.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2073.966264][ T30] audit: type=1400 audit(1923.083:122668): avc: denied { write } for pid=7480 comm="syz.3.8885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2074.189131][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2074.227975][ T7406] veth0_vlan: entered promiscuous mode [ 2074.239761][ T7406] veth1_vlan: entered promiscuous mode [ 2074.267473][ T7406] veth0_macvtap: entered promiscuous mode [ 2074.279509][ T7406] veth1_macvtap: entered promiscuous mode [ 2074.296314][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2074.309162][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.321871][T30398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.331644][T30398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.341857][T30398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.351855][T30398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.403929][T30398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.420662][T30398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.443535][T30390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.452310][T30390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.227934][ T4926] Bluetooth: hci2: command tx timeout [ 2077.481872][ T4926] Bluetooth: hci2: command tx timeout [ 2078.967723][ T30] kauditd_printk_skb: 92 callbacks suppressed [ 2078.967741][ T30] audit: type=1400 audit(1927.973:122761): avc: denied { execmem } for pid=7502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2079.735975][ T4926] Bluetooth: hci2: command tx timeout [ 2081.140667][ T30] audit: type=1400 audit(1929.976:122762): avc: denied { execmem } for pid=7503 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2085.546131][ T4341] block nbd3: Possible stuck request ffff8880284d5080: control (read@0,1024B). Runtime 30 seconds [ 2085.556772][ T4341] block nbd3: Possible stuck request ffff8880284d5240: control (read@1024,1024B). Runtime 30 seconds [ 2085.567689][ T4341] block nbd3: Possible stuck request ffff8880284d5400: control (read@2048,1024B). Runtime 30 seconds [ 2085.578919][ T4341] block nbd3: Possible stuck request ffff8880284d55c0: control (read@3072,1024B). Runtime 30 seconds [ 2102.888151][ T2135] bridge_slave_1: left allmulticast mode [ 2102.893949][ T2135] bridge_slave_1: left promiscuous mode [ 2102.899657][ T2135] bridge0: port 2(bridge_slave_1) entered disabled state [ 2102.909438][ T2135] bridge_slave_0: left allmulticast mode [ 2102.915264][ T2135] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.054635][ T2135] batman_adv: batadv0: Interface deactivated: gretap1 [ 2103.061959][ T2135] batadv0: mtu less than device minimum [ 2103.068923][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.079676][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.090261][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.101029][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.111609][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.122333][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.133109][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.143851][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.154489][ T2135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2103.200436][ T2135] batman_adv: batadv0: Removing interface: gretap1 [ 2103.211634][ T2135] bond0 (unregistering): (slave geneve0): Releasing active interface [ 2103.219759][ T2135] geneve0 (unregistering): left allmulticast mode [ 2103.342224][ T2135] bond0 (unregistering): Released all slaves [ 2103.351290][ T2135] bond1 (unregistering): Released all slaves [ 2103.435288][ T2135] tipc: Left network mode [ 2103.729698][ T2135] hsr_slave_0: left promiscuous mode [ 2103.736224][ T2135] hsr_slave_1: left promiscuous mode [ 2103.743380][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2103.756198][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2103.763858][ T2135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2103.776660][ T2135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2103.786627][ T2135] batman_adv: batadv0: Interface deactivated: dummy0 [ 2103.793489][ T2135] batman_adv: batadv0: Removing interface: dummy0 [ 2103.801315][ T2135] veth1_macvtap: left promiscuous mode [ 2103.806882][ T2135] veth0_macvtap: left promiscuous mode [ 2103.812420][ T2135] veth1_vlan: left promiscuous mode [ 2103.867062][T30398] smc: removing ib device syz0 [ 2103.909076][ T2170] syz0: Port: 1 Link DOWN [ 2103.922014][T30398] smbdirect: ib_dev[syz0] removed [ 2104.297066][ T2135] IPVS: stop unused estimator thread 0... [ 2118.140791][ T4341] block nbd3: Possible stuck request ffff8880284d5080: control (read@0,1024B). Runtime 60 seconds [ 2118.151572][ T4341] block nbd3: Possible stuck request ffff8880284d5240: control (read@1024,1024B). Runtime 60 seconds [ 2118.163187][ T4341] block nbd3: Possible stuck request ffff8880284d5400: control (read@2048,1024B). Runtime 60 seconds [ 2118.174161][ T4341] block nbd3: Possible stuck request ffff8880284d55c0: control (read@3072,1024B). Runtime 60 seconds [ 2120.710655][ T4975] udevd[4975]: worker [26443] /devices/virtual/block/nbd3 is taking a long time [ 2150.738333][ T4341] block nbd3: Possible stuck request ffff8880284d5080: control (read@0,1024B). Runtime 90 seconds [ 2150.749065][ T4341] block nbd3: Possible stuck request ffff8880284d5240: control (read@1024,1024B). Runtime 90 seconds [ 2150.760024][ T4341] block nbd3: Possible stuck request ffff8880284d5400: control (read@2048,1024B). Runtime 90 seconds [ 2150.770987][ T4341] block nbd3: Possible stuck request ffff8880284d55c0: control (read@3072,1024B). Runtime 90 seconds [ 2183.344909][ T4341] block nbd3: Possible stuck request ffff8880284d5080: control (read@0,1024B). Runtime 120 seconds [ 2183.355718][ T4341] block nbd3: Possible stuck request ffff8880284d5240: control (read@1024,1024B). Runtime 120 seconds [ 2183.366736][ T4341] block nbd3: Possible stuck request ffff8880284d5400: control (read@2048,1024B). Runtime 120 seconds [ 2183.377800][ T4341] block nbd3: Possible stuck request ffff8880284d55c0: control (read@3072,1024B). Runtime 120 seconds [ 2205.006745][ T5618] Bluetooth: hci2: command 0x0406 tx timeout [ 2215.930145][ T4341] block nbd3: Possible stuck request ffff8880284d5080: control (read@0,1024B). Runtime 150 seconds [ 2215.940926][ T4341] block nbd3: Possible stuck request ffff8880284d5240: control (read@1024,1024B). Runtime 150 seconds [ 2215.952388][ T4341] block nbd3: Possible stuck request ffff8880284d5400: control (read@2048,1024B). Runtime 150 seconds [ 2215.964170][ T4341] block nbd3: Possible stuck request ffff8880284d55c0: control (read@3072,1024B). Runtime 150 seconds [ 2216.625051][ T31] INFO: task syz.9.8834:7180 blocked for more than 143 seconds. [ 2216.632931][ T31] Tainted: G L syzkaller #0 [ 2216.639964][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2216.648769][ T31] task:syz.9.8834 state:D stack:27656 pid:7180 tgid:7178 ppid:2599 task_flags:0x400140 flags:0x00080002 [ 2216.660769][ T31] Call Trace: [ 2216.664073][ T31] [ 2216.667039][ T31] __schedule+0x125c/0x6730 [ 2216.671563][ T31] ? __pfx___schedule+0x10/0x10 [ 2216.676405][ T31] ? rcu_is_watching+0x12/0xc0 [ 2216.681293][ T31] ? schedule+0x2bf/0x390 [ 2216.685624][ T31] ? lock_release+0x24d/0x310 [ 2216.690682][ T31] schedule+0xdd/0x390 [ 2216.694760][ T31] schedule_preempt_disabled+0x13/0x30 [ 2216.700294][ T31] __mutex_lock+0xccc/0x1bd0 [ 2216.704903][ T31] ? sync_bdevs+0x153/0x480 [ 2216.709397][ T31] ? rcu_is_watching+0x12/0xc0 [ 2216.714241][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2216.719275][ T31] ? __mutex_unlock_slowpath+0x350/0x910 [ 2216.725113][ T31] ? iput.part.0+0x1a0/0x1050 [ 2216.729837][ T31] ? sync_bdevs+0x53/0x480 [ 2216.734417][ T31] ? lock_release+0x211/0x310 [ 2216.739122][ T31] ? sync_bdevs+0x153/0x480 [ 2216.743754][ T31] sync_bdevs+0x153/0x480 [ 2216.748118][ T31] ksys_sync+0xb0/0xf0 [ 2216.752171][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 2216.757018][ T31] ? rcu_is_watching+0x12/0xc0 [ 2216.761778][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2216.767941][ T31] __do_sys_sync+0xe/0x20 [ 2216.772301][ T31] do_syscall_64+0x115/0x870 [ 2216.777026][ T31] ? clear_bhb_loop+0x40/0x90 [ 2216.781724][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.787673][ T31] RIP: 0033:0x7f327b99ce59 [ 2216.792099][ T31] RSP: 002b:00007f327c874028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 2216.800837][ T31] RAX: ffffffffffffffda RBX: 00007f327bc15fa0 RCX: 00007f327b99ce59 [ 2216.808882][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2216.816858][ T31] RBP: 00007f327bc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2216.824943][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2216.832972][ T31] R13: 00007f327bc16038 R14: 00007f327bc15fa0 R15: 00007ffcb37becf8 [ 2216.840980][ T31] [ 2216.844011][ T31] INFO: lockdep is turned off. [ 2216.848761][ T31] NMI backtrace for cpu 1 [ 2216.848775][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2216.848792][ T31] Tainted: [L]=SOFTLOCKUP [ 2216.848795][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2216.848802][ T31] Call Trace: [ 2216.848808][ T31] [ 2216.848814][ T31] dump_stack_lvl+0x100/0x190 [ 2216.848829][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2216.848842][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2216.848854][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 2216.848872][ T31] sys_info+0x141/0x190 [ 2216.848885][ T31] watchdog+0xcb1/0x1030 [ 2216.848903][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2216.848918][ T31] ? __pfx_watchdog+0x10/0x10 [ 2216.848934][ T31] ? __kthread_parkme+0x18c/0x230 [ 2216.848947][ T31] ? kthread+0x13a/0x450 [ 2216.848959][ T31] ? __pfx_watchdog+0x10/0x10 [ 2216.848974][ T31] kthread+0x370/0x450 [ 2216.848987][ T31] ? __pfx_kthread+0x10/0x10 [ 2216.849000][ T31] ret_from_fork+0x72b/0xd50 [ 2216.849012][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2216.849024][ T31] ? __switch_to+0x800/0x10f0 [ 2216.849038][ T31] ? __pfx_kthread+0x10/0x10 [ 2216.849052][ T31] ret_from_fork_asm+0x1a/0x30 [ 2216.849069][ T31] [ 2216.849073][ T31] Sending NMI from CPU 1 to CPUs 0: [ 2216.981292][ C0] NMI backtrace for cpu 0 [ 2216.981309][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2216.981329][ C0] Tainted: [L]=SOFTLOCKUP [ 2216.981334][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2216.981342][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2216.981363][ C0] Code: c6 90 02 e9 c3 48 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 e6 1e 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2216.981376][ C0] RSP: 0018:ffffffff8e407e10 EFLAGS: 00000246 [ 2216.981393][ C0] RAX: 000000000e1ed824 RBX: ffffffff8e495480 RCX: ffffffff8b8cb2b5 [ 2216.981402][ C0] RDX: 0000000000000001 RSI: ffffffff8c1ce980 RDI: ffffffff81de1ea7 [ 2216.981411][ C0] RBP: fffffbfff1c92a90 R08: 0000000000000000 R09: ffffed101708678d [ 2216.981420][ C0] R10: ffff8880b8433c6b R11: ffffffff81d4f52c R12: 0000000000000000 [ 2216.981429][ C0] R13: 0000000000000000 R14: 1ffffffff1c80fc6 R15: dffffc0000000000 [ 2216.981438][ C0] FS: 0000000000000000(0000) GS:ffff88812435f000(0000) knlGS:0000000000000000 [ 2216.981451][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2216.981460][ C0] CR2: 000055f24f0e8168 CR3: 000000000e596000 CR4: 00000000003526f0 [ 2216.981469][ C0] DR0: ffffffffffffffff DR1: 00000000000001f7 DR2: 00000000ffffffff [ 2216.981478][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2216.981487][ C0] Call Trace: [ 2216.981492][ C0] [ 2216.981497][ C0] default_idle+0x9/0x10 [ 2216.981513][ C0] default_idle_call+0x6c/0xb0 [ 2216.981529][ C0] do_idle+0x3a7/0x5b0 [ 2216.981546][ C0] ? __pfx_do_idle+0x10/0x10 [ 2216.981560][ C0] ? finish_task_switch.isra.0+0x14c/0x1010 [ 2216.981578][ C0] cpu_startup_entry+0x4f/0x60 [ 2216.981593][ C0] rest_init+0x251/0x260 [ 2216.981609][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2216.981627][ C0] start_kernel+0x484/0x490 [ 2216.981644][ C0] x86_64_start_reservations+0x24/0x30 [ 2216.981660][ C0] x86_64_start_kernel+0x12b/0x130 [ 2216.981675][ C0] common_startup_64+0x13e/0x158 [ 2216.981697][ C0] [ 2217.190136][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2217.196980][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2217.207627][ T31] Tainted: [L]=SOFTLOCKUP [ 2217.211952][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2217.221994][ T31] Call Trace: [ 2217.225257][ T31] [ 2217.228171][ T31] dump_stack_lvl+0x100/0x190 [ 2217.232845][ T31] vpanic+0x552/0x970 [ 2217.236797][ T31] ? __pfx_vpanic+0x10/0x10 [ 2217.241293][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 2217.247446][ T31] panic+0xd1/0xe0 [ 2217.251241][ T31] ? __pfx_panic+0x10/0x10 [ 2217.255641][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 2217.261797][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 2217.267938][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 2217.274077][ T31] ? watchdog.cold+0x1ec/0x234 [ 2217.278824][ T31] ? watchdog+0xcc1/0x1030 [ 2217.283241][ T31] watchdog.cold+0x1fd/0x234 [ 2217.287840][ T31] ? trace_irq_enable.constprop.0+0x122/0x160 [ 2217.293916][ T31] ? __pfx_watchdog+0x10/0x10 [ 2217.298580][ T31] ? __kthread_parkme+0x18c/0x230 [ 2217.303586][ T31] ? kthread+0x13a/0x450 [ 2217.307822][ T31] ? __pfx_watchdog+0x10/0x10 [ 2217.312553][ T31] kthread+0x370/0x450 [ 2217.316633][ T31] ? __pfx_kthread+0x10/0x10 [ 2217.321208][ T31] ret_from_fork+0x72b/0xd50 [ 2217.325788][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2217.330886][ T31] ? __switch_to+0x800/0x10f0 [ 2217.335546][ T31] ? __pfx_kthread+0x10/0x10 [ 2217.340120][ T31] ret_from_fork_asm+0x1a/0x30 [ 2217.344871][ T31] [ 2217.348071][ T31] Kernel Offset: disabled [ 2217.352382][ T31] Rebooting in 86400 seconds..