last executing test programs: 11m53.663751762s ago: executing program 2 (id=4951): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r7 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r7, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe) 11m52.77076727s ago: executing program 2 (id=4953): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000080)={"105ce660b6da58f19d17a67075c8161f", 0x0, 0x0, {0x1, 0x80000000}, {0x78, 0x1000}, 0x80000001, [0x7, 0x3ff, 0x9, 0x80000000, 0x10000, 0x2, 0x68, 0x7, 0x6, 0x1, 0xbf8f, 0x483c, 0xb, 0x8, 0x9, 0x8]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}) 11m52.659944182s ago: executing program 2 (id=4955): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 11m52.649167568s ago: executing program 2 (id=4956): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 11m52.596500983s ago: executing program 2 (id=4957): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x24000040) 11m52.305381102s ago: executing program 2 (id=4959): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f0104020"], 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 11m52.053684863s ago: executing program 32 (id=4959): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f0104020"], 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 8m21.097401374s ago: executing program 3 (id=6416): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x1400000, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x9, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x9f4, 0x82, 0x0, 0x7, 0x6, 0x8, 0x6, 0x1, 0x42], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x1, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x0, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x1, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0xfffffffffffffd27, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 8m19.587297819s ago: executing program 3 (id=6422): r0 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x10f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0x30, 0xc, {0x8, 0xb, 0x1, 0x1, 0x1, 0x23, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x3, 0x81, {0xa, 0x25, 0x25, 0x3ff, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf8, 0x6, 0xf1, {0xa, 0x25, 0x25, 0x4, 0xd, 0x3}}}}}}}}]}}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000001680)={0x14, 0x0, &(0x7f0000001640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 8m12.126931443s ago: executing program 3 (id=6437): socket(0x2, 0xa, 0x300) r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m10.226251061s ago: executing program 3 (id=6443): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x4, 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 8m6.515418436s ago: executing program 3 (id=6453): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x8, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) 8m4.58777559s ago: executing program 3 (id=6460): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x1, 0xb651, 0x1, 0x6da, 0x5, 0xbc96, 0xa}, &(0x7f0000000600), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 7m48.9286296s ago: executing program 33 (id=6460): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x1, 0xb651, 0x1, 0x6da, 0x5, 0xbc96, 0xa}, &(0x7f0000000600), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x6, 0xff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f4070009", 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 6m45.020939498s ago: executing program 4 (id=6671): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c2", @ANYRES32, @ANYBLOB="0200"/13, @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB='d\x00', @ANYRES16=0x0, @ANYBLOB="000228bd70000800000017000000040001800c00018008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="34000180140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400241972316373656330"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d867", 0x8c}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m42.943137028s ago: executing program 4 (id=6676): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c2", @ANYRES32, @ANYBLOB="0200"/18, @ANYRES32, @ANYRES32], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB='d\x00', @ANYRES16=0x0, @ANYBLOB="000228bd70000800000017000000040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="34000180140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400241972316373656330"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0c", 0x46}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc", 0x41}], 0x5}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m41.673305494s ago: executing program 4 (id=6681): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc880}, 0x0) 6m36.846221169s ago: executing program 4 (id=6688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x121001, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002f40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x5a}, {0x0}, {0x0}], 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x10}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200}) 6m34.939442796s ago: executing program 4 (id=6693): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000280)) openat$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000240), &(0x7f0000000140)='%-010d \x00'}, 0x20) 6m33.904970399s ago: executing program 4 (id=6696): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @rand_addr=0x64010102, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x3, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1004000, 0x800, 0x3, 0x3}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 6m18.999991278s ago: executing program 34 (id=6696): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @rand_addr=0x64010102, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x3, 0xfffffffe}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000140)={0x0, 0x1004000, 0x800, 0x3, 0x3}, 0x20) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 4m15.548238824s ago: executing program 7 (id=6976): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4c24, @private=0xa010101}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) sendto$inet(r0, &(0x7f0000000340)='2', 0x1, 0x4008040, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x388, 0x41d9fda7) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x840808, &(0x7f0000000280)={[{@xino_on}]}) socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x1f, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) close(r0) socket(0x10, 0x803, 0x0) 4m14.515023623s ago: executing program 7 (id=6978): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0x8, 0x3, 0x0, {0xfffffffffffffffd, 0x2, 0xfffffffffffffffc, 0x0, 0xc, 0xffffffff, 0xfffffffe, 0x4, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc01, 0x8) semget$private(0x0, 0x5, 0x100) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffffd) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0)) syz_open_dev$vim2m(0x0, 0x242, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r3, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x4c0f, 0x400, 0x3, 0x288}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 4m9.459567065s ago: executing program 7 (id=6988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) 4m7.747349864s ago: executing program 7 (id=6993): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002065942feac53a1c35c9b63030000000000000000000000000014000780080011ffffffffffffff7f00040000000500010006000000050005000200b076983f11ff1033b8aa8199a81f0000050004000100"], 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x3}, &(0x7f0000000100), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000200)={0xffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) socket(0xa, 0x5, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r3, &(0x7f0000001900)={&(0x7f00000010c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="f79b"], 0x10}, 0x20000010) r4 = semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000280)=""/52) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x1) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0x17) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 4m3.389624196s ago: executing program 7 (id=6999): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) clock_gettime(0xfffffffffffffffb, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = io_uring_setup(0xbbc, 0x0) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000180)=""/67) syz_usb_connect$uac1(0x1, 0xb1, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x4e4cb568348d8fcf, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x7, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x9, 0x8, "ecef57a826ecde3e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x9, 0x5, {0x7, 0x25, 0x1, 0x4, 0x1, 0xa29}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0xa, 0x0, "b4280473dc1f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x19, 0x5, 0x4, 0xb0}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x2, 0x6, 'he'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1000, 0x6d, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x8, {0x7, 0x25, 0x1, 0x8, 0x9}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0x3, 0x40, 0x40, 0x8}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xda, "9be30049b874bfa13fa1039b4f0a321f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x6, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a41709cf027d58104e6929058b401f89"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80f}}, {0xc5, &(0x7f0000000900)=@string={0xc5, 0x3, "90a102e2723d553fc84ea4b8f78a090c9d357e826e70d028b9e49e3f6a182cad591177550d972928b40aceceba5d5b85decd8c260a890ce1155a785253d4ee4facfe1f6f2cff007da5ce01eeaeef9dcfac3a2a701e94a15d9deec159c84f390e4f7d70d47128be98c7a151c40742f8f6f6b4e8349f4e35551d5a36d8cb14f4e29f4791aa391a6e35c03c7e54797687eab1f34898096bb4b209da4831a8f4cfae208f883c07c9b1d85b605d942fb33ff5ef9207513f9f45431ca2a636124fac8115fe8a"}}, {0x9, &(0x7f0000000340)=@string={0x9, 0x3, "01eb987bfa48ac"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc65}}, {0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "804022d2156f3bbd1ed27f55def7f3c81ca82e38094f2f4563f4d05ff307638ad8e7b2ae6ea53589a96c96de551aa8869501febe3326370e560f26941df7efe90dde5ed09ade9b6b4fecdd4852893e10ccd429f9d2ccdb3c33f28d410b7509dc32d092332c2350d38e26a578d6b27f6289d2323388a463e42737f88d4f024776f4954871b67e67fb12844c9a"}}, {0xac, &(0x7f00000006c0)=@string={0xac, 0x3, "a326f09bdf223c3ee2367cbe947a4f45ae7f41a030085ba711a4ce190330633286305fb0e8a79278ee129e6d20ace81384f608823f947cb70d7db7dead993c712b14595fbc3e11c68556252180d8d1e5ba6eff8c16e25bdb14048c85bb1bafd8150d59082187106a3e006ba0bb4ed53e36ee3b4e7efcba34886c91f328a6cbfd4916b16fb43e18a3fd2b27fa36dac018cb56c6a3f46a4c4b1d890ff1534f618198ecd26074794cf0dd5e"}}, {0x31, &(0x7f0000000780)=@string={0x31, 0x3, "73b19e69161ea1a9176cd7c97554883070338ac8bc2d32da341ea8319c0282e3f00f87e15a10b42b7588549b6383d6"}}, {0x58, &(0x7f00000007c0)=@string={0x58, 0x3, "cf10239a8b03e646b877b61bb193055285832aeb996cb16e676da1a34d7b02ff1ef73b2f3837c28ecc0ffbaca0e3fa6bdcfa2b22888d21b3296dd9bdea72f006de6de1ccfd1faff53f04a8476c0288adb7c03611bb7e"}}]}) 3m58.928749818s ago: executing program 7 (id=7010): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x20002, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r5 = getpid() sched_setattr(r5, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0xc80, 0x150, 0xa0, 0x80, 0x32, 0x7, 0x0, 0x0, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {0x9, 0x0, 0x1fd}, 0x0, 0x100, 0x0, 0x1, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0xff, 0x8, 0x4, 0x0, 0x0, 0xbb9a88490d861b0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306010400000000000000000200000546ff102b00cce685"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3m42.246832139s ago: executing program 35 (id=7010): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x20002, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x787203) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') r5 = getpid() sched_setattr(r5, 0x0, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180b00, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0xc80, 0x150, 0xa0, 0x80, 0x32, 0x7, 0x0, 0x0, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x1}, {}, {0x9, 0x0, 0x1fd}, 0x0, 0x100, 0x0, 0x1, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0xff, 0x8, 0x4, 0x0, 0x0, 0xbb9a88490d861b0}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r6, 0xc0385868, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000306010400000000000000000200000546ff102b00cce685"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 25.176030698s ago: executing program 1 (id=8138): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x6, 0x4e, &(0x7f0000000040)=""/78) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x44002) syz_usb_connect$cdc_ecm(0x5, 0x5c, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) syz_usb_connect$uac2(0x6, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x0, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$rtl8150(0x5, 0x0, 0x0, 0x0) 20.643942115s ago: executing program 1 (id=8156): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r4, 0x7) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x17, 0x3, 'lblc\x00', 0xd, 0x4, 0x65}, 0x2c) 19.067387516s ago: executing program 1 (id=8158): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x10001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x440, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0, 0x6000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@local, 0x4e1e, 0x3, 0x4e21, 0x0, 0x565e196a2b5cf539, 0x20, 0x20, 0x33}, {0x6, 0x1, 0x400006, 0xe0d, 0xffff, 0x8, 0xfffffffd, 0x7}, {0x7ffffffe, 0x8000000000000001, 0x1ff, 0x6}, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d2, 0x2b}, 0xa, @in6=@private0, 0x3502, 0x1, 0x1, 0x8, 0x9d, 0x9, 0xc1}}, 0xe8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0306c902"], 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f000001a440)=""/102400, 0x19000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e657400000014000780080006402000000008001340", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) ioprio_get$pid(0x2, r4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') socket(0x2, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRES8, @ANYRESOCT=r2, @ANYRES16], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 18.741672333s ago: executing program 1 (id=8162): ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x200) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000200)={{0x5, 0x7f}, 'port1\x00', 0x80, 0x14, 0x7ff, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d, 0x9}) ioctl$TCXONC(r1, 0x540a, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 16.742942571s ago: executing program 1 (id=8170): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x0, 0x3, 0x4, @generic}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, &(0x7f00000001c0)) socket$kcm(0xa, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r5 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x3, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 16.404279304s ago: executing program 1 (id=8174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wlan1\x00'}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) 12.655783949s ago: executing program 6 (id=8182): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00', @ANYRES16, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f0000000000000000000000000000feff001400200000000000000000000000ffff00000000050007000000000006000200010000000800"], 0x5c}}, 0x0) unshare(0x8000000) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0x1, 0x19d) r2 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x200) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 11.123603356s ago: executing program 6 (id=8187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1c72}, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@mmap={0xe2, 0x1, 0x4, 0x0, 0x1000, {0x77359400}, {0x5, 0x0, 0x9, 0x1, 0x3, 0x80, "65e938db"}, 0x51a, 0x1, {}, 0xff}) 11.067650986s ago: executing program 6 (id=8188): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="2aab830f28b0380f6061bd0539280000000506608d2cbd7000fedbdf251400c2a501006800fe8000000000000000000000000000aa"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}, @clear_death={0x400c630f, 0x3}], 0xf26, 0x0, &(0x7f00000014c0)="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"}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = syz_open_dev$loop(0x0, 0xffff, 0x14f600) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 8.589864224s ago: executing program 8 (id=8190): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x50}}, 0x0) 8.520930336s ago: executing program 6 (id=8191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x0, 0x2a}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 8.003246039s ago: executing program 5 (id=8192): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x9, 0xf65, 0x0, 0x0, 0x4}, {0x0, 0x6, 0xfffffffffffffffa, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in6=@empty, 0x1, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0xc, @loopback, 0x1}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x8}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x62000000) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x9, 0x8, 0x8, 0x209, 0x3]}, &(0x7f0000000180)=0x54) 6.000205458s ago: executing program 8 (id=8193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getpeername(r3, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5.136692537s ago: executing program 5 (id=8194): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="352070cfb7486d610cbf2c61047b598bfe9cd45d", 0x14}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="9b", 0x1}], 0x1}}], 0x5, 0x2400c0a2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4020aeb2, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.014116524s ago: executing program 8 (id=8196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) setresuid(0x0, 0xee01, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) fsync(r5) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) 4.929652529s ago: executing program 8 (id=8198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4eb36, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000040)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x1c72}, 0xc) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@mmap={0xe2, 0x1, 0x4, 0x0, 0x1000, {0x77359400}, {0x5, 0x0, 0x9, 0x1, 0x3, 0x80, "65e938db"}, 0x51a, 0x1, {}, 0xff}) 4.911411043s ago: executing program 6 (id=8199): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = gettid() migrate_pages(r5, 0x568, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x3bbb250cedad6447) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000086d040ec2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x4, "c8d30826"}, @global=@item_012={0x1, 0x1, 0x0, 'D'}, @local=@item_012={0x2, 0x2, 0xa, "e715"}, @local=@item_012={0x0, 0x2, 0x8}]}}, 0x0}, 0x0) 4.833305565s ago: executing program 8 (id=8201): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe16) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020000000206010200000006200020040007800900020073797a3000000600100007800c00303a1ac349f10180080001406401012c6e65740000000005d0000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000) socket$inet_mptcp(0x2, 0x1, 0x106) 4.446546845s ago: executing program 0 (id=8202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x0, 0x2a}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 4.251034326s ago: executing program 5 (id=8203): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xffffff5a) socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = gettid() prlimit64(r2, 0x9, &(0x7f00000000c0)={0x6, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) r4 = socket(0x12, 0x800, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7e) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x260, 0xf8, 0x5002004a, 0x0, 0xf8, 0x0, 0x1c8, 0x3c8, 0x3c8, 0x1c8, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xffffffff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) dup(0xffffffffffffffff) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000080)=0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendto$l2tp(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) 4.055076124s ago: executing program 5 (id=8204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r3, 0xffffffffffffffff, 0xfffffb6e}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 3.390100757s ago: executing program 8 (id=8205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000380)={0x9e}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x6c47764f}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = dup(0xffffffffffffffff) setregid(0xee00, 0xee00) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0x2, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x25, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xd231c4f959ad4808) syz_open_dev$dri(0x0, 0x1, 0x2200) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r4, 0x2270, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$key(0xffffffffffffffff, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000500)=ANY=[@ANYBLOB="021708080700000025bd7000fedbdf2505000700ffa000000a"], 0x38}}, 0x4000000) 3.287570602s ago: executing program 0 (id=8206): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="02048e250e000000000000000000000005000600000000000a00000000000000fc0200000000000000000000000000000000000000000000020001000000000000000d000000000005000500000000000a"], 0x70}, 0x1, 0x7}, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x18, 0x1, 0x2) getsockname$packet(r2, 0x0, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mincore(&(0x7f00005c9000/0x3000)=nil, 0x3000, 0xfffffffffffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$dupfd(r4, 0x406, r1) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r7, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r6, 0x0, 0x0) close_range(r6, r6, 0x0) close(r0) mount$afs(&(0x7f00000004c0)=ANY=[@ANYBLOB='#syz'], &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240), 0x800040, &(0x7f0000000300)=ANY=[@ANYBLOB='flock=write,flock=local,flock=strict,flock=strict,flock=strict,dyn']) 2.555106519s ago: executing program 5 (id=8207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) r6 = syz_open_procfs(0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x39) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000020800410073697700140033006c6f000000000000000000000000000073d2fe3f54359b4286f1b73223ef1629c2f01b7e5d45d39aafb856cf994b881d79dbcf63b6364d378cd8ecbffbb5d8ab103f1311"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0x2}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8c, 0x0, &(0x7f0000000680)=[@free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/91, 0x5b, 0x1, 0x3f}, @flat=@weak_binder={0x77622a85, 0x100}, @fda={0x66646185, 0xd, 0x1, 0x22}}, &(0x7f00000005c0)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x1}, @enter_looper, @acquire_done={0x40106309, 0x1}, @clear_death, @register_looper], 0x0, 0x0, 0x0}) 1.835343682s ago: executing program 0 (id=8208): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$alg(r2, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x5, 0x2d}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e24}}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00'], 0x5c}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xcfd, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x31) 1.757071422s ago: executing program 0 (id=8209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x400040c0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x3) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x6}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x4}}, [@snprintf={{0x7, 0x0, 0x8, 0x6}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x6}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 608.665313ms ago: executing program 5 (id=8210): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x5c, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0xa, 0x1, 0x31}, @fda={0x66646185, 0x6, 0x0, 0x2a}}, &(0x7f0000000340)={0x0, 0x18, 0x38}}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) 491.903425ms ago: executing program 6 (id=8211): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0x3454, &(0x7f00000003c0)={0x0, 0x0, 0x40, 0x0, 0xa7}) clock_gettime(0xfffffffffffffffb, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) io_uring_setup(0xbbc, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000180)=""/67) syz_usb_connect$uac1(0x1, 0xb1, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x4e4cb568348d8fcf, 0x2b73, 0x1e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x3, 0x1, 0x7, 0x50, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x9, 0x8, "ecef57a826ecde3e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x9, 0x5, {0x7, 0x25, 0x1, 0x4, 0x1, 0xa29}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0xa, 0x0, "b4280473dc1f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x19, 0x5, 0x4, 0xb0}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x2, 0x6, 'he'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x1000, 0x6d, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x4, 0x8, {0x7, 0x25, 0x1, 0x8, 0x9}}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x2, 0x3, 0x40, 0x40, 0x8}, 0x37, &(0x7f0000000140)={0x5, 0xf, 0x37, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xda, "9be30049b874bfa13fa1039b4f0a321f"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xb, 0x0, 0x6, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "a41709cf027d58104e6929058b401f89"}]}, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80f}}, {0xc5, &(0x7f0000000900)=@string={0xc5, 0x3, "90a102e2723d553fc84ea4b8f78a090c9d357e826e70d028b9e49e3f6a182cad591177550d972928b40aceceba5d5b85decd8c260a890ce1155a785253d4ee4facfe1f6f2cff007da5ce01eeaeef9dcfac3a2a701e94a15d9deec159c84f390e4f7d70d47128be98c7a151c40742f8f6f6b4e8349f4e35551d5a36d8cb14f4e29f4791aa391a6e35c03c7e54797687eab1f34898096bb4b209da4831a8f4cfae208f883c07c9b1d85b605d942fb33ff5ef9207513f9f45431ca2a636124fac8115fe8a"}}, {0x9, &(0x7f0000000340)=@string={0x9, 0x3, "01eb987bfa48ac"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc65}}, {0x8e, &(0x7f0000000600)=@string={0x8e, 0x3, "804022d2156f3bbd1ed27f55def7f3c81ca82e38094f2f4563f4d05ff307638ad8e7b2ae6ea53589a96c96de551aa8869501febe3326370e560f26941df7efe90dde5ed09ade9b6b4fecdd4852893e10ccd429f9d2ccdb3c33f28d410b7509dc32d092332c2350d38e26a578d6b27f6289d2323388a463e42737f88d4f024776f4954871b67e67fb12844c9a"}}, {0xac, &(0x7f00000006c0)=@string={0xac, 0x3, "a326f09bdf223c3ee2367cbe947a4f45ae7f41a030085ba711a4ce190330633286305fb0e8a79278ee129e6d20ace81384f608823f947cb70d7db7dead993c712b14595fbc3e11c68556252180d8d1e5ba6eff8c16e25bdb14048c85bb1bafd8150d59082187106a3e006ba0bb4ed53e36ee3b4e7efcba34886c91f328a6cbfd4916b16fb43e18a3fd2b27fa36dac018cb56c6a3f46a4c4b1d890ff1534f618198ecd26074794cf0dd5e"}}, {0x31, &(0x7f0000000780)=@string={0x31, 0x3, "73b19e69161ea1a9176cd7c97554883070338ac8bc2d32da341ea8319c0282e3f00f87e15a10b42b7588549b6383d6"}}, {0x58, &(0x7f00000007c0)=@string={0x58, 0x3, "cf10239a8b03e646b877b61bb193055285832aeb996cb16e676da1a34d7b02ff1ef73b2f3837c28ecc0ffbaca0e3fa6bdcfa2b22888d21b3296dd9bdea72f006de6de1ccfd1faff53f04a8476c0288adb7c03611bb7e"}}]}) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x4, 0x4, &(0x7f0000000080)={0x1d, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 348.872843ms ago: executing program 36 (id=8174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, 0x0, 0x40004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001d40)={'wlan1\x00'}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$HIDIOCSUSAGES(r5, 0x501c4814, 0x0) 112.805142ms ago: executing program 0 (id=8213): mkdir(&(0x7f0000000340)='./file0\x00', 0x10) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x30, r0, 0x775f6000) syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x101842) syz_open_dev$hiddev(&(0x7f0000000000), 0x38c, 0x804) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/udp\x00') read$FUSE(r1, &(0x7f000001f4c0)={0x2020}, 0x1f38) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@local, @broadcast, @void, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x7, 0x0, 0x0, 0x0, "3175f166b247b754"}}}}, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000000c0)="18", 0x1}], 0x1}}], 0x2, 0x20040040) r4 = fanotify_init(0x2, 0x1) fanotify_mark(r4, 0x80, 0x8001018, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x3}, 0x8) 0s ago: executing program 0 (id=8214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc) clock_getres(0xfffffffffffffffb, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x404000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001780)=[{0x0, 0x14ec}], 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) r5 = socket(0x18, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000002240)="9000000018001f2fb9409b52ffff65580200be04020c060560020b02430c1600ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935a", 0x43, 0x24000040, 0x0, 0x0) kernel console output (not intermixed with test programs): 87.597:4656): avc: denied { read } for pid=30407 comm="syz.6.6921" path="socket:[102601]" dev="sockfs" ino=102601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1554.738608][T30433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6924'. [ 1554.768674][ T29] audit: type=1400 audit(1774383646.817:4657): avc: denied { getopt } for pid=30426 comm="syz.1.6924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1555.906410][T30439] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6919'. [ 1556.041001][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.081681][T30449] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1556.859161][ T5862] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1556.883962][ T29] audit: type=1400 audit(1774383648.783:4658): avc: denied { recv } for pid=23528 comm="syz-executor" saddr=10.128.0.169 src=45352 daddr=10.128.0.109 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1557.209744][T30467] veth0_macvtap: left allmulticast mode [ 1557.246113][ T5862] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 1557.401691][ T5862] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1557.428116][ T29] audit: type=1400 audit(1774383649.288:4659): avc: denied { bind } for pid=30460 comm="syz.5.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1557.607441][ T5862] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1558.197745][T17092] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1558.975754][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1558.991792][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.007081][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.018815][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.057803][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.070506][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.079865][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1559.168001][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.238566][ T29] audit: type=1400 audit(1774383651.010:4660): avc: denied { append } for pid=30480 comm="syz.5.6936" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1559.350233][ T5862] usb 8-1: string descriptor 0 read error: -71 [ 1559.370422][ T5862] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 1559.406769][ T5862] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.567662][ T5862] usb 8-1: config 0 descriptor?? [ 1559.599782][ T5862] usb 8-1: can't set config #0, error -71 [ 1559.720797][T30490] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6937'. [ 1560.097097][ T5862] usb 8-1: USB disconnect, device number 4 [ 1562.368822][ T29] audit: type=1400 audit(1774383653.939:4661): avc: denied { connect } for pid=30498 comm="syz.6.6941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1562.423794][ T29] audit: type=1400 audit(1774383653.967:4662): avc: denied { read } for pid=30498 comm="syz.6.6941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1563.718809][T30514] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.729031][T30514] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.181193][T30514] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.191966][T30514] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.524047][T30514] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.533979][T30514] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.620686][T30514] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.630490][T30514] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.160780][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.476744][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.610323][T30534] tmpfs: Bad value for 'mpol' [ 1565.658949][T30534] xt_HMARK: spi-set and port-set can't be combined [ 1565.779457][ T29] audit: type=1400 audit(1774383657.055:4663): avc: denied { write } for pid=30528 comm="syz.1.6947" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1565.840949][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.863043][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.871617][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.881134][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.890277][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.899784][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.414923][T30551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1567.575281][ T29] audit: type=1400 audit(1774383658.777:4664): avc: denied { getopt } for pid=30553 comm="syz.1.6951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1567.892791][T30563] netlink: 'syz.0.6954': attribute type 12 has an invalid length. [ 1568.011995][T30567] overlayfs: empty lowerdir [ 1568.162820][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6956'. [ 1568.370498][T30570] can: request_module (can-proto-3) failed. [ 1568.410498][T30573] input: syz0 as /devices/virtual/input/input69 [ 1568.419277][ T29] audit: type=1400 audit(1774383659.591:4665): avc: denied { setopt } for pid=30575 comm="syz.1.6958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1569.412919][T30591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=30591 comm=syz.6.6960 [ 1569.425670][ T29] audit: type=1400 audit(1774383660.527:4666): avc: denied { create } for pid=30586 comm="syz.6.6960" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1569.546873][T30595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30595 comm=syz.7.6962 [ 1570.109892][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1570.249082][ T24] usb 8-1: device descriptor read/64, error -71 [ 1570.304386][T30609] syz.5.6965 (30609): attempted to duplicate a private mapping with mremap. This is not supported. [ 1570.504514][ T29] audit: type=1400 audit(1774383661.547:4667): avc: denied { write } for pid=30608 comm="syz.5.6965" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1570.668586][ T24] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1570.905097][ T24] usb 8-1: device descriptor read/64, error -71 [ 1571.040779][ T24] usb usb8-port1: attempt power cycle [ 1571.582824][ T29] audit: type=1400 audit(1774383662.558:4668): avc: denied { getopt } for pid=30616 comm="syz.5.6967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1571.680663][ T24] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1571.799181][ T24] usb 8-1: device descriptor read/8, error -71 [ 1572.055589][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1572.108999][ T24] usb 8-1: device descriptor read/8, error -71 [ 1572.248248][ T24] usb usb8-port1: unable to enumerate USB device [ 1574.118380][T30646] hfs: can't find a HFS filesystem on dev nullb0 [ 1574.349256][T30645] lo speed is unknown, defaulting to 1000 [ 1574.802663][ T29] audit: type=1400 audit(1774383665.515:4669): avc: denied { read } for pid=30644 comm="syz.5.6973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1577.384832][T30674] netlink: zone id is out of range [ 1577.425754][T30674] netlink: zone id is out of range [ 1577.459772][T30674] netlink: zone id is out of range [ 1577.483317][ T5882] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1577.514000][T30674] netlink: zone id is out of range [ 1577.525076][T30677] batadv_slave_0: entered promiscuous mode [ 1577.545128][T30674] netlink: zone id is out of range [ 1577.591706][T30677] batadv_slave_0: left promiscuous mode [ 1577.652901][T30674] netlink: zone id is out of range [ 1577.675784][T30674] netlink: zone id is out of range [ 1577.687250][T30674] netlink: zone id is out of range [ 1577.747213][T30674] netlink: zone id is out of range [ 1577.774293][T30674] netlink: zone id is out of range [ 1577.784814][ T5882] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1577.859216][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.889003][ T5882] usb 6-1: Product: syz [ 1577.916544][ T5882] usb 6-1: Manufacturer: syz [ 1577.921168][ T5882] usb 6-1: SerialNumber: syz [ 1577.985748][ T5882] usb 6-1: config 0 descriptor?? [ 1578.018311][ T5882] hub 6-1:0.0: bad descriptor, ignoring hub [ 1578.049574][ T5882] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1578.208436][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1578.273528][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1578.315085][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1578.380927][ T5882] usb 6-1: media controller created [ 1578.749855][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1579.361035][T30697] ubi: mtd0 is already attached to ubi0 [ 1579.379625][T30697] usb usb7: usbfs: process 30697 (syz.1.6983) did not claim interface 0 before use [ 1579.982129][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 1580.005063][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1580.244681][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 1580.357705][ T5882] Registered IR keymap rc-empty [ 1580.379256][ T5882] dvb-usb: could not initialize remote control. [ 1580.509987][T30705] can0: slcan on ttyS3. [ 1580.647996][T30705] can0 (unregistered): slcan off ttyS3. [ 1580.822009][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1580.871360][ T5882] usb 6-1: USB disconnect, device number 36 [ 1581.022680][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1581.497267][T30714] bridge2: entered promiscuous mode [ 1581.502614][T30714] bridge2: entered allmulticast mode [ 1581.629642][ T29] audit: type=1400 audit(1774383671.925:4670): avc: denied { setopt } for pid=30710 comm="syz.5.6987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1582.070929][T30721] geneve2: entered promiscuous mode [ 1582.076585][T30721] geneve2: entered allmulticast mode [ 1582.725762][ T5862] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1583.002690][ T5862] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1583.951316][T30736] fido_id[30736]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1584.692240][T30751] lo speed is unknown, defaulting to 1000 [ 1584.713586][T29637] Bluetooth: Error in BCSP hdr checksum [ 1584.843917][T30735] lo speed is unknown, defaulting to 1000 [ 1584.962157][ T6210] Bluetooth: Error in BCSP hdr checksum [ 1585.362323][T30762] netlink: 208 bytes leftover after parsing attributes in process `syz.6.6996'. [ 1585.371781][T30762] netlink: 208 bytes leftover after parsing attributes in process `syz.6.6996'. [ 1586.952064][T17092] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1586.969648][ T5808] Bluetooth: hci3: command 0x1003 tx timeout [ 1586.986442][ T29] audit: type=1400 audit(1774383676.304:4671): avc: denied { write } for pid=30764 comm="syz.1.6997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1588.126755][ T5882] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1588.368373][ T5882] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1588.476359][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.500003][ T5882] usb 8-1: Product: syz [ 1588.507352][ T5882] usb 8-1: Manufacturer: syz [ 1588.512489][ T5882] usb 8-1: SerialNumber: syz [ 1588.529543][ T5882] usb 8-1: config 0 descriptor?? [ 1588.717926][ T5882] hub 8-1:0.0: bad descriptor, ignoring hub [ 1588.797873][ T5882] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1589.587309][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1589.672217][ T29] audit: type=1400 audit(1774383679.430:4672): avc: denied { mount } for pid=30786 comm="syz.5.7003" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1589.696417][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1589.708470][ T29] audit: type=1400 audit(1774383679.439:4673): avc: denied { remount } for pid=30786 comm="syz.5.7003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1589.729111][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1589.745414][ T5882] usb 8-1: media controller created [ 1589.789808][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1589.805860][ T29] audit: type=1400 audit(1774383679.580:4674): avc: denied { mount } for pid=30777 comm="syz.0.7000" name="/" dev="ramfs" ino=103602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1589.921879][ T5910] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1590.126285][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 1590.132586][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1590.265018][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1590.446087][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1590.455870][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1590.541518][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 1590.547665][ T5882] Registered IR keymap rc-empty [ 1590.630947][T30774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1590.639544][T30774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1590.662596][ T5882] dvb-usb: could not initialize remote control. [ 1590.668896][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1590.687233][ T5910] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1590.701478][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.765031][ T5882] usb 8-1: USB disconnect, device number 9 [ 1590.788490][ T5910] usb 6-1: config 0 descriptor?? [ 1590.831829][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1591.109527][T30810] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7007'. [ 1591.526315][T30816] ip6_vti0: Caught tx_queue_len zero misconfig [ 1591.913286][ T29] audit: type=1400 audit(1774383681.582:4675): avc: denied { listen } for pid=30817 comm="syz.6.7009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1592.811615][ T5910] usbhid 6-1:0.0: can't add hid device: -71 [ 1592.818449][ T5910] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1592.835380][ T5910] usb 6-1: USB disconnect, device number 37 [ 1593.103925][ T29] audit: type=1400 audit(1774383682.471:4676): avc: denied { unmount } for pid=23528 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1593.397895][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7012'. [ 1593.406930][T30837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7012'. [ 1593.416038][T30837] netlink: 'syz.6.7012': attribute type 11 has an invalid length. [ 1593.462518][T30837] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7012'. [ 1593.471654][T30837] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7012'. [ 1593.480774][T30837] netlink: 'syz.6.7012': attribute type 11 has an invalid length. [ 1593.517562][ T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.698038][ T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.734334][ T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1593.744907][ T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1595.074604][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7016'. [ 1595.076740][T30851] net_ratelimit: 10 callbacks suppressed [ 1595.076750][T30851] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1595.076886][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1595.096947][T30853] overlayfs: failed to clone upperpath [ 1595.118758][ T29] audit: type=1400 audit(1774383684.577:4677): avc: denied { kexec_image_load } for pid=30852 comm="syz.0.7017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1595.159762][ T29] audit: type=1804 audit(1774383684.633:4678): pid=30857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.7019" name="bus" dev="ramfs" ino=103344 res=1 errno=0 [ 1595.161307][ T29] audit: type=1804 audit(1774383684.633:4679): pid=30857 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.7019" name="bus" dev="ramfs" ino=103344 res=1 errno=0 [ 1595.427779][T30865] overlayfs: failed to clone lowerpath [ 1595.482120][ T29] audit: type=1400 audit(1774383684.876:4680): avc: denied { ioctl } for pid=30858 comm="syz.6.7020" path="socket:[103360]" dev="sockfs" ino=103360 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1595.482252][ T29] audit: type=1400 audit(1774383684.876:4681): avc: denied { mount } for pid=30858 comm="syz.6.7020" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1596.378619][T30864] block device autoloading is deprecated and will be removed. [ 1596.585830][T17092] Bluetooth: hci2: command 0x0406 tx timeout [ 1597.250779][ T29] audit: type=1400 audit(1774383686.580:4682): avc: denied { create } for pid=30875 comm="syz.5.7023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1597.272189][ T29] audit: type=1400 audit(1774383686.598:4683): avc: denied { ioctl } for pid=30875 comm="syz.5.7023" path="socket:[103377]" dev="sockfs" ino=103377 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1599.563651][T30899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1599.959311][T30899] team_slave_0 (unregistering): left allmulticast mode [ 1599.961189][T30899] team0: Port device team_slave_0 removed [ 1599.982757][T30893] fuse: Unknown parameter '0x0000000000000009' [ 1603.025378][ T29] audit: type=1400 audit(1774383691.979:4684): avc: denied { listen } for pid=30915 comm="syz.0.7032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1605.556868][T30949] siw: device registration error -23 [ 1605.620666][ T29] audit: type=1400 audit(1774383694.375:4685): avc: denied { write } for pid=30945 comm="syz.6.7040" path="socket:[103803]" dev="sockfs" ino=103803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1606.468826][T30957] netlink: 168 bytes leftover after parsing attributes in process `syz.6.7042'. [ 1607.196944][T30959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1607.206060][T30959] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7043'. [ 1607.218418][T30959] fuse: Bad value for 'fd' [ 1607.327556][T30965] ªªªªªª: renamed from vlan0 (while UP) [ 1607.424644][T30969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 1607.439827][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 1607.454432][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 1607.497178][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 1607.518159][T30965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7046'. [ 1607.776019][T30972] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 1607.910537][T30972] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 1608.611223][T17092] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1608.626584][T17092] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1608.634882][T17092] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1608.642502][T17092] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1608.650125][T17092] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1609.184780][T30990] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7050'. [ 1609.886780][T30980] lo speed is unknown, defaulting to 1000 [ 1610.855712][T17092] Bluetooth: hci3: command tx timeout [ 1610.886587][T30980] chnl_net:caif_netlink_parms(): no params data found [ 1611.213773][T31010] ./file0: Can't lookup blockdev [ 1611.243654][T30980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.255337][T30980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.272511][T30980] bridge_slave_0: entered allmulticast mode [ 1611.279914][T30980] bridge_slave_0: entered promiscuous mode [ 1611.290087][T30980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.297516][T30980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.304828][T30980] bridge_slave_1: entered allmulticast mode [ 1611.340451][T30980] bridge_slave_1: entered promiscuous mode [ 1611.383547][T30980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1611.406538][T30980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.066926][T30980] team0: Port device team_slave_0 added [ 1612.081647][T31029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1612.190880][T30980] team0: Port device team_slave_1 added [ 1612.315184][ T29] audit: type=1326 audit(1774383700.682:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.360628][ T29] audit: type=1326 audit(1774383700.682:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.484635][ T29] audit: type=1326 audit(1774383700.682:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.679552][ T29] audit: type=1326 audit(1774383700.682:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.718293][ T29] audit: type=1326 audit(1774383700.682:4690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.718520][T30980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.783201][ T29] audit: type=1326 audit(1774383700.682:4691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.808441][ T29] audit: type=1326 audit(1774383700.682:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1612.839796][T30980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.889243][T30980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.896722][ T29] audit: type=1326 audit(1774383700.710:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1613.032163][T30980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1613.047244][T30980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.060907][ T29] audit: type=1326 audit(1774383700.710:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1613.141113][T17092] Bluetooth: hci3: command tx timeout [ 1613.191738][T30980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1613.202479][ T29] audit: type=1326 audit(1774383700.710:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31033 comm="syz.0.7061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56ba19c799 code=0x7ffc0000 [ 1613.354211][T30980] hsr_slave_0: entered promiscuous mode [ 1613.376755][T30980] hsr_slave_1: entered promiscuous mode [ 1613.404898][T30980] debugfs: 'hsr0' already exists in 'hsr' [ 1613.419525][T30980] Cannot create hsr debugfs directory [ 1613.429107][T31047] ip6tnl0: Caught tx_queue_len zero misconfig [ 1613.747061][T30980] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1613.822689][T30980] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1613.991650][T30980] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1614.101165][T30980] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1614.903510][T30980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.919067][T30980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.945961][ T6210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.953061][ T6210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.983468][ T6210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.990601][ T6210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.611332][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1615.638031][T17092] Bluetooth: hci3: command tx timeout [ 1616.189793][T30980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1616.200971][T30980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1617.067886][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1617.085842][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.093849][ T24] usb 2-1: Product: syz [ 1617.101417][ T24] usb 2-1: Manufacturer: syz [ 1617.106033][ T24] usb 2-1: SerialNumber: syz [ 1617.113870][T31079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7070'. [ 1617.123510][T31079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7070'. [ 1617.151416][ T24] usb 2-1: config 0 descriptor?? [ 1617.169606][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 1617.176040][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1617.706821][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1617.731652][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1617.753579][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1617.771806][ T24] usb 2-1: media controller created [ 1617.795414][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1617.801193][T30980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1617.865809][T17092] Bluetooth: hci3: command tx timeout [ 1617.891230][ T24] DVB: Unable to find symbol dib7000p_attach() [ 1617.957034][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1618.320404][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 1618.330987][ T24] Registered IR keymap rc-empty [ 1618.344490][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 1618.344507][ T29] audit: type=1400 audit(1774383706.325:4723): avc: denied { create } for pid=31098 comm="syz.6.7072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1618.458085][ T24] dvb-usb: could not initialize remote control. [ 1618.484462][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1619.012747][T31095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1619.022284][T31095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1619.184917][T31104] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.7072'. [ 1619.229173][ T24] usb 2-1: USB disconnect, device number 98 [ 1619.414053][T31118] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7072'. [ 1619.435385][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1619.549174][T30980] veth0_vlan: entered promiscuous mode [ 1619.589238][T30980] veth1_vlan: entered promiscuous mode [ 1619.638951][T30980] veth0_macvtap: entered promiscuous mode [ 1619.661398][T30980] veth1_macvtap: entered promiscuous mode [ 1619.671920][ T5882] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1619.744041][T30980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1619.763304][T30980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1619.783794][T31126] netlink: 'syz.6.7076': attribute type 1 has an invalid length. [ 1619.809296][T31126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1619.821664][T31126] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 1619.830533][T31126] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 1619.874986][ T5882] usb 6-1: Using ep0 maxpacket: 32 [ 1619.885137][ T5882] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1619.897608][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.899344][T29650] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.045824][ T5882] usb 6-1: config 0 has no interface number 0 [ 1620.055292][T29650] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.076650][ T5882] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.165131][T31131] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7077'. [ 1620.524421][T29650] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.542863][ T5882] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1620.701119][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.704316][T29650] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1620.741209][ T5882] usb 6-1: Product: syz [ 1621.264042][T31136] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1621.437646][T31138] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1621.531782][ T5882] usb 6-1: Manufacturer: syz [ 1621.536481][ T5882] usb 6-1: SerialNumber: syz [ 1621.548853][T29637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.568921][T29637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.601582][ T5882] usb 6-1: config 0 descriptor?? [ 1621.617170][ T5882] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1621.634276][ T5882] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22 [ 1621.643645][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.679890][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1621.688554][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1621.923493][T31143] dns_resolver: Unsupported content type (152) [ 1622.681631][T31153] FAT-fs (nullb0): bogus number of reserved sectors [ 1622.688438][T31153] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1624.769413][T31167] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1624.778350][T31167] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1624.919863][T31168] overlayfs: failed to resolve './file2': -2 [ 1625.495380][T31174] netlink: 'syz.1.7082': attribute type 1 has an invalid length. [ 1625.503744][T31174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1625.607210][T31175] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1626.186731][T31177] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1626.308702][ T29] audit: type=1400 audit(1774383713.110:4724): avc: denied { connect } for pid=31165 comm="syz.1.7082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1626.678571][T31191] siw: device registration error -23 [ 1626.707326][ T29] audit: type=1400 audit(1774383714.130:4725): avc: denied { bind } for pid=31181 comm="syz.8.7088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1628.386004][ T29] audit: type=1326 audit(1774383715.468:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31195 comm="syz.8.7090" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b9b79c799 code=0x0 [ 1629.130502][T31209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.137767][T31209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.194863][T31209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.205818][T31209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1629.220691][ T29] audit: type=1400 audit(1774383716.488:4727): avc: denied { accept } for pid=31199 comm="syz.0.7091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1629.321485][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.370330][ T29] audit: type=1400 audit(1774383716.535:4728): avc: denied { listen } for pid=31199 comm="syz.0.7091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1629.396130][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.493139][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.502045][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.545419][T31135] usb 6-1: USB disconnect, device number 38 [ 1629.824458][T31220] ªªªªªª: renamed from vlan0 (while UP) [ 1629.840709][T31218] trusted_key: encrypted_key: key user:syz not found [ 1629.865574][T31219] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 1629.957012][T17092] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1629.967442][T17092] CPU: 0 UID: 0 PID: 17092 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1629.967462][T17092] Tainted: [L]=SOFTLOCKUP [ 1629.967467][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1629.967476][T17092] Workqueue: hci3 hci_rx_work [ 1629.967493][T17092] Call Trace: [ 1629.967497][T17092] [ 1629.967502][T17092] dump_stack_lvl+0x100/0x190 [ 1629.967525][T17092] sysfs_warn_dup.cold+0x1c/0x28 [ 1629.967542][T17092] sysfs_create_dir_ns+0x24b/0x2b0 [ 1629.967560][T17092] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1629.967577][T17092] ? find_held_lock+0x2b/0x80 [ 1629.967591][T17092] ? kobject_add_internal+0x25f/0x930 [ 1629.967609][T17092] ? kobject_add_internal+0x25f/0x930 [ 1629.967628][T17092] ? do_raw_spin_unlock+0x145/0x1e0 [ 1629.967642][T17092] kobject_add_internal+0x2c8/0x930 [ 1629.967662][T17092] kobject_add+0x16a/0x1e0 [ 1629.967672][T17092] ? __pfx_kobject_add+0x10/0x10 [ 1629.967681][T17092] ? class_to_subsys+0x10f/0x150 [ 1629.967697][T17092] ? kobject_put+0xb9/0x640 [ 1629.967712][T17092] ? _raw_spin_unlock+0x28/0x50 [ 1629.967729][T17092] device_add+0x294/0x1950 [ 1629.967741][T17092] ? __pfx_dev_set_name+0x10/0x10 [ 1629.967755][T17092] ? __pfx_device_add+0x10/0x10 [ 1629.967767][T17092] ? mgmt_send_event_skb+0x2fb/0x460 [ 1629.967784][T17092] hci_conn_add_sysfs+0x1a3/0x260 [ 1629.967801][T17092] le_conn_complete_evt+0x11cb/0x1f40 [ 1629.967818][T17092] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1629.967835][T17092] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1629.967848][T17092] ? skb_pull_data+0x15f/0x1e0 [ 1629.967862][T17092] hci_le_meta_evt+0x34a/0x5f0 [ 1629.967875][T17092] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1629.967891][T17092] hci_event_packet+0x682/0x11c0 [ 1629.967904][T17092] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1629.967918][T17092] ? __pfx_hci_event_packet+0x10/0x10 [ 1629.967933][T17092] ? kcov_remote_start+0x374/0x660 [ 1629.967948][T17092] ? lockdep_hardirqs_on+0x78/0x100 [ 1629.967967][T17092] hci_rx_work+0x451/0xfc0 [ 1629.967982][T17092] process_one_work+0xa23/0x19a0 [ 1629.968001][T17092] ? __pfx_process_one_work+0x10/0x10 [ 1629.968017][T17092] ? __pfx_hci_rx_work+0x10/0x10 [ 1629.968031][T17092] worker_thread+0x5ef/0xe50 [ 1629.968047][T17092] ? __pfx_worker_thread+0x10/0x10 [ 1629.968060][T17092] ? kthread+0x13a/0x450 [ 1629.968070][T17092] ? __pfx_worker_thread+0x10/0x10 [ 1629.968087][T17092] kthread+0x370/0x450 [ 1629.968098][T17092] ? __pfx_kthread+0x10/0x10 [ 1629.968110][T17092] ret_from_fork+0x754/0xd80 [ 1629.968124][T17092] ? __pfx_ret_from_fork+0x10/0x10 [ 1629.968137][T17092] ? rcu_is_watching+0x12/0xc0 [ 1629.968151][T17092] ? __switch_to+0x7b4/0x1120 [ 1629.968168][T17092] ? __pfx_kthread+0x10/0x10 [ 1629.968180][T17092] ret_from_fork_asm+0x1a/0x30 [ 1629.968203][T17092] [ 1629.968218][T17092] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1630.250143][T17092] Bluetooth: hci3: failed to register connection device [ 1630.398868][T31229] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7097'. [ 1630.467386][ T29] audit: type=1400 audit(1774383717.667:4729): avc: denied { write } for pid=31226 comm="syz.5.7096" path="socket:[105654]" dev="sockfs" ino=105654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1630.486306][T31234] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7096'. [ 1630.502211][T31229] nbd: socks must be embedded in a SOCK_ITEM attr [ 1630.899993][T31242] overlayfs: failed to resolve './cgroup': -2 [ 1631.525368][T31235] udevd[31235]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1631.577816][T31221] udevd[31221]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1631.881206][T31254] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1632.011335][T31255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7100'. [ 1633.408273][ T29] audit: type=1400 audit(1774383720.418:4730): avc: denied { unmount } for pid=5803 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1634.617749][T31264] lo speed is unknown, defaulting to 1000 [ 1636.228992][T31278] 9p: Bad value for 'wfdno' [ 1636.357024][T31284] trusted_key: encrypted_key: insufficient parameters specified [ 1636.665843][T31290] fuse: Bad value for 'fd' [ 1638.321278][ T29] audit: type=1400 audit(1774383724.975:4731): avc: denied { map } for pid=31301 comm="syz.1.7111" path="socket:[105781]" dev="sockfs" ino=105781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1639.640217][ T29] audit: type=1400 audit(1774383726.155:4732): avc: denied { ioctl } for pid=31297 comm="syz.6.7110" path="socket:[105194]" dev="sockfs" ino=105194 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1640.183444][T31318] Set syz0 is full, maxelem 0 reached [ 1641.559385][T31334] random: crng reseeded on system resumption [ 1644.384789][ T29] audit: type=1400 audit(1774383730.684:4733): avc: denied { map } for pid=31351 comm="syz.8.7121" path="socket:[105858]" dev="sockfs" ino=105858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1644.410202][ T29] audit: type=1400 audit(1774383730.684:4734): avc: denied { read accept } for pid=31351 comm="syz.8.7121" path="socket:[105858]" dev="sockfs" ino=105858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1645.570962][T31373] overlayfs: failed to clone upperpath [ 1647.139941][T31380] overlayfs: failed to clone upperpath [ 1647.265318][ T29] audit: type=1400 audit(1774383733.379:4735): avc: denied { write } for pid=31377 comm="syz.5.7125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1648.256884][T31135] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1648.478003][T31135] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.506328][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7130'. [ 1648.548450][T31135] usb 6-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1648.693006][T31135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.166784][ T29] audit: type=1400 audit(1774383734.820:4736): avc: denied { ioctl } for pid=31402 comm="syz.8.7131" path="socket:[105367]" dev="sockfs" ino=105367 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1649.199785][T31135] usb 6-1: config 0 descriptor?? [ 1649.230628][T31135] smsusb:smsusb_probe: board id=8, interface number 0 [ 1649.238560][T31135] smsusb:smsusb_probe: Device initialized with return code -19 [ 1649.328032][T31398] overlayfs: failed to clone lowerpath [ 1650.041341][ T29] audit: type=1400 audit(1774383735.653:4737): avc: denied { ioctl } for pid=31412 comm="syz.6.7132" path="socket:[105920]" dev="sockfs" ino=105920 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1650.153451][T31417] lo speed is unknown, defaulting to 1000 [ 1650.188739][ T29] audit: type=1400 audit(1774383735.653:4738): avc: denied { write } for pid=31412 comm="syz.6.7132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1650.271926][ T29] audit: type=1400 audit(1774383735.662:4739): avc: denied { read } for pid=31412 comm="syz.6.7132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1650.890598][T29644] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.082897][T29644] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.118929][T31135] usb 6-1: USB disconnect, device number 39 [ 1651.269595][T31433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1651.336272][T29644] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.489054][T31435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1651.692447][T29644] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.714987][T31441] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7137'. [ 1651.728085][T31441] lo: Caught tx_queue_len zero misconfig [ 1651.839701][ T29] audit: type=1400 audit(1774383737.674:4740): avc: denied { read } for pid=31430 comm="syz.5.7135" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1651.841077][T31431] md: md2 stopped. [ 1651.982000][ T29] audit: type=1400 audit(1774383737.674:4741): avc: denied { open } for pid=31430 comm="syz.5.7135" path="/419/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1652.036776][ T29] audit: type=1400 audit(1774383737.674:4742): avc: denied { ioctl } for pid=31430 comm="syz.5.7135" path="/419/file0/file0" dev="fuse" ino=64 ioctlcmd=0x932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1652.154448][T29644] bridge_slave_1: left allmulticast mode [ 1652.189691][T29644] bridge_slave_1: left promiscuous mode [ 1652.241151][T29644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.296546][T29644] bridge_slave_0: left allmulticast mode [ 1652.317567][T29644] bridge_slave_0: left promiscuous mode [ 1652.365279][T29644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.705452][T29644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1654.741190][T29644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1654.767173][T29644] bond0 (unregistering): Released all slaves [ 1656.547840][T31506] 9p: Bad value for 'rfdno' [ 1657.945050][ T29] audit: type=1400 audit(1774383743.383:4743): avc: denied { relabelfrom } for pid=31518 comm="syz.1.7154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1658.019248][ T29] audit: type=1400 audit(1774383743.383:4744): avc: denied { relabelto } for pid=31518 comm="syz.1.7154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1658.112745][T29644] hsr_slave_0: left promiscuous mode [ 1658.141145][T29644] hsr_slave_1: left promiscuous mode [ 1658.164745][T29644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1658.207931][T29644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.297340][T29644] veth1_macvtap: left promiscuous mode [ 1658.338411][T29644] veth0_macvtap: left promiscuous mode [ 1658.378851][T29644] veth1_vlan: left promiscuous mode [ 1658.407313][T29644] veth0_vlan: left promiscuous mode [ 1660.571101][ T29] audit: type=1400 audit(1774383745.834:4745): avc: denied { bind } for pid=31550 comm="syz.0.7160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1661.181592][T29644] team0 (unregistering): Port device team_slave_1 removed [ 1661.226990][T29644] team0 (unregistering): Port device team_slave_0 removed [ 1661.475735][T31574] netlink: 'syz.6.7163': attribute type 4 has an invalid length. [ 1661.546502][T31579] netlink: 'syz.6.7163': attribute type 4 has an invalid length. [ 1661.571708][T31156] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1661.786739][T31156] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 16 [ 1661.804019][T31156] usb 6-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1661.824095][T31156] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1661.836018][T31156] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1661.855105][T31156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1661.865121][T31156] usb 6-1: Product: syz [ 1661.869379][T31156] usb 6-1: Manufacturer: syz [ 1661.891415][T31156] usb 6-1: SerialNumber: syz [ 1661.908611][ T7803] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1661.918968][T31573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1661.952492][T31573] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1662.074483][ T7803] usb 2-1: Using ep0 maxpacket: 16 [ 1662.091864][ T7803] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1662.115787][ T7803] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1662.148369][ T7803] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1662.189731][ T7803] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1662.210387][ T7803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.240726][T31156] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1662.259530][ T7803] usb 2-1: Product: syz [ 1662.280619][ T7803] usb 2-1: Manufacturer: syz [ 1662.288868][T31156] usb 6-1: USB disconnect, device number 40 [ 1662.304398][ T7803] usb 2-1: SerialNumber: syz [ 1662.346207][ T7803] usb 2-1: config 0 descriptor?? [ 1662.593448][ T24] usb 2-1: USB disconnect, device number 99 [ 1663.711175][T31636] netlink: 'syz.8.7171': attribute type 1 has an invalid length. [ 1664.210531][T31636] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7171'. [ 1664.244607][T31636] netlink: 658 bytes leftover after parsing attributes in process `syz.8.7171'. [ 1664.960737][T31652] overlayfs: failed to clone lowerpath [ 1665.140917][T31135] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1665.307818][T31135] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1665.366237][T31135] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1665.429804][T31135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.493931][T31135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1665.550599][T31135] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.649312][T31135] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1665.714614][T31135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.737808][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1665.778199][T31135] usb 6-1: config 0 descriptor?? [ 1665.960505][T31660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1666.552061][T31679] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1666.570075][ T29] audit: type=1400 audit(1774383751.449:4746): avc: denied { relabelto } for pid=31678 comm="syz.1.7183" name="1445" dev="tmpfs" ino=7589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1667.103759][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7176'. [ 1667.277348][ T29] audit: type=1400 audit(1774383751.505:4747): avc: denied { associate } for pid=31678 comm="syz.1.7183" name="1445" dev="tmpfs" ino=7589 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1667.358714][ T29] audit: type=1400 audit(1774383751.973:4748): avc: denied { read } for pid=31654 comm="syz.5.7176" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1667.435413][T31135] usbhid 6-1:0.0: can't add hid device: -71 [ 1667.442652][T31686] block device autoloading is deprecated and will be removed. [ 1667.463905][ T29] audit: type=1400 audit(1774383751.973:4749): avc: denied { open } for pid=31654 comm="syz.5.7176" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1667.463930][T31135] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1667.500556][T31686] FAT-fs (loop17): unable to read boot sector [ 1667.622030][ T29] audit: type=1400 audit(1774383752.245:4750): avc: denied { setattr } for pid=31678 comm="syz.1.7183" name="1445" dev="tmpfs" ino=7589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1667.686940][T31135] usb 6-1: USB disconnect, device number 41 [ 1667.766655][ T29] audit: type=1400 audit(1774383752.404:4751): avc: denied { remove_name } for pid=5803 comm="syz-executor" name="binderfs" dev="tmpfs" ino=7593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1668.392160][ T29] audit: type=1400 audit(1774383752.404:4752): avc: denied { rmdir } for pid=5803 comm="syz-executor" name="1445" dev="tmpfs" ino=7589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1668.420549][ T29] audit: type=1400 audit(1774383752.497:4753): avc: denied { read } for pid=31699 comm="syz.1.7186" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1668.449041][ T29] audit: type=1400 audit(1774383752.497:4754): avc: denied { open } for pid=31699 comm="syz.1.7186" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1668.473724][ T29] audit: type=1400 audit(1774383752.497:4755): avc: denied { ioctl } for pid=31699 comm="syz.1.7186" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1668.988244][T31156] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1669.276311][T31156] usb 6-1: Using ep0 maxpacket: 16 [ 1669.295955][T31156] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1669.490705][T31156] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.535941][T31156] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1669.561769][T31156] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1669.572843][T31156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.581284][T31156] usb 6-1: Product: syz [ 1669.587743][T31156] usb 6-1: Manufacturer: syz [ 1669.592520][T31156] usb 6-1: SerialNumber: syz [ 1669.639909][ T5882] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1669.827644][ T5882] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1669.850596][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.870365][ T5882] usb 2-1: Product: syz [ 1669.882475][T31156] usb 6-1: cannot find UAC_HEADER [ 1669.887679][ T5882] usb 2-1: Manufacturer: syz [ 1669.897801][ T5882] usb 2-1: SerialNumber: syz [ 1669.915878][ T5882] usb 2-1: config 0 descriptor?? [ 1669.936007][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 1669.947610][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1669.967168][T31156] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1669.985610][T31156] usb 6-1: USB disconnect, device number 42 [ 1670.055573][T31375] udevd[31375]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1670.151520][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1670.162713][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1670.181787][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1670.193356][ T5882] usb 2-1: media controller created [ 1670.210391][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1670.241793][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 1670.247984][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1670.302099][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 1670.308191][ T5882] Registered IR keymap rc-empty [ 1670.313527][ T5882] dvb-usb: could not initialize remote control. [ 1670.319741][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1671.207569][T31765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1671.217316][T31765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1671.639823][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7204'. [ 1672.244077][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1672.244094][ T29] audit: type=1400 audit(1774383756.765:4757): avc: denied { read } for pid=31782 comm="syz.6.7208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1672.701067][T31765] dib0700: could not acquire lock [ 1672.751621][ T5882] usb 2-1: USB disconnect, device number 100 [ 1672.933383][T31801] openvswitch: netlink: Key 6 has unexpected len 23 expected 2 [ 1673.216907][ T29] audit: type=1400 audit(1774383757.382:4758): avc: denied { ioctl } for pid=31796 comm="syz.5.7213" path="socket:[106843]" dev="sockfs" ino=106843 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1673.365125][ T29] audit: type=1400 audit(1774383757.803:4759): avc: denied { ioctl } for pid=31799 comm="syz.0.7214" path="socket:[107588]" dev="sockfs" ino=107588 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1673.427581][T31808] netlink: 'syz.0.7214': attribute type 10 has an invalid length. [ 1673.438058][T31809] netlink: 'syz.1.7216': attribute type 21 has an invalid length. [ 1673.520098][T31811] IPVS: Error connecting to the multicast addr [ 1673.546890][T31811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7215'. [ 1673.629018][ T29] audit: type=1400 audit(1774383757.869:4760): avc: denied { bind } for pid=31799 comm="syz.0.7214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1674.034464][T31808] team0: left allmulticast mode [ 1674.045941][T31809] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7216'. [ 1674.059405][T31808] team_slave_1: left allmulticast mode [ 1674.069897][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1674.084920][T31808] batadv1: left allmulticast mode [ 1674.090231][T31808] syz_tun: left allmulticast mode [ 1674.095330][T31813] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7215'. [ 1674.111199][ T29] audit: type=1400 audit(1774383757.972:4761): avc: denied { getopt } for pid=31804 comm="syz.8.7215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1674.139298][T31808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.173606][ T6203] bond0: (slave team0): interface is now down [ 1674.191363][T31808] bond0: (slave team0): Enslaving as an active interface with an up link [ 1674.200777][T31809] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7216'. [ 1674.215628][ T13] bond0: (slave team0): interface is now down [ 1674.291088][ T6203] bond0: (slave team0): interface is now down [ 1674.317074][ T6203] bond0: now running without any active interface! [ 1674.698621][T31829] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1676.692430][ T5848] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1676.908810][ T5848] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1676.941406][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1677.410559][ T5848] usb 6-1: Product: syz [ 1677.446104][ T5848] usb 6-1: Manufacturer: syz [ 1677.482897][ T5848] usb 6-1: SerialNumber: syz [ 1677.516503][ T5848] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1677.679097][T17814] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1679.896758][T17814] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1680.326292][T17814] ath9k_htc: Failed to initialize the device [ 1680.920711][ T5848] usb 6-1: USB disconnect, device number 43 [ 1680.933221][ T5848] usb 6-1: ath9k_htc: USB layer deinitialized [ 1681.328179][T31942] sp0: Synchronizing with TNC [ 1681.418493][T31942] geneve2: left promiscuous mode [ 1681.424280][T31942] bridge2: left promiscuous mode [ 1682.319193][T31945] lo speed is unknown, defaulting to 1000 [ 1683.736896][T31971] netlink: 'syz.0.7251': attribute type 1 has an invalid length. [ 1683.744732][T31971] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7251'. [ 1685.900189][T32050] netlink: 'syz.8.7280': attribute type 10 has an invalid length. [ 1685.914461][T32050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1685.924173][T32050] bond0: (slave team0): Enslaving as an active interface with an up link [ 1686.008363][ T29] audit: type=1400 audit(1774383769.632:4762): avc: denied { read } for pid=32051 comm="syz.1.7283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1686.853832][T32070] Sensor A: ================= START STATUS ================= [ 1686.918340][T32070] Sensor A: Test Pattern: 75% Colorbar [ 1687.100624][T32070] Sensor A: Show Information: All [ 1687.105809][T32070] Sensor A: Vertical Flip: false [ 1687.113143][T32070] Sensor A: Horizontal Flip: false [ 1687.118450][T32070] Sensor A: Brightness: 0 [ 1687.553410][T32070] Sensor A: Contrast: 128 [ 1687.557785][T32070] Sensor A: Hue: 0 [ 1687.561591][T32070] Sensor A: Saturation: 128 [ 1687.566108][T32070] Sensor A: ================== END STATUS ================== [ 1687.643237][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1687.958812][ T29] audit: type=1400 audit(1774383771.475:4763): avc: denied { relabelfrom } for pid=32095 comm="syz.8.7300" name="UDP" dev="sockfs" ino=107933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1687.988674][T32096] SELinux: Context system_u:object_r:hald_cache_t:s0 is not valid (left unmapped). [ 1688.028948][ T29] audit: type=1400 audit(1774383771.532:4764): avc: denied { relabelto } for pid=32095 comm="syz.8.7300" name="UDP" dev="sockfs" ino=107933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:hald_cache_t:s0" [ 1688.837341][T32094] comedi comedi2: reset error (fatal) [ 1689.368661][T32127] Set syz0 is full, maxelem 0 reached [ 1689.943956][T32142] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7316'. [ 1690.659081][T32183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7329'. [ 1692.527301][T32207] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1692.670935][ T29] audit: type=1400 audit(1774383775.883:4765): avc: denied { getopt } for pid=32219 comm="syz.1.7333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1692.743309][T32230] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1692.866257][T32239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7354'. [ 1693.479771][ T29] audit: type=1400 audit(1774383776.632:4766): avc: denied { ioctl } for pid=32272 comm="syz.1.7370" path="socket:[108171]" dev="sockfs" ino=108171 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1693.595576][ T29] audit: type=1400 audit(1774383776.744:4767): avc: denied { write } for pid=32274 comm="syz.5.7371" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1694.108035][ T29] audit: type=1400 audit(1774383777.221:4768): avc: denied { setopt } for pid=32301 comm="syz.8.7383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1694.239264][ T5931] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1694.425284][ T5931] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1694.448220][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.478280][ T5931] usb 6-1: Product: syz [ 1694.489296][ T5931] usb 6-1: Manufacturer: syz [ 1694.503529][ T5931] usb 6-1: SerialNumber: syz [ 1694.535873][ T5931] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1694.562462][ T5882] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1694.826131][ T10] usb 6-1: USB disconnect, device number 44 [ 1695.094841][ T5931] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1695.124773][T32351] 9p: Bad value for 'rfdno' [ 1695.267711][ T5931] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1695.282592][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.291244][ T5931] usb 2-1: Product: syz [ 1695.295423][ T5931] usb 2-1: Manufacturer: syz [ 1695.300299][ T5931] usb 2-1: SerialNumber: syz [ 1695.306484][ T5931] usb 2-1: config 0 descriptor?? [ 1695.312972][ T5931] hub 2-1:0.0: bad descriptor, ignoring hub [ 1695.319141][ T5931] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1695.531941][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1695.554818][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1695.576065][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1695.584521][ T5931] usb 2-1: media controller created [ 1695.615699][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1695.696468][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 1695.731101][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1695.745629][ T5882] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1695.954263][T32371] dib0700: tx buffer length is larger than 4. Not supported. [ 1696.038678][ T5882] ath9k_htc: Failed to initialize the device [ 1696.069271][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 1696.130606][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 1696.159263][ T5931] Registered IR keymap rc-empty [ 1696.171681][ T5931] dvb-usb: could not initialize remote control. [ 1696.190757][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1696.234874][ T5931] usb 2-1: USB disconnect, device number 101 [ 1696.319572][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1696.440246][ T10] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1696.634045][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1696.654798][ T10] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1696.692967][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.740196][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1696.855306][ T29] audit: type=1400 audit(1774383779.795:4769): avc: denied { ioctl } for pid=32410 comm="syz.1.7424" path="socket:[108664]" dev="sockfs" ino=108664 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 1697.443294][ T10] gspca_nw80x: reg_w err -110 [ 1697.448095][ T10] nw80x 6-1:3.0: probe with driver nw80x failed with error -110 [ 1697.979256][ T5931] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1698.164687][ T5931] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1698.187938][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.240358][ T5931] usb 2-1: Product: syz [ 1698.272811][ T5931] usb 2-1: Manufacturer: syz [ 1698.289496][ T5931] usb 2-1: SerialNumber: syz [ 1698.316551][ T5931] usb 2-1: config 0 descriptor?? [ 1698.338172][ T5931] hub 2-1:0.0: bad descriptor, ignoring hub [ 1698.346640][ T5931] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1698.550951][ T5931] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1698.565362][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1698.587710][ T5931] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1698.604646][ T5931] usb 2-1: media controller created [ 1698.628831][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1698.690443][ T5931] DVB: Unable to find symbol dib7000p_attach() [ 1698.700474][ T10] usb 6-1: USB disconnect, device number 45 [ 1698.728250][ T5931] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1698.863577][T32467] dib0700: tx buffer length is larger than 4. Not supported. [ 1699.134302][ T5931] rc_core: IR keymap rc-dib0700-rc5 not found [ 1699.158982][ T5931] Registered IR keymap rc-empty [ 1699.179539][ T5931] dvb-usb: could not initialize remote control. [ 1699.206989][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1699.254012][ T5931] usb 2-1: USB disconnect, device number 102 [ 1699.817884][ T5931] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1700.173373][T32494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1700.255235][T32496] block device autoloading is deprecated and will be removed. [ 1700.295288][ T29] audit: type=1400 audit(1774383783.014:4770): avc: denied { ioctl } for pid=32495 comm="syz.5.7453" path="/463/file0" dev="tmpfs" ino=2452 ioctlcmd=0x1264 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1700.753145][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.762181][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.770099][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.777996][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.785872][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.793765][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.801632][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.809486][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.817368][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.825220][T32518] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1700.843315][ T5848] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1701.081024][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 1701.098697][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1701.136448][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1701.157931][ T5848] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1701.168024][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.183077][ T5848] usb 6-1: config 0 descriptor?? [ 1701.574005][T32541] overlayfs: failed to clone upperpath [ 1701.636685][ T5848] konepure 0003:1E7D:2DB4.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.5-1/input0 [ 1701.749782][ T29] audit: type=1400 audit(1774383784.371:4771): avc: denied { append } for pid=32549 comm="syz.1.7475" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1701.905885][ T5848] usb 6-1: USB disconnect, device number 46 [ 1702.515340][ T29] audit: type=1400 audit(1774383785.091:4772): avc: denied { map } for pid=32600 comm="syz.5.7486" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1702.695051][T32612] 9p: Bad value for 'rfdno' [ 1703.022767][ T5848] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1703.165075][T32629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1703.189867][T32629] netlink: 'syz.1.7492': attribute type 10 has an invalid length. [ 1703.225955][ T5848] usb 6-1: Using ep0 maxpacket: 16 [ 1703.238670][ T5848] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1703.256672][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.265171][ T5848] usb 6-1: Product: syz [ 1703.269844][ T5848] usb 6-1: Manufacturer: syz [ 1703.276685][ T5848] usb 6-1: SerialNumber: syz [ 1703.292658][ T5848] usb 6-1: config 0 descriptor?? [ 1703.741185][ T5848] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1703.764312][ T5848] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1703.803496][ T5848] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1703.845390][ T5848] usb 6-1: media controller created [ 1703.919800][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1704.033556][ T5848] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1704.088735][ T5848] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1704.246402][ T5910] usb 6-1: USB disconnect, device number 47 [ 1704.347193][ T5910] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1705.377158][ T5910] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1705.577092][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1705.589407][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1705.612301][ T5910] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.633541][ T5910] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1705.647044][ T5910] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 1705.658080][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.666585][ T5910] usb 6-1: Product: syz [ 1705.671135][ T5910] usb 6-1: Manufacturer: syz [ 1705.689150][ T5910] usb 6-1: SerialNumber: syz [ 1705.705446][T31135] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1705.811595][T32699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1705.820820][T32699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7525'. [ 1705.877529][T31135] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1705.885852][T31135] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1705.895492][T31135] usb 2-1: config 220 has an invalid descriptor of length 41, skipping remainder of the config [ 1705.909063][T31135] usb 2-1: config 220 has no interface number 2 [ 1705.915587][T31135] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1705.928923][T31135] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1705.952213][T31135] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1705.961721][ T5910] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 1705.968038][ T5910] gspca_stv06xx: st6422 sensor detected [ 1705.975163][T31135] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1705.986374][T31135] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1705.998011][T31135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.006208][T31135] usb 2-1: Product: syz [ 1706.010394][T31135] usb 2-1: Manufacturer: syz [ 1706.015170][T31135] usb 2-1: SerialNumber: syz [ 1706.248978][T31135] usb 2-1: selecting invalid altsetting 0 [ 1706.264327][T31135] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1706.272554][T31135] uvcvideo 2-1:220.0: No valid video chain found. [ 1706.284487][T31135] usb 2-1: selecting invalid altsetting 0 [ 1706.290414][T31135] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1706.301452][T31135] usb 2-1: USB disconnect, device number 103 [ 1706.486871][ T5910] STV06xx 6-1:1.0: probe with driver STV06xx failed with error -71 [ 1706.497641][ T5910] usb 6-1: USB disconnect, device number 48 [ 1707.483341][T32749] can0: slcan on ttyS3. [ 1707.856625][T32752] overlayfs: failed to clone upperpath [ 1707.864910][T32749] can0 (unregistered): slcan off ttyS3. [ 1708.011493][T32765] overlayfs: failed to clone upperpath [ 1708.130894][T31135] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1708.358603][T31135] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1708.371652][T31135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.387652][T31135] usb 2-1: Product: syz [ 1708.393932][T31135] usb 2-1: Manufacturer: syz [ 1708.399368][T31135] usb 2-1: SerialNumber: syz [ 1708.410910][T31135] usb 2-1: config 0 descriptor?? [ 1708.431855][T31135] hub 2-1:0.0: bad descriptor, ignoring hub [ 1708.442639][T31135] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1708.648895][T31135] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1708.663777][T31135] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1708.689474][T31135] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1708.711085][T31135] usb 2-1: media controller created [ 1708.743755][T31135] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1708.778989][T31135] DVB: Unable to find symbol dib7000p_attach() [ 1708.786712][T31135] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1708.825574][ T5931] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1708.847102][T31135] rc_core: IR keymap rc-dib0700-rc5 not found [ 1708.853196][T31135] Registered IR keymap rc-empty [ 1708.859874][T31135] dvb-usb: could not initialize remote control. [ 1708.950038][T31135] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1709.077592][ T5931] usb 6-1: Using ep0 maxpacket: 32 [ 1709.086011][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1709.096723][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1709.262190][ T5931] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1709.289227][ T5931] usb 6-1: config 0 has no interface number 0 [ 1709.306626][ T5931] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1709.326155][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.367471][ T5931] usb 6-1: Product: syz [ 1709.381046][ T5931] usb 6-1: Manufacturer: syz [ 1709.462126][ T5931] usb 6-1: SerialNumber: syz [ 1709.516423][ T5931] usb 6-1: config 0 descriptor?? [ 1709.547179][ T5931] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1709.573383][ T5931] usb 6-1: selecting invalid altsetting 1 [ 1709.586176][ T5931] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1709.622856][ T5931] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1709.654688][ T5931] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1709.677416][ T5931] usb 6-1: media controller created [ 1709.747651][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.963274][ T5931] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1710.970676][ T5931] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1711.069516][ T332] dib0700: could not acquire lock [ 1711.157423][T31135] usb 2-1: USB disconnect, device number 104 [ 1711.380051][ T389] net_ratelimit: 45 callbacks suppressed [ 1711.380079][ T389] Set syz0 is full, maxelem 0 reached [ 1711.626474][T31135] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1711.637817][ T5910] usb 6-1: USB disconnect, device number 49 [ 1711.754339][ T29] audit: type=1400 audit(1774383793.729:4773): avc: denied { read } for pid=394 comm="syz.1.7592" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1711.782656][ T29] audit: type=1400 audit(1774383793.729:4774): avc: denied { open } for pid=394 comm="syz.1.7592" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1712.251942][ T438] input: syz1 as /devices/virtual/input/input77 [ 1712.565491][ T5910] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1712.608280][ T5848] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1712.685111][ T450] 9p: Bad value for 'wfdno' [ 1712.725837][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 1712.732673][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1712.744928][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1712.759478][ T5910] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1712.784874][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.794141][ T5910] usb 2-1: Product: syz [ 1712.798608][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1712.798813][ T5910] usb 2-1: Manufacturer: syz [ 1712.810487][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1712.824787][ T5910] usb 2-1: SerialNumber: syz [ 1712.825045][ T5848] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1712.838711][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.850494][ T5848] usb 6-1: config 0 descriptor?? [ 1712.853427][ T5910] usb 2-1: config 0 descriptor?? [ 1712.863870][ T5910] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1712.874564][ T5910] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1713.320803][ T5848] hid-led 0003:1D34:000A.0035: unknown main item tag 0x0 [ 1713.328064][ T5848] hid-led 0003:1D34:000A.0035: unknown main item tag 0x0 [ 1713.335527][ T5848] hid-led 0003:1D34:000A.0035: unknown main item tag 0x0 [ 1713.509632][ T5910] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1713.518135][ T5910] em28xx 2-1:0.0: Config register raw data: 0xab [ 1713.524482][ T5910] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 1713.531343][ T5910] em28xx 2-1:0.0: No AC97 audio processor [ 1713.539611][ T5848] hid-led 0003:1D34:000A.0035: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.5-1/input0 [ 1713.554524][ T5848] hid-led 0003:1D34:000A.0035: Dream Cheeky Webmail Notifier initialized [ 1713.791524][T31135] usb 6-1: USB disconnect, device number 50 [ 1713.966554][ T5910] usb 2-1: USB disconnect, device number 105 [ 1714.074284][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7634'. [ 1714.158873][ T29] audit: type=1400 audit(1774383795.984:4775): avc: denied { mount } for pid=496 comm="syz.0.7636" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1714.190058][ T29] audit: type=1400 audit(1774383796.012:4776): avc: denied { search } for pid=496 comm="syz.0.7636" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1714.217774][ T29] audit: type=1400 audit(1774383796.021:4777): avc: denied { search } for pid=496 comm="syz.0.7636" name="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1714.284235][ T29] audit: type=1400 audit(1774383796.021:4778): avc: denied { read open } for pid=496 comm="syz.0.7636" path="/" dev="configfs" ino=1064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1715.087352][ T5910] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1715.269419][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 1715.321180][ T5910] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1715.360357][ T5910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1715.391867][ T526] lo speed is unknown, defaulting to 1000 [ 1715.397455][ T5910] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1715.407490][ T5910] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1715.472051][ T5910] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1715.481106][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.840714][ T5910] usb 6-1: GET_CAPABILITIES returned 0 [ 1715.875366][ T5910] usbtmc 6-1:16.0: can't read capabilities [ 1715.933608][ T548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1716.109803][ T5848] usb 6-1: USB disconnect, device number 51 [ 1716.705367][ T559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.712577][ T559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.750211][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.760530][ T559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.910752][ T13] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1716.947880][ T13] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.962778][ T29] audit: type=1400 audit(1774383798.614:4779): avc: denied { read } for pid=561 comm="syz.5.7660" path="socket:[110422]" dev="sockfs" ino=110422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1716.979072][ T13] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.025961][ T564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1717.079820][ T13] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.116145][ T13] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.147652][ T13] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.179719][ T13] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1717.224550][ T13] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1718.193771][ T593] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7669'. [ 1718.720625][ T24] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1719.584501][ T623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.594202][ T623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.717218][ T622] lo speed is unknown, defaulting to 1000 [ 1720.357136][ T635] block device autoloading is deprecated and will be removed. [ 1720.933149][ T29] audit: type=1400 audit(1774383802.329:4780): avc: denied { listen } for pid=645 comm="syz.0.7688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1721.151322][ T650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7690'. [ 1721.167866][T31156] usb 2-1: new low-speed USB device number 106 using dummy_hcd [ 1721.386452][T31156] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.429099][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.459044][T31156] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.488451][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.514404][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.542720][T31156] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.558049][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.583372][T31156] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.625745][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.650428][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.734970][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1721.745517][T31156] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1721.752947][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1721.787456][T31156] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1721.788769][ T24] usb 6-1: no configurations [ 1721.840528][ T24] usb 6-1: can't read configurations, error -22 [ 1721.849166][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1721.884690][ T29] audit: type=1400 audit(1774383803.218:4781): avc: denied { getopt } for pid=662 comm="syz.5.7695" lport=50549 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1721.935508][T31156] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1721.990091][T31156] usb 2-1: string descriptor 0 read error: -22 [ 1721.996886][T31156] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1722.033200][T31156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.100569][T31156] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1722.344523][ T676] overlayfs: failed to clone upperpath [ 1722.894628][ T29] audit: type=1400 audit(1774383804.163:4782): avc: denied { bind } for pid=686 comm="syz.8.7702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1722.903903][ T687] netlink: 41 bytes leftover after parsing attributes in process `syz.8.7702'. [ 1723.030357][ T687] netlink: 140 bytes leftover after parsing attributes in process `syz.8.7702'. [ 1723.109641][ T687] netlink: 41 bytes leftover after parsing attributes in process `syz.8.7702'. [ 1723.390505][ T695] overlayfs: failed to clone upperpath [ 1723.959336][ T702] lo speed is unknown, defaulting to 1000 [ 1723.999790][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1724.193806][ T24] usb 6-1: config 0 has no interfaces? [ 1724.201243][ T24] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1724.224535][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.232550][ T24] usb 6-1: Product: syz [ 1724.243688][ T24] usb 6-1: Manufacturer: syz [ 1724.248490][ T24] usb 6-1: SerialNumber: syz [ 1724.330163][ T24] usb 6-1: config 0 descriptor?? [ 1724.424483][ T728] netlink: 'syz.6.7720': attribute type 10 has an invalid length. [ 1724.440323][ T728] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1724.645238][ T702] veth1_vlan: left promiscuous mode [ 1724.653179][T31156] usb 6-1: USB disconnect, device number 54 [ 1724.728984][ T5848] usb 2-1: USB disconnect, device number 106 [ 1726.533279][ T791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1726.540105][ T775] lo speed is unknown, defaulting to 1000 [ 1726.736827][ T29] audit: type=1400 audit(1774383807.756:4783): avc: denied { name_connect } for pid=774 comm="syz.8.7737" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1728.915240][ T5910] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1729.100537][ T5910] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1729.123651][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.138079][ T5910] usb 2-1: Product: syz [ 1729.142753][ T5910] usb 2-1: Manufacturer: syz [ 1729.150195][ T5910] usb 2-1: SerialNumber: syz [ 1729.178786][ T5910] usb 2-1: config 0 descriptor?? [ 1729.191491][ T5910] hub 2-1:0.0: bad descriptor, ignoring hub [ 1729.214245][ T5910] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1729.415893][ T5910] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1730.005866][ T847] lo speed is unknown, defaulting to 1000 [ 1730.043240][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1730.060786][ T5910] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1730.069633][ T5910] usb 2-1: media controller created [ 1730.078274][ T831] dib0700: tx buffer length is larger than 4. Not supported. [ 1730.166031][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1730.258582][ T5910] DVB: Unable to find symbol dib7000p_attach() [ 1730.276780][ T5910] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1730.360058][ T861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7764'. [ 1730.369947][ T5910] rc_core: IR keymap rc-dib0700-rc5 not found [ 1730.376025][ T5910] Registered IR keymap rc-empty [ 1730.399711][ T5910] dvb-usb: could not initialize remote control. [ 1730.421454][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1730.440466][ T5910] usb 2-1: USB disconnect, device number 107 [ 1730.501575][ T5910] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1730.798004][ T29] audit: type=1400 audit(1774383811.565:4784): avc: denied { ioctl } for pid=888 comm="syz.1.7774" path="/1556/file0/file0" dev="fuse" ino=64 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1731.497676][ T29] audit: type=1326 audit(1774383812.211:4785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1731.521611][ T29] audit: type=1326 audit(1774383812.211:4786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1731.558183][ T29] audit: type=1326 audit(1774383812.211:4787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1731.586629][ T29] audit: type=1326 audit(1774383812.211:4788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1731.937122][ T29] audit: type=1326 audit(1774383812.211:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1731.989485][ T29] audit: type=1326 audit(1774383812.211:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.015243][ T29] audit: type=1326 audit(1774383812.211:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.041088][ T29] audit: type=1326 audit(1774383812.211:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.103415][ T29] audit: type=1326 audit(1774383812.211:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.137458][ T29] audit: type=1326 audit(1774383812.211:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.210984][ T29] audit: type=1326 audit(1774383812.211:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.238607][ T29] audit: type=1326 audit(1774383812.211:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.268129][ T29] audit: type=1326 audit(1774383812.211:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.292092][ T29] audit: type=1326 audit(1774383812.211:4798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.315578][ T29] audit: type=1326 audit(1774383812.211:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.339513][ T29] audit: type=1326 audit(1774383812.211:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.363728][ T29] audit: type=1326 audit(1774383812.211:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 [ 1732.417319][ T29] audit: type=1326 audit(1774383812.211:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=900 comm="syz.6.7778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7feabf39c799 code=0x7ffc0000 syzkaller syzkaller login: [ 1733.195578][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=964 comm=syz.6.7794 [ 1733.297950][ T964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=964 comm=syz.6.7794 [ 1733.506383][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.520853][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.535453][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.549934][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.563521][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.576244][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.589037][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.601438][T31156] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1733.611602][ T982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=982 comm=syz.0.7800 [ 1733.766893][T31156] usb 2-1: Using ep0 maxpacket: 8 [ 1733.781465][T31156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1733.805698][T31156] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1733.815965][T31156] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.830073][T31156] usb 2-1: config 0 descriptor?? [ 1734.053116][T31156] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1734.593470][ T5910] usb 2-1: USB disconnect, device number 108 [ 1734.895803][ T1038] overlayfs: failed to clone upperpath [ 1736.076112][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7826'. [ 1736.095002][ T1068] vlan0: entered allmulticast mode [ 1736.103550][ T1068] dummy0: entered allmulticast mode [ 1736.114770][ T1068] bridge0: port 3(vlan0) entered blocking state [ 1736.126656][ T1068] bridge0: port 3(vlan0) entered disabled state [ 1736.153890][ T1071] netlink: 'syz.6.7826': attribute type 10 has an invalid length. [ 1736.175709][ T1068] vlan0: entered promiscuous mode [ 1736.180791][ T1068] dummy0: entered promiscuous mode [ 1736.224090][ T1071] team0: Port device dummy0 added [ 1736.349882][ T1080] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1736.467385][ T1086] Set syz0 is full, maxelem 0 reached [ 1736.700629][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7836'. [ 1736.758155][ T1106] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7839'. [ 1737.508515][ T1140] syz_tun: entered allmulticast mode [ 1738.740221][ T1166] Set syz0 is full, maxelem 0 reached [ 1739.164983][ T1182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7864'. [ 1739.259590][ T5910] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1739.484862][ T5910] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1739.503070][ T5910] usb 2-1: string descriptor 0 read error: -22 [ 1739.518734][ T5910] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 1739.542106][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.697234][T31156] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1739.882397][T31156] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1739.893889][T31156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.902281][T31156] usb 6-1: Product: syz [ 1739.906669][T31156] usb 6-1: Manufacturer: syz [ 1739.911827][T31156] usb 6-1: SerialNumber: syz [ 1739.920419][T31156] usb 6-1: config 0 descriptor?? [ 1739.932571][T31156] hub 6-1:0.0: bad descriptor, ignoring hub [ 1739.939067][T31156] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1740.025059][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.050113][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.060752][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.067463][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.093868][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.102939][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.124565][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.138017][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.159114][T31156] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1740.160131][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.189860][ T5910] lua 0003:1E7D:2C2E.0036: unknown main item tag 0x0 [ 1740.211521][T31156] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1740.233599][T31156] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1740.260123][T31156] usb 6-1: media controller created [ 1740.323646][ T5910] lua 0003:1E7D:2C2E.0036: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 1740.324037][T31156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1740.688180][ T5910] usb 2-1: USB disconnect, device number 109 [ 1740.785388][ T1191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1740.794870][ T1191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1740.804411][ T1191] dib0700: tx buffer length is larger than 4. Not supported. [ 1740.815673][ T1210] fido_id[1210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1740.966950][T31156] DVB: Unable to find symbol dib7000p_attach() [ 1740.982149][T31156] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1741.075787][T31156] rc_core: IR keymap rc-dib0700-rc5 not found [ 1741.087552][T31156] Registered IR keymap rc-empty [ 1741.097507][T31156] dvb-usb: could not initialize remote control. [ 1741.107884][T31156] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1741.128739][T31156] usb 6-1: USB disconnect, device number 55 [ 1741.216159][T31156] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1741.597571][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1741.597595][ T29] audit: type=1400 audit(1774383821.662:4813): avc: denied { shutdown } for pid=1236 comm="syz.1.7877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1744.217577][T17092] Bluetooth: hci3: command 0x0406 tx timeout [ 1745.971002][ T5910] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1746.034163][ T29] audit: type=1400 audit(1774383825.789:4814): avc: denied { write } for pid=1311 comm="syz.0.7904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1746.538772][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.549145][ T5910] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1746.558851][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.570789][ T5910] usb 2-1: config 0 descriptor?? [ 1746.587961][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 1747.081477][ T29] audit: type=1400 audit(1774383826.753:4815): avc: denied { write } for pid=1326 comm="syz.5.7910" path="socket:[112522]" dev="sockfs" ino=112522 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1747.231371][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1747.474666][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 1747.656877][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1747.668226][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 1747.675438][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 1747.682835][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 1747.690101][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 1747.701777][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 1747.939979][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 1747.960933][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 1747.995809][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 1748.011338][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 1748.023666][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 1748.030930][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 1748.040479][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 1748.057722][ T5910] pwc: Registered as video103. [ 1748.088306][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input80 [ 1748.216287][ T5910] usb 2-1: USB disconnect, device number 110 [ 1748.251657][ T29] audit: type=1400 audit(1774383827.895:4816): avc: denied { accept } for pid=1357 comm="syz.6.7920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1749.634487][ T1384] xt_policy: neither incoming nor outgoing policy selected [ 1750.020664][ T1391] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7932'. [ 1750.029608][ T1391] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7932'. [ 1750.728376][ T1400] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7935'. [ 1752.940041][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1754.611279][ T1442] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7946'. [ 1756.394414][ T29] audit: type=1400 audit(1774383835.512:4817): avc: denied { getopt } for pid=1464 comm="syz.5.7956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1756.866501][ T1488] lo speed is unknown, defaulting to 1000 [ 1758.730297][ T29] audit: type=1400 audit(1774383837.702:4818): avc: denied { mount } for pid=1520 comm="syz.8.7966" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1759.888746][ T1538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7972'. [ 1760.668259][ T1550] lo speed is unknown, defaulting to 1000 [ 1766.078895][ T1630] overlayfs: failed to clone lowerpath [ 1766.132956][ T29] audit: type=1400 audit(1774383844.617:4819): avc: denied { connect } for pid=1631 comm="syz.0.7996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1768.442858][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1768.688808][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1768.701840][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1769.060211][ T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1769.124453][ T24] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1769.169939][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.186909][ T24] usb 2-1: Product: syz [ 1769.192802][ T24] usb 2-1: Manufacturer: syz [ 1769.197816][ T24] usb 2-1: SerialNumber: syz [ 1770.449420][ T24] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1770.463681][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1772.740535][ T29] audit: type=1400 audit(1774383850.803:4820): avc: denied { accept } for pid=1707 comm="syz.5.8014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1772.945667][ T24] usb 2-1: USB disconnect, device number 111 [ 1776.553711][ T5808] Bluetooth: hci3: unexpected cc 0x1004 length: 84 > 11 [ 1776.560750][ T5808] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 1776.768807][T29637] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.802116][T29637] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.842259][T29637] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.873378][T29637] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1777.023817][ T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1777.208710][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1777.244298][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.273588][ T24] usb 2-1: Product: syz [ 1777.289460][ T24] usb 2-1: Manufacturer: syz [ 1777.306973][ T24] usb 2-1: SerialNumber: syz [ 1777.336013][ T24] usb 2-1: config 0 descriptor?? [ 1777.366026][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 1777.417459][ T24] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1777.583227][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1777.626664][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1777.655293][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1777.685298][ T24] usb 2-1: media controller created [ 1777.720129][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1777.944433][ T1805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.953072][ T1805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.375067][ T1805] dib0700: tx buffer length is larger than 4. Not supported. [ 1778.421276][ T24] DVB: Unable to find symbol dib7000p_attach() [ 1778.435714][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1778.587192][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 1778.608345][ T24] Registered IR keymap rc-empty [ 1778.633242][ T24] dvb-usb: could not initialize remote control. [ 1778.654682][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1778.701583][ T24] usb 2-1: USB disconnect, device number 112 [ 1778.784888][ T1859] netlink: 'syz.6.8035': attribute type 1 has an invalid length. [ 1778.937410][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1778.965353][ T1862] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8035'. [ 1778.978623][ T1859] bond2: entered promiscuous mode [ 1779.414951][ T1859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1780.890924][ T1885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1781.287895][ T1887] lo speed is unknown, defaulting to 1000 [ 1783.152778][ T1920] netlink: 'syz.5.8051': attribute type 10 has an invalid length. [ 1783.162296][ T1920] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1783.407992][ T1902] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8047'. [ 1783.426586][ T1902] xt_bpf: check failed: parse error [ 1784.800735][ T1945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8058'. [ 1784.855317][ T1945] hsr_slave_1 (unregistering): left promiscuous mode [ 1785.675073][ T1964] IPVS: Error connecting to the multicast addr [ 1785.876498][ T1968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8064'. [ 1787.739721][ T29] audit: type=1400 audit(1774383864.840:4821): avc: denied { create } for pid=2002 comm="syz.8.8075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1792.310502][ T5931] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1793.762907][ T5931] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 1793.780828][ T5931] usb 2-1: config 0 has no interface number 0 [ 1793.863381][ T5931] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1793.896312][ T5931] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1793.907821][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.916094][ T5931] usb 2-1: Product: syz [ 1793.948434][ T5931] usb 2-1: Manufacturer: syz [ 1793.966492][ T5931] usb 2-1: SerialNumber: syz [ 1794.010199][ T5931] usb 2-1: config 0 descriptor?? [ 1794.080531][ T5931] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 1794.143045][ T2063] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1794.314934][ T5931] usb 2-1: USB disconnect, device number 113 [ 1794.351382][ T5931] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 1795.139937][ T2105] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1797.025722][ T2122] dvmrp9: entered allmulticast mode [ 1800.802119][ T2185] Set syz0 is full, maxelem 0 reached [ 1805.822638][T31135] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1805.961143][ T2255] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1805.973100][ T29] audit: type=1400 audit(1774383881.881:4822): avc: denied { create } for pid=2248 comm="syz.8.8139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1806.344842][T31135] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1806.433039][ T2263] x_tables: duplicate underflow at hook 1 [ 1806.445468][ T2263] vlan2: entered allmulticast mode [ 1806.450698][ T2263] macsec0: entered allmulticast mode [ 1807.043233][T31135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1807.089229][T31135] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1807.133358][T31135] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1807.173828][T31135] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1807.264027][T31135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.310071][T31135] usb 2-1: config 0 descriptor?? [ 1807.773532][T31135] plantronics 0003:047F:FFFF.0037: ignoring exceeding usage max [ 1807.954864][T31135] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1808.852758][ T2300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1808.913732][ T2300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1810.208527][T17814] usb 2-1: USB disconnect, device number 114 [ 1811.531409][ T29] audit: type=1400 audit(1774383886.803:4823): avc: denied { bind } for pid=2323 comm="syz.5.8157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1811.842413][ T2337] tipc: Started in network mode [ 1811.853395][ T2337] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1811.874321][ T2337] tipc: Enabling of bearer rejected, failed to enable media [ 1812.000246][ T2341] Set syz0 is full, maxelem 0 reached [ 1813.470131][ T2361] trusted_key: encrypted_key: insufficient parameters specified [ 1813.552180][ T5808] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1813.898517][ T2362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8169'. [ 1814.149455][ T29] audit: type=1400 audit(1774383889.564:4824): avc: denied { watch } for pid=2364 comm="syz.1.8170" path="/1605/bus/file1" dev="overlay" ino=8412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1814.511243][ T2376] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8172'. [ 1817.305916][ T2403] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8179'. [ 1818.595208][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1819.879946][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.891545][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.900923][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.910630][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.919975][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.929682][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.938999][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.948565][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.957944][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1819.967641][ T2451] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8189'. [ 1820.206339][ T2452] netlink: 'syz.6.8188': attribute type 10 has an invalid length. [ 1820.335637][ T2452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.463586][ T2452] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1821.205669][ T2452] netlink: 'syz.6.8188': attribute type 10 has an invalid length. [ 1821.213614][ T2452] batadv0: entered promiscuous mode [ 1821.218815][ T2452] batadv0: entered allmulticast mode [ 1822.101562][ T2452] bond0: (slave batadv0): Releasing backup interface [ 1822.110330][ T2452] bridge0: port 4(batadv0) entered blocking state [ 1822.116823][ T2452] bridge0: port 4(batadv0) entered disabled state [ 1822.127274][T29637] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1822.168754][T29637] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.653166][T11165] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1822.662389][T11165] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1823.874420][ T2474] lo speed is unknown, defaulting to 1000 [ 1826.593423][ T2517] Cannot find del_set index 2 as target [ 1828.881954][ T2546] __nla_validate_parse: 11 callbacks suppressed [ 1828.881973][ T2546] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8208'. [ 1830.802823][T17092] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1830.815245][T17092] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1830.824421][T17092] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1830.839028][T17092] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1830.846568][T17092] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1832.348409][ T2570] lo speed is unknown, defaulting to 1000 [ 1833.192059][ T2598] lo speed is unknown, defaulting to 1000 [ 1833.221528][ T5808] Bluetooth: hci2: command tx timeout [ 1833.289655][ T2570] chnl_net:caif_netlink_parms(): no params data found [ 1834.197046][ T2570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1834.226273][ T2570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1834.254344][ T2570] bridge_slave_0: entered allmulticast mode [ 1834.280571][ T2570] bridge_slave_0: entered promiscuous mode [ 1834.326568][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1834.343984][ T2570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1834.376069][ T2570] bridge_slave_1: entered allmulticast mode [ 1834.457525][ T2570] bridge_slave_1: entered promiscuous mode [ 1834.605278][ T2570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1834.661180][ T2570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1834.744027][ T2570] team0: Port device team_slave_0 added [ 1834.764085][ T2570] team0: Port device team_slave_1 added [ 1834.842077][ T2570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1834.849167][ T2570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.876842][ T2570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1834.889497][ T2570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1834.896478][ T2570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1834.922911][ T2570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.968699][ T2570] hsr_slave_0: entered promiscuous mode [ 1834.975427][ T2570] hsr_slave_1: entered promiscuous mode [ 1834.981957][ T2570] debugfs: 'hsr0' already exists in 'hsr' [ 1835.050329][ T2570] Cannot create hsr debugfs directory [ 1835.056581][ T2623] dummy0: entered allmulticast mode [ 1835.063790][ T2622] dummy0: left allmulticast mode [ 1835.216513][ T2570] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1835.227095][ T2570] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1835.236195][ T2570] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1835.245377][ T2570] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1835.298815][ T2570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1835.316165][ T2570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1835.326304][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1835.333416][ T7232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1835.346007][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1835.353218][T11165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1835.446862][ T5808] Bluetooth: hci2: command tx timeout [ 1835.481008][ T2570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.672711][ T2570] veth0_vlan: entered promiscuous mode [ 1835.685221][ T2570] veth1_vlan: entered promiscuous mode [ 1835.710245][ T2570] veth0_macvtap: entered promiscuous mode [ 1835.718945][ T2570] veth1_macvtap: entered promiscuous mode [ 1835.732805][ T2570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.747043][ T2570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.760773][ T6203] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.770338][ T6203] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.780178][ T6203] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.789819][ T6203] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.857968][ T6203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.875912][ T6203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.898636][ T6203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.906656][ T6203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1837.656754][ T5808] Bluetooth: hci2: command tx timeout [ 1839.878998][ T5808] Bluetooth: hci2: command tx timeout [ 1884.249372][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1949.915166][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1963.067847][T17092] Bluetooth: hci2: command 0x0406 tx timeout [ 1988.212562][ T30] INFO: task syz.1.8174:2372 blocked for more than 143 seconds. [ 1988.220237][ T30] Tainted: G L syzkaller #0 [ 1988.227006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1988.236886][ T30] task:syz.1.8174 state:D stack:25752 pid:2372 tgid:2372 ppid:5803 task_flags:0x400040 flags:0x00080003 [ 1988.248994][ T30] Call Trace: [ 1988.252263][ T30] [ 1988.255312][ T30] __schedule+0xfee/0x6120 [ 1988.259739][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1988.264664][ T30] ? __pfx___schedule+0x10/0x10 [ 1988.269814][ T30] ? find_held_lock+0x2b/0x80 [ 1988.274471][ T30] ? schedule+0x2bf/0x390 [ 1988.278922][ T30] schedule+0xdd/0x390 [ 1988.282988][ T30] request_wait_answer+0x55e/0x7d0 [ 1988.288248][ T30] ? __pfx_request_wait_answer+0x10/0x10 [ 1988.294199][ T30] ? fuse_dev_queue_req+0x22e/0x320 [ 1988.299747][ T30] ? fuse_dev_queue_req+0x22e/0x320 [ 1988.304943][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1988.311026][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 1988.316214][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1988.321278][ T30] ? fuse_dev_queue_req+0x233/0x320 [ 1988.326460][ T30] __fuse_simple_request+0x45b/0xe70 [ 1988.332027][ T30] fuse_flush+0x4e4/0x6b0 [ 1988.336353][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 1988.341286][ T30] ? find_held_lock+0x2b/0x80 [ 1988.345959][ T30] ? __pfx_fuse_flush+0x10/0x10 [ 1988.350867][ T30] filp_flush+0xe7/0x190 [ 1988.355101][ T30] filp_close+0x1c/0x30 [ 1988.359228][ T30] __range_close+0x137/0x7a0 [ 1988.364215][ T30] __x64_sys_close_range+0x3ce/0x5d0 [ 1988.369497][ T30] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1988.375370][ T30] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 1988.381355][ T30] do_syscall_64+0x106/0xf80 [ 1988.386002][ T30] ? clear_bhb_loop+0x40/0x90 [ 1988.390690][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.396835][ T30] RIP: 0033:0x7f736419c799 [ 1988.401234][ T30] RSP: 002b:00007fff12316648 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1988.410119][ T30] RAX: ffffffffffffffda RBX: 00007f7364417da0 RCX: 00007f736419c799 [ 1988.418162][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1988.426435][ T30] RBP: 00007f7364417da0 R08: 0000000000000006 R09: 0000000000000000 [ 1988.434381][ T30] R10: 00007f7364417cb0 R11: 0000000000000246 R12: 00000000001c24fd [ 1988.442567][ T30] R13: 00007f736441618c R14: 00000000001c24c8 R15: 00007f7364416180 [ 1988.450585][ T30] [ 1988.453603][ T30] [ 1988.453603][ T30] Showing all locks held in the system: [ 1988.461648][ T30] 1 lock held by khungtaskd/30: [ 1988.466471][ T30] #0: ffffffff8e7e78e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1988.476387][ T30] 1 lock held by klogd/5166: [ 1988.480999][ T30] #0: ffff8880b843b220 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1988.491263][ T30] 2 locks held by getty/904: [ 1988.495839][ T30] #0: ffff8880346f80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1988.505632][ T30] #1: ffffc90004a932f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1988.516039][ T30] [ 1988.518356][ T30] ============================================= [ 1988.518356][ T30] [ 1988.527131][ T30] NMI backtrace for cpu 1 [ 1988.527148][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1988.527172][ T30] Tainted: [L]=SOFTLOCKUP [ 1988.527179][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1988.527190][ T30] Call Trace: [ 1988.527197][ T30] [ 1988.527204][ T30] dump_stack_lvl+0x100/0x190 [ 1988.527239][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1988.527259][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1988.527279][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1988.527301][ T30] sys_info+0x141/0x190 [ 1988.527328][ T30] watchdog+0xd25/0x1050 [ 1988.527358][ T30] ? __pfx_watchdog+0x10/0x10 [ 1988.527383][ T30] ? __kthread_parkme+0x18c/0x230 [ 1988.527412][ T30] ? kthread+0x13a/0x450 [ 1988.527428][ T30] ? __pfx_watchdog+0x10/0x10 [ 1988.527450][ T30] kthread+0x370/0x450 [ 1988.527466][ T30] ? __pfx_kthread+0x10/0x10 [ 1988.527486][ T30] ret_from_fork+0x754/0xd80 [ 1988.527506][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1988.527527][ T30] ? __switch_to+0x7b4/0x1120 [ 1988.527556][ T30] ? __pfx_kthread+0x10/0x10 [ 1988.527575][ T30] ret_from_fork_asm+0x1a/0x30 [ 1988.527606][ T30] [ 1988.527613][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1988.654069][ C0] NMI backtrace for cpu 0 [ 1988.654088][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1988.654108][ C0] Tainted: [L]=SOFTLOCKUP [ 1988.654114][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1988.654122][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1988.654146][ C0] Code: 28 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 f1 1a 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1988.654159][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1988.654171][ C0] RAX: 0000000006eb4325 RBX: ffffffff8e4975c0 RCX: ffffffff8b909c75 [ 1988.654180][ C0] RDX: 0000000000000000 RSI: ffffffff8de788ab RDI: ffffffff8c1b1220 [ 1988.654189][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed101708679d [ 1988.654197][ C0] R10: ffff8880b8433ceb R11: 0000000000000000 R12: 0000000000000000 [ 1988.654205][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9ae10 [ 1988.654214][ C0] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 1988.654228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1988.654237][ C0] CR2: 000055e637f8c960 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1988.654246][ C0] DR0: 0000000000000000 DR1: 0000000000000401 DR2: 0000000000000005 [ 1988.654254][ C0] DR3: 0000000000000013 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1988.654262][ C0] Call Trace: [ 1988.654267][ C0] [ 1988.654272][ C0] default_idle+0x9/0x10 [ 1988.654291][ C0] default_idle_call+0x6c/0xb0 [ 1988.654302][ C0] do_idle+0x464/0x590 [ 1988.654320][ C0] ? __pfx_do_idle+0x10/0x10 [ 1988.654338][ C0] cpu_startup_entry+0x4f/0x60 [ 1988.654354][ C0] rest_init+0x251/0x260 [ 1988.654366][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1988.654383][ C0] start_kernel+0x47f/0x480 [ 1988.654397][ C0] x86_64_start_reservations+0x24/0x30 [ 1988.654412][ C0] x86_64_start_kernel+0x12b/0x130 [ 1988.654427][ C0] common_startup_64+0x13e/0x148 [ 1988.654448][ C0] [ 1988.858469][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1988.865299][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1988.875944][ T30] Tainted: [L]=SOFTLOCKUP [ 1988.880237][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1988.890259][ T30] Call Trace: [ 1988.893511][ T30] [ 1988.896414][ T30] dump_stack_lvl+0x100/0x190 [ 1988.901079][ T30] vpanic+0x552/0x970 [ 1988.905048][ T30] ? __pfx_vpanic+0x10/0x10 [ 1988.909544][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1988.915692][ T30] panic+0xd1/0xe0 [ 1988.919388][ T30] ? __pfx_panic+0x10/0x10 [ 1988.923793][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1988.929926][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1988.936050][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1988.942180][ T30] ? watchdog.cold+0x198/0x1ca [ 1988.946947][ T30] ? watchdog+0xd35/0x1050 [ 1988.951352][ T30] watchdog.cold+0x1a9/0x1ca [ 1988.955932][ T30] ? __pfx_watchdog+0x10/0x10 [ 1988.960597][ T30] ? __kthread_parkme+0x18c/0x230 [ 1988.965619][ T30] ? kthread+0x13a/0x450 [ 1988.969852][ T30] ? __pfx_watchdog+0x10/0x10 [ 1988.974508][ T30] kthread+0x370/0x450 [ 1988.978554][ T30] ? __pfx_kthread+0x10/0x10 [ 1988.983118][ T30] ret_from_fork+0x754/0xd80 [ 1988.987681][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1988.992765][ T30] ? __switch_to+0x7b4/0x1120 [ 1988.997428][ T30] ? __pfx_kthread+0x10/0x10 [ 1989.001989][ T30] ret_from_fork_asm+0x1a/0x30 [ 1989.006735][ T30] [ 1989.010037][ T30] Kernel Offset: disabled [ 1989.014336][ T30] Rebooting in 86400 seconds..