last executing test programs: 6.633219657s ago: executing program 1 (id=20): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) 6.593813818s ago: executing program 1 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000002700)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000002340)={r1, &(0x7f0000000180)='\xe9\'\x00', 0x2000, &(0x7f0000002280)={@align=0xffffffffffffff7f, {0x9, 0x7ff, 0x3, 0xb9}}, 0x20, &(0x7f00000022c0)={@_ha_fsid}, &(0x7f0000002300)}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000080)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000200)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000023c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x13}}, 0x14}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000024c0), 0x100, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000002500)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002540)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$KVM_RUN(r10, 0xae80, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f00000026c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002680)={&(0x7f0000002740)={0x18c, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4e}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf2}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x29b7}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.819060951s ago: executing program 3 (id=29): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r0) (async) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="8c5561561a81000000000000001138d0d1ed4532e9fd992c5d41a8a341b3ba", 0x1f}], 0x1}, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002a0003050000000000000000180000800c0000000d00"], 0x28}], 0x1}, 0x14008010) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) (async) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000011c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000001280)={0x44, &(0x7f0000001300)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000001440)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) 4.723992963s ago: executing program 1 (id=30): write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001800077bab092500090007000a07000000000006000036", 0x1b) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) pipe(&(0x7f0000000000)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000980), 0xfdef) r2 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001800077bab092500090007000a07000000000006000036", 0x1b) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1e, 0x21, 0x70bd2b, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000080)) (async) write$binfmt_misc(r1, &(0x7f0000000980), 0xfdef) (async) socket$netlink(0x10, 0x3, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x4, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x3000000, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x2c, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x7, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x1, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 3.902848513s ago: executing program 1 (id=34): r0 = syz_clone(0x1a2400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ptrace(0x4207, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a00000008000100", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB], 0x2c}}, 0x0) 3.879579094s ago: executing program 1 (id=35): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x4}, 0x14) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@main=@item_4={0x3, 0x0, 0x9, "42baf9c9"}, @local=@item_4={0x3, 0x2, 0x8, "8581012c"}, @local=@item_012={0x1, 0x2, 0x8, 'p'}, @local=@item_012={0x2, 0x2, 0x0, "0deb"}, @main=@item_4={0x3, 0x0, 0x3, "6db58047"}, @local=@item_012={0x1, 0x2, 0x1, '\x00'}, @local=@item_012={0x1, 0x2, 0x0, '1'}]}}, 0x0}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x100000001, 0x9}) syz_ublk_setup_queues(r3, r1, &(0x7f0000000500)={0x0, 0xfffffffe, 0x2, 0xfffffffe, 0x2f6}, 0x0, 0x1, 0x0, 0x0) 3.788040996s ago: executing program 0 (id=37): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d01, &(0x7f00000002c0)="00000200000000000000020001") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='clear_refs\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) r4 = fsmount(r2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000340)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) r6 = fcntl$dupfd(r1, 0x406, r2) sendfile(r5, r6, &(0x7f0000000380)=0x1, 0x3) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffb, 0x2f7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x4000, 0xffffff, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x40000, 0x24, 0x3aa, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6f, 0x4, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.945247317s ago: executing program 0 (id=38): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f0000000040)="0781000005", 0x5) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) 2.866162909s ago: executing program 0 (id=39): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$sock(r0, &(0x7f0000002400)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@null, @bcast, @null, @bcast, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000002300)=[{&(0x7f0000000080)="4ce376d3ff035f7c9e1b2d1b2c691d37490e4fa8a247bac2ca536194e88cb57eb892d5a140d0683f5000c37876191e64e226a5224a5529d181e381ef09b6a88fa4f460219e2fbb24e0ef7860b56dd45ab546b5a425d233943d919e552147934bd4dadd1ab795260d14de516ee2439c488829276279f8e1a220597034b6c81528aeca409abcf85c63d458c2df13bb7dc5dfb695babc2822e241a5df6d724e8e1a762a32af946508ef374fe6609c3b68872c50f235f3b0a14733a6fb765f9a8e158a0867bed0ed83e435c49de7ddb2bd57b21aeaddf5a41b133a968d9f0d", 0xdd}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="1a900b02dca0163e00079fc88ad218e6201bd7f300fa63aa398b7549d384be88f8451cb705b1f7b548636891234c909f6b967c14b5215a69f3f07b8d8353fef6e2fdd30bb133412eb5aeb1783774dc997544180bc12d937b1cfc9fcb9313672c9920bb43ea82cef9c6043e8a1d0847576750a5cdbfea278baede8d388dd8374215203413ec7560cdecd7c26504f90b7bac2049cb5b79c46153a0cc5fac7a404fda788ce1c7f73ac7fe75985e5a9a256bb71c583fe77dee9256c44a1be31e4c086d691d7f5d89fe16f120baa1230f1eab914323aa88763109759212caf11c24f0ba468864b78d102273161c3e66f8c0d356c60e74b8abd6474b57e54e54376cca32e2b14efbd63901f2972d5121d35e261461bb455d79191f6ffe81bf0e5373ff2df65969d07be349ad2a152dc35d45baaaff071bd0626458fa43b7620b1dc44ccb9351d6b650c3fda7426d44a1e634a593f06b4835317f872bcf2ce7777debfd5bef7324c4d2b40cbbd7cd30091dc74553c01ab0445c8df5bfdbc2d285ac1648d1c49a019b65c0cba5229474e241347dcb19496deccbb32ba073877117374892f2ca5e4cbf59d79d09c2aafe3949b044df82b1bb6834c3aa7dd5d714917daa6ae3581125a0da2a11e74e5da593720dcb728516e85bf3983099788b1829d2aa194fd12548d55852ec199974122e6901997077ba81c770e7d377090c32c57537874817bde3e97ad41329d0dd8fef35879e8c0c4f16ea8c0b4dba8abe8a264a44dae51dc3e475a4724167c63da4c0d29ccf76c55e4b30a0f24c53bb5bd16914e9080cda8500bad664aae548cbf30f5c3242b2b9688477c095d8c175836ff95bbf4f359ef248e84b6f808fcb97b7b990640c1932e2731f287ced983020a0b4c8a5c08a6f781f613c12d559286de61e164b81de4dd94f22f6cfb3bc21b017c7e137167b9e24faa02ef969da51ecbee5f3d0bed60bd6207953d5f39aa98d3d11a1754a649ac59c3e372d89aebb5ff51cd9d512bb8925d010c766d9ef7587eb7dcbb423eba799035ebcc184085bde9011354d573a999d80c299baa58de6f9208c6fb9db11fd5981780138e5480f6767cceae0eea3a056a561d80c2bd773ecc0ad3b3ef408a98caca0e9a3fc6d742be29a45f6d61d09c84c5aa6ade7d47a902fc0e4c25616fe2916d941c365626ffac1c92ae740ce1b4e3dab901daf02cb96202a7b2765256408645ab1c1886feec7a5425881d4b0f1e450c1016bdf7e118aa60a2c8f9103739cb3ee03722a18ad5de3fefa8350c0928b4882c6940c19108a7803e2621615302490a0e5f476f6296551fefc87cb06e6e6592c20b624380639633cd1f12cad49309af22e5f90ca67d9975bd9e6c80a7e4a0af9cb2ced65718ee5a13321a6d7558ac136d0930bfb83ea6a2cb149803c351486ce12e762f88fccf5c75ac7402198e55dda9937c46738e432693db3985dc3b8c1b63bacb5bb1f24f9e47755c447b4c5f67f8be9f47a35188032ba07b17a1e92e7a0381a3c75f98d55b4455f45a843529ea4ac93c781488cbe98c27e33ced07ff187c1143a6f6fa1bf3601b12f578cfe37b880a3477fdf5a8655b11ab372747af3f065fe7b122e79eeef873266f174d559f43343d2a6bcb54a78a6fc055761becd54e14fc5e6747ec7f7e7038f2a4593451fe6707a55e50499d5362515d07eb49c5036beb5ec7a995facbe4bbd6af92ecea59ca145efd0bef2f3a0dd0a5f90bd4fc36f1bf7c1ea088e5f019a7138839eab460ca08615d257acfbecb400f4b1a5acb705834f2cab9bb24c64c7c41e6130b5b4c77bc1b4e44db1e898189e4bf7b85fb0af8dd16df575f6d3df8717322360f6f9e4c55a711a1440d3ba8a104d6d84d5bee664d86a0121964be7ddf3581322f1a461bc229753899f8b029c99de46c314385e5221ae7a69192e529d90302752f8f2bfa75c4ad7d66eaa16f055d0ad316010c4ac7bba6c9f08c294a6225dfe201add93616cf03e101333e55d5070bac02f00a21b174d36eb762e3bfd12048078980e1747b234e03548f1df27d2aa78833fd53d957245eb052e15fc9b4a79d9e20e4d11be2da4b31fdbb72e92fcae4e49efd0107b20577976c81f8332e07efc44ab53359934a41fce0789e2515a04c3cb2071da18ba969f4b5a8f5d03ca3018414692ab7b7a7992fc99aed330cdaa05bb5cd66aecb4c8ed488983d9c5c6e87b92ab8d10405739478cd0d0baa892967c2e59c226d12acbffffb574f4606166d82ebaa651f2605c546b4d4794671a286d99f0038cc3b5b2634951f95342be32c4a39eae6f23ba5992add357e1eafb53e9e909349e74627b6ed1bbe6ffdb370996a4b1ecf9b926b1d3ecd1c3c9452041f0e6c052f7d0d7657d94c559922a0693c25865dc93699c60d9f58438ad6fcbe38471ff592251b621d69f6c4aa30f7f5ea9b03bc079841551a0725be030b00dbff3cdd3744c8dd15b1da10e63ea95847083a83e2313e321dc0dc4ef6f1b8989423cc9988da2fb7fa823e6c6ee8c717b9f9709ea06e2556d9f9b392191b573d448e4b4927c506167f412f2a957fa909ac6d9d360f877b0dc8487e03c2960e42456a5cb561aa908014241d5ebd16a2be0153428746563ace6fd23abfba229f554130b85e6c02aa11e0bf707b8b20f59867b59224db87e4e789aff1532ea12f18eb5ea23544d3b4190afce8981b2def91c1fb4e0e3edf9f9e57c90aea475701029a48e6c629751d22327d26a37b8a0bc9d3463e18a220f19672bef1c1fc8f52c094c57d790c42eb41717c9f323d6d63da0f3367c64be007e9b8ef8444a833bf8df2c8f09c1ff6cf43f81f1a834ef87530d0ce00eaa66d6b87e106c31d5f4c13a053e30b3a8e03e2b3058c883f32b6c2e8d09bbd4d7afd4552f60de6cd8a5165e1cf422d6df289c549b59a5c94f1d2d00ecad2af302a33b7e051b13eeaad7eaf63fe810c9a47174970756fb4fffbf5c4162219a501f8cb4ddad2011485fce22c42fa4e1549a4f7e1d4385497d3b59a6f3256d545118923ba41bb10891b58be2dc048b36b5f9b8a5331765e289980cafd8d90a4896b1658d937ad73b9f593b5a718f994d0da209be24c5e47c462299d6d27601d34912b489b12e789320b1cc20bbe50bcd53e417e6c5cccb744116730bb35ecdeff58500e7e80daac49c4a05c1d29189dd3fb1033262fa095fb32a4a5e730275d141f5bab992a5136dc26bfd35a894fef2a061a136ad1efba4328a671ec7cdc797958f3c49da8b094e4cbca09a3811117bba2efa018b7705004ab77bb495bdc6a55d9658acb1a63bcc00aa7fcd3bbfe07bfd674e310dda23bd2251946c6e66c3914eecb8549674141beabf1b49e5849fea33ddc1873486d007d737ec409e64c7aecc5b7ca4ecbddebf6a0ff1cc7a3b0a22e6ce69f4a3982da3b1e8af1c7ca3dd5f97ae706881b79e461fb3f9f1d42f7fd69eb15a6d8fd5bbad2771c4673b87c3c2c27305b5a421e89078e84b8e2ae58286ba093d56a8bd267f4bd2c025a6363e2e1b0c63655e5fcbe0a72b2864996949f04443c0417798dc34454f29feddf2456ac02dabfc18df8bb803299b5a871890e234d8478cdcba787da47b0cbad3dcf7df7dc370bb9ed80e18c4fa80942813249e2759bef061f154fc722293de3a2c488edf782e789c196f4a4acdf27494c24dd0665d024dec3297e400f031d2db479fee25643d07af1d4754931613ce71ad9676392e2ae384ef3c980e152c49d6ef3f74c1e3b217b694643ddf7d4e4b5c92879e8df4f7d13f4662a80e873cf1b82866fe248a0ae7f9bfac1c4e89d2a65c65b3a60308230870d8b2ee45de0f3b54f5cacff52b65381aafe6040df6938997e068185d11f223f92a6a66ccd18f3fb4983ad49f4c44e1715ac5b735d7b59d29316df427d3b1967cc4425579b3db003ea4b1dfa1aad053bb4fd47c8e81aa9a8d7740530dc9ebcfc2fd5cd1db9cff6dd188ebd9f5e862f8bb544d982e709cc7a0deaa4bc494a93587694d4f2e370533f2f50319242740a7fe0cb6f14777e3666fc4098840e3ab9173a6792374952c65760a948ec6201795f3ff9f5a4ffe26d967d93a404fc69bea25abc279dffb35da9c39442c067578056e8e3d8854afaf655be86afaa3bce43d8ebc94aff45a32e4082337e535e5a1a8787a1262528e5577b198a3646573bc17c21d7dce6ee2f5410c1ff60292bc5cb97c85f39cad6128f5c0f3e0fdadb7b29abfebb6be3cf93632ee5f8e3474dab5dee0d7ead475bd9d097bbeba21a20840e87a9ffd77a0e5f43241069104a3983c334e1b0a610972a4b02fbd7a5090fc17602977fdfbed52e9e621503a02c6137f90f1ab8dd4ba272b2a52530fa5e3323e0bb5e1d4996bef9642fede0cc55828f90895534af47b579c9f9d3be6485ce469b83fdb40fb407075c158b52ecab5ebe0c471fe5f7d4c10f0b37d06ecc8670dadf34f6b7d44d65cb8f9b55fb8b704c0823ac334c387735f8f5dedc0d86c86c566daf6c38bb0abe88dea91a4774a72d1348057fd06df7ce7cfc6a655f39e4338328ddb105f1253836130be5186c8c9a37b6c34097210e581b166eea3953030bd9fe1a8b81d01b2daaaffe4ff68a2e060ce692e2328963c8a4493c475fd1b286bacf424427ff85cb1af5632e2bcdfacadef3aa826bb4c00728b5098f5ad950cc6a0ac0b0009504018aef8a6fa8d6f7bf635320f107b0af181db80c68a699713b83678ba5b115aa54966dfc28d28aef22813b0657b990970208cbf746bd3339909bf76ccd7a9c3a75758db434f1b87f22d3824081357ce7ceb0a033998083b94a0bba2c1cdd03a194b7dc13c69e0e1b1ca0568489d03acb5722358d75fab7d4badf50aa31083f2bf79938152f0dafc94c76c65e7acb4d2278f4efcae9b2cb72d1e63a827d1217b74a94d45d13ae4b9bf5acd258d7b6aae11795cc80af891d68f658ea117f783510b1a5b4da032d09ca6a9c20e6fe64072b0623f06e74ff90b5ec49e5c26c3d21df06e6e4db6fc5a3200c914246f37a5d287b12960eed546225268c4b25725f52a2ef5b4986f8ff7405169801c31ff9db7b1680d6eec86f73b272e90f41dc6ceb80328b3c9df54bedd71c8971650a53087174353e29d7caecab732108e4f63f339ee6453cdc6056f77cbd63c0d91d739b2364c078899bda0ab84098d619b050f442165d12c54749bcf4e1430ac4d4fa18a624475d0154c0fc313f0d5bb4a1c366e9b4bb42137e42503a545b68b5ded05ff495c1831bd383837e0fd80ac4028a8f5429d51a7b1dd65e1a30de2d4a7864e6d8c645cca4cbd034cc66c4d1c900abf410ac9731227c3b09696119f51d5da7ef7b19a77490d789e56610c84b9d2fb96ec5a3e4cd0aa5f996cdd9345f55a2ca24f05c03415a3a99a9d6a3357f034ce4af955e8e2e7b1759e10c6ced4f9bbc935daabdf5ca23b05bf28fef14a29d44f0150915b67f26e5428d89cf597bf17465c0a4248bb783fdd70e7491dbdbc59cf9d8d39c69985c45a5b5a78a66db8b50baff4ac7ab5ebc2749b7c3e6c82480e9b2779cae445ae82272d1ba2b93c9d72170f01c6fde697b6bd0bae88858ceb085fa947d4c923375d3dfb01eb27a03a37e325a68f280b298d0b18bf0d64bc826206b1ad56a1375c80d8c02a65192188bf98f625e14da08b40ba19fa825eb0a4a177c167b9092699342d9fb416cbd596b994b774b32e224b71d240fc438c1c436258cd3d70451cca39e874321dce726b6686cdbe7ba93afb6bd617c78b413b6dc67ba817f85205055087", 0x1000}, {&(0x7f0000002180)="3859e56b9f7d5b73b2b0ece0434c2d75546febf03e1b41f5072cfcd40ba266d1c000ba1015c1b1b2d0614f416860879c3a52bd82ea644d79b1957174990f71b15e422df3ffa1253e6227875a0b7daec33c59c5deaa35dde96012247abab5ece5be88b447ac52d8e1d85331357963554a33ad5a6440d0132979c6c6ec759b7d771f9cdd9038e6c18a27abc1b40c08b234fcb5ef9e2a1c140be2f6d12ffc82e49549724e5a9bb8e7f95e2ad11a20844534f37bbd8dcedd188bb279f5ffdb89680eb30afdf3430123ac2fd93be543f1b3a4ec8720b2f00252c068505a2f97d6e642f9177931685717998976d903721f552f9d7ab2930e7c10", 0xf7}, {&(0x7f0000002280)="ecd9d1b8bad46e15e2f315e8347b551d52c353d328c64554eaef2ae08825e6c4d8b091d9e23f15a644c66f35cddb6c503a75736204725579d2b5a6011cf0ffa10caedbd43d1ae230acea253a690daec6", 0x50}], 0x5, &(0x7f0000002380)=[@timestamping={{0x14, 0x1, 0x25, 0x2da}}, @mark={{0x14, 0x1, 0x24, 0x9a2}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x7f}}], 0x78}, 0x4009) r1 = accept4(r0, &(0x7f0000002440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000024c0)=0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000002800)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002580)={0x230, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1f0, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe5, 0x2, "44dcdb4526be03d896917bcb91de664756e34afe7c7a80e215aeb9d1e5f7b1c49d856e51263a4b8a345d5dfd5790a7f3cb3a198412b759b47da23ea1ee517f6307eaf49cdc0e7ea79f94b7483136abf08d1d6e5b58099d94ada612f7378a22e9a680d2e4c0df5983657dc62bfb0ce2c5a2607e554ff727933c33bc13b416c07d692fb2feeeba1679996ba9be0e2a1c49269197eb842753aa547ae7e943d759cca0b473deeaf772c6faafb496980c29e6e5ee399d9f75b0050ec4c4f05666a0b3ce0e43dd62cff54e530482afab067b99be2bbdb26693152f2b0828a0e54873fbb7"}}, {0x100, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xfb, 0x2, "5c1e7042265c9d865aaccbf52ea5b0f91ddc3837a54e8801318a772f4c445e14fc98921b44819379d99134c5e920eda274719cc1dae82cec2dbc4cd71639c90f0ce3a3ff173609d278ea0eb30828a2bf10d7f2566b315bd9ed238206fb5bd829d118ddd4947016acd67cbc8fff81f95ffd08a260cd81d6cf1786d58971f4ab462f88d13afc423ed51e4d9754eed693c2491617d5de9b8077cf9438430c10c8b888d965776a94a6307507e8dee4f702be516d96bebcf52c66a63e2f4b97897830e73824b84abbd0130aedb1a09e74e2eaaf55a247e7fe24ffd16949899beb6f1c728b297176d72e731791545e0dee466126cc88a8ff97dd"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x230}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x28, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0x70}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x90) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000002bc0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002b80)={&(0x7f00000029c0)={0x1b0, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x19, 0x5b, "aa62850d8a5ea3552060711dd81e2b2f26a2e9efe0"}, @NL80211_ATTR_FRAME_MATCH={0x6f, 0x5b, "d8a759f02034f6a4f225297526471b1ba0fc16f8d2930247db230a2274785fa9971dd8d324d93309dd8566958507c32271c53e7cfc347582906210760098de7573b217e695e3af8448e9d7bf9f8123125f3e11121c478a9edd42b12856d1996a71b22219b4bf5bb5f9e5da"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}, @NL80211_ATTR_FRAME_MATCH={0xf7, 0x5b, "e9f775d4ecbc8324019a2e5d8d5394d84952268226c224e0553886e7c750c1f1d51191de1b6b168e3497b047bb1597b9086c3f9735f7900a80e244c9b2f812f02483c3bd7ee847edd0b3841e374cbf54f11e541789e015e77fe489c1a9e472c386192a219788b9c18a8a5f13f959be88e0c659f08f1fbce0b7c63bbf2d8040208e012d388d646c82e590a704959e0c7d95117ce859e33163da65ab5eb7f3b29a1f8cd0b35693b2a4182dfd30f64b4c03ac36140f2518fd1d7a088728c6211b07028437fecf905e0de0e1b10725a6ec5abed5270854f7eb63ba133db21e8caf1c26259ab36777caad7026603d0a560df48cd840"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x14}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000080}, 0x80c0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, r4, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x51}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0xc000000) setsockopt$inet6_int(r2, 0x29, 0x1f, &(0x7f0000002d40)=0xe57, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000003040)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003000)={&(0x7f0000002dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1f0, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_USERDATA={0xb1, 0xd, 0x1, 0x0, "3d3e4f2ee0dd303c020f221e328a4c2fa566a5da585f41ad362c0c11d8a90e95cd619f462d54c0cf92bdaa3472a9c27fd5459b4be2cf8217c7c368f9f33f523230ffae4cb8ef353ada6b63643c749d948194ea534ac749ec7abdbd08e46df9d788c19c0dc661ca85ccac6e7db687ea8468169ad6eed991b5133edbeee252b0881ec6c4a8e7eb86c37664647ea5258d5142c6cdc4be4774a2493abfcd7e317f4b43ffa842e50d77828c674cf33a"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0xf7, 0xd, 0x1, 0x0, "d66869a362a8b986032a387b28d815365e8a2a3660c48f252396087d7ec1587238d479dd6c6ebae57bf7cb0d2ea9b90a226befce6a9d504766af14a8e7997955141374bc2916d8dbe457b4e5fd8133b64f76b1c6ce039840beff9910f4c94ae24bb2cb6cbda793dd67bdccc393c7d310a776b68c2adede879f108523a9f86908eb655b5d9e61154fa275822630f4c099f03f8b55df6614bd72d1ed53b4e2f38c2b5e90a59606cce922db2656cd5b6fc42d8b5a53965de9a462bd4d2e3fe0e9209b423606ab8db14d3d65a33e263a9f18f83960a514f60654348aa81954b6c7a5125c21baa61009d2eb3afcf3e355ebb743c557"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x238}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) flistxattr(r2, &(0x7f0000003080)=""/173, 0xad) getpeername$inet6(r2, &(0x7f0000003140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000003180)=0x1c) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000003280)={&(0x7f00000031c0), 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000048) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000032c0)={@any, 0x1, 0x401, 0x2, 0x6, 0x81, "a416f9228ce0ecea145cc95ec10c4b46d9941dc07d6b028e3392584b6b90a4c243bf446ac58285b71b0419b0f0a24f90635399342676b1a05dd0243d9ddff10e5df38d617cf4b878f1f0ab43fbf659db5847587642fde3cf5e609d9e096244045ca5f5291964de2b7164049b082add1a36331f07df27ac13845329c3db7281b9"}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000034c0)={0x1, 0x3, 0x1000, 0x23, &(0x7f0000003380)="833275032fcea68114ccc1ae7b397d1188fbc11667251dc91f9a2d94486cb38ad45e2f", 0xd2, 0x0, &(0x7f00000033c0)="d9a2225c9a0860d48d9278ab7fa0326ee433943cfface6fb2e8b9a533df4fbcc2c6f54f334b203b9adb94dd8e2e44adc9f1a48e215271c2456ea15bd24c84b0593bd43277e4635d855f2ffc225bb5f6d60957c0aa0e6ae5fc32824d2e4a04af7b980b59131be7a6578444762a95587a91b79862ebf8bf4d220648a5b7f90333ddbb3bfb0da90bbd4a2998c32e249a6830b2995adfcb5683782e8579afd441d584b5890309d426d1ba6d083c12656af3ae6ec216d1cfbc37c97cbc71980f44dc2afe6b3433f5d6683399d100812bf583acdb8"}) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f00000035c0)={0x3c02, 0x48, [0x3, 0x7, 0x9, 0xcf], &(0x7f0000003540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f00000037c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003780)={&(0x7f0000003640)={0x124, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5664d472}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc9e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x78}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x20040081) lstat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000039c0)={0x0}, &(0x7f0000003a00)=0xc) sendmsg$nl_generic(r1, &(0x7f0000003ec0)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003a40)={0x410, 0x23, 0x10, 0x70bd27, 0x25dfdbfd, {0x10}, [@nested={0x12c, 0x158, 0x0, 0x1, [@typed={0x8, 0xd0, 0x0, 0x0, @uid=r6}, @generic='\\', @nested={0x4, 0x81}, @generic="8927f97607a3463b", @typed={0xf7, 0xea, 0x0, 0x0, @binary="7f5055f8e4bb18f54f75e27e7c1f0d425f74c7111c8150bcb1fed8d55dc040f5bffb52f6d6d5027af21f3d9afd59dd5303afca57c8ef17c663519727df23d6baf25a32ee25db1c379df5cb07abfa07c47d4a8e9c99fa6e265107fc2a30721386b1aba684b7f139563c0b0796f3e50709015a281c1609d4e5ab34e7e3ab153a535338c4116790fce244e3a20e394bd7eb6a3d425aa11faf327017ade48bd250e16d6d196bc9b9e483e6d0c095cd8c056d0b793b631b9c001e5d701ad4e2e7d277ca124f7da83cefdac1ecdec53dfe72ebfcfc017c0e2162f057a4359b2c3e15da547eb4bbc291092120f2b8dbec50193398e9c5"}, @generic="4130c65e239673089581a49e3c5b2f0367e0fa", @typed={0x8, 0xe2, 0x0, 0x0, @uid=r7}]}, @nested={0xa4, 0x15d, 0x0, 0x1, [@generic="1657a249de07fa070115c6677c3904a6063b43dcf323684024c9d1d10b57aefa4f54586a21a197cca5dc24cf8fee283360155caaabccf740200e10dad163dc37263108218e9d32452c5dc96784c905983da1d8f12d166751062d0bf4fb9cfce237f67672d2d586955063dd1f030664f30696c2553fb1db7b0cb551b64a75b9726bec855a12528af21af62abc430a75152f6ab50ec729e24cd8b4f4f0", @nested={0x4, 0x64}]}, @nested={0x110, 0xab, 0x0, 0x1, [@generic="7ba3cde6eb049df4b9db796392a475291bc36e8bbbc93bf633d118eba0741c156ae51e7257ace06f6ce6ee8e1a9da688ee43f4213101b292218e9f41181d1cb5ac5e6a89cc56be1f1427854cc70c567f867ad470caa64ab79c12bf51682ff37d09b90da2e41735dc1797f6471617e7907ac2b58d234cfe7031d2d4892ee3f6406dee4051e0abd93238eab96becc2b63b7304e6afd4ddce5763cb057b6cf136f5f6b592569c9068e9d4c8b81504d159ab381b30d0", @typed={0x8, 0x13, 0x0, 0x0, @pid=r8}, @nested={0x4, 0x169}, @generic="421341c617ef2049174e6124017d36859cc55c81c99523ae4adbd9a1dacca36c2e356f43035265bb03f4842de29e732ecde76c86ca6fea6db44ea9066900afef657fde0b8bd926ac1007b3ff"]}, @generic="8e5a62316ecc4e3224ec00059aa28a6a511583215856c7bcbade56f3729b696721fb93ed77b1d7ef13d665fba440452af9c3e446ba8be86271e3e8db3788ffad5749fd131a9cbc12275b7bde4b051b55112edbe9a5274d0355080922817557a8151c064746ff5b59141b3447eb084cd70a702470f425f9acaa0c7573f34cbb5d31cb5b4396a32cb0bcdc7d44f5227c0a27877e1123ee306d1fc305a63fe104af8f6642a58dcc57ad6cbfbf93589a378d0b6c84bbf22786951216715f88e816aa970bcbaf2dc122087c788b5383639091c0f87daccd1a24bdaeaf27701d06494d3876a8f758fc7d", @generic="085eaa28808332e2403ddad7f20e61fb905b1aa61a22c2e880a00991611fcedde20af0f32356b4413a2dda3c6ca43505252ff17570"]}, 0x410}, 0x1, 0x0, 0x0, 0x4008080}, 0x4004000) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000003f00)={0x65, 0x15ec, 0xc2e, 0x4e}, 0x10) r10 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000003f40), 0x2c4a00, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000003f80)={0x0, 0x23d, '\x00', [@hao={0xc9, 0x10, @private1}, @generic={0x64, 0xf8, "d2f364d56fe532974ad37c8254c005f74ea7fbe7adcf440070111bd8c5b61018588176cfcc9f1e3cdf4a531255f38c107e07a7547e9da800349b3399018adb1d8049e5febb7fc061d8cc1884d019462b88492c50fd05c067aba25ff25bbd6f20866d95855d62892bb7ae37bc4d5a6b4d7a571ca85db95ce8dad8a1ea20dfc243d05a188f8cb97fd77ed65ddb2518454510d2c89b1faae0f2c2c470e27a5dd44f3116574674d6acbd187bea9e967f3658bca62acb8a40e2bf418eb3cc4df510ff0b2997345688fd7882e164abd1b9a797a04793c5f1a49a25fa6488e4438370cc9b6098c14196f6bdc5cfea753e4a3bb80bd8cccc0c9d7ce4"}, @calipso={0x7, 0x10, {0x0, 0x2, 0xc7, 0x39e8, [0x3]}}, @enc_lim={0x4, 0x1, 0x7}, @generic={0xc, 0x1000, "007028713f55e46106b7571b331fcb2b4d9f6d7e1ba3aa8f61503e790c029d9985f2faf410dccf745c7732d6c6b246b79ac53f087bc5a647e0e9f006b53e3909302f880d54ac9526a9502f2b4909292ee019c62fbdea6ef5af72a05f43e26d81bfd9e005bf075167b38a05620d285b3bcf23dd7c201e7a78552ba478ffe3c6f46d80efcfe56de3569aba1c6d5fd2900a578fc080c7f8098efe5656c290a5e031e918c1d0e5ac03cb40e197442d6cc4ede1161a8a58ac3d3eb2afbba11775efacbdd03909369f630c3021dbf13466d2e8b0b308870078e402bdf5b11b02909de133e7fd8dd0c05331724d59bf571041bbf4ecdf155f0ec90b09dcad85af8760a377961879b2003c399001af405abd9d8234264857460287c6d4cb1eb34215c5a753d966e0023ceb80a6cf78d0b2c601afd5eee4f7f9d9dce657ec96e010e9aa19abff9baeedae5df11b5c6c44c7bb3587b02c1635dd99ad0538c529f5e25a2182b056e992cfdb274e400385f652cff3eb89672e5fa368088503e62307ece846dc84b42299fbe07f52456db07491460e4e3d99d1edd5a6d48ef9f9ac782acff31778ec151ee35024c03c3612a41cfcf35b8905c11e8a4195dda4e1ccb724f0b09547faa6a644d784bb15108be0b95dbbff7e866c58b4169126d0a104564e09b504fe08fa7c5dad36fc7ea894489b38e859885eb288cdb27f94bf2519a6b567104de58b20359e5c874cec6e877f3f571f01eb0a5c091e4d25379e18e5f3c4cb8938e3cde88aed3cc04d95bf415dfd7ecdd17f1fa5727d7f21189c78ca88c35c63e89d49dfd5a155ebda10551972a172671fcaea698c74e40ed02595013c9cdcc935f8d99e568bc2fbb4bd8fe05d15ad866f221dd504367a6b889e7e7c91f9ef6978de845b3e3b73dc64fc35bce9ba339fe0a2c3bd9e5ea2285f3c357465b2ca4f3f7dc6a7259a6acd7edf2925f68153fdd3313f1cd2085245d432dd9555878a7db335690a8025dca94867aa43d9e0802b80b92577c6c5be50d9e6b9888ac47f5228806e5551c6976d2ce0ed0e6328df140d94bf89c175663b3552d56a24ed7c6ad172492f9834d17ebf76566a46137a55f263ff1678e2db9b3afca80f9ff52f03ddd2241492a8825956597a091a5a97b33aeceb54e902d13f7d4346da44ee9b6001b87dad7533d0b09465f5382298051857d57c5e3fe36a61f5b6bedac9fa0116deb5e2641b8cb11e9fd2d5d65bfa395ffd5c4131e5581388cf7fdc422372db55d94889fed84122fa1258174e2e57fa9f3e66c27b5417185934509316cdd2654d4be03d72aa4cbc9343bca8793b21e852006b94fc84bf47700543081f0751a3d6ae2a1ad1ecae30a085d7b7d4e8257a75071a63c8ade92e61ac2f8bb130c2265db035dbbe73a645119547962e19d1d2ce8fc2515c2af89b2667268d6538321cf68cfaa9dd6c119926786b657a8720e1d7f4d73368b9d9caae22a1420e8f37c40f9cec09a65b506697b14a8789c8fdb02e82633e7dc8a83aa92af75dd058240f9bb242e668b19639cebe26d78f767dd6f5e85f6b057a28b2646fb97f9cee89a952fee3f6b2fc9c6bb74e633e3d1a201a0301e911ec8369b2e8bdb8b7c99a26837243ca45cb1e2218601e8ec13a40a140add5f9eefc7b57633b968b22a0128bbae33c8845971caa03f269896906b7403a84173549c9e78f5b8db8d9bee51618ea1e4bd909eb8747bafb2d95236635b4d712f9cc001f086619b83f045449cdd88ef3548c75a20420c6925ee1eb756c646207ff73f2791c15cfa54dcabbfce1e420114b566976f695c51906904b84e78c30f027cb177ce6be576d585601ba02119e940d5ee2b48e95831216cce41cee0f6344c8c164d06c19a1407e6ad3124d484fd9aef1b990436016678a1705c0f937381d3072cba8de17d26e219491fb7cf2e8a867328e033a4ba672dbc624c5b068df9bb5fdf96f95d838a5b3f672de334923f7d525fda49405c2084237c2d22331dabd5f2f1e2ecef06196a365690528dc02426552a6632f4c07f7a18cc3443917a312b8b8e6857b870cf8a928643300b857183afa9a655698adfa5f8eaf19df5078e87a8c0aee439bd08a7b09d847d81009b15b82cad8602b602b11575383a1c877cd591607caba1c7afae3f1f8b948d1b1ade73de69dc6d9a91261f644f71dc936217de052ee363d05cb5c0fb052d58b62de1a429d042a165fdd45102aeadf7c87a6ae70268f9dbcf72f41a17e15de146d1379a47fd777b12b36871599ede32016de9bff4de488de867d8e187d3ef3152dc518d95038ba783d4ada860f181c5dc9dc7f9a9a48dd04fac9131ed4b3fd74787b88bfa455c0fb6fe9f03a803bdbe478a65b13a2c54dcfafec009f081af632cd8d004698d0c408bf20bd7af4df83fed2eaa1d157218ce2b077b12029b2cee269a1f5af6be321e63f5a5ce8667e531bbc58014ce61dce09816ab31757494062c3bcb2bf5829105cfbee193c4319e919bddfab497f452fc466f7b634f7660e5cabb3559fad2474be0fe4834cf7affa8255c9e33007cd2c216662ec1fdb5b1007e781fb86cbda35f13833608075e507ad9d5bab1a61a66a44cf9fe2995af8c26e70db3224132bb0644e56112d16eb7a401c6d876c1e9ced4656790143117ad1043162350476437a4ef78c0ed99c65ca240555912f5536f712e696a1dc41112abbf1d63a614f28de60161096f83ac3c360b9413dec90106e613cee54c34dcd832abd279715a4e62563363903066002512f50feffcbee76e79776e0b54e7670d26ba7391d30d4916d33548c3dd5e6d91bae7d1f9fef1e00bc598cf251cfc799c87712917efef07b239012c3a275ea7a7b1b2022ecd1ed271a72f39f5383426cf5eb5b233151adae9236bb07847a79307eb16e646c3c2428ac81b7b90ce880f868519a90c47d965e66da1cc6f09b39baab89f0610e06750f75057bb33c39c74df6115ef9de75f3c2d1cb6fe0f6361cfbc1393cc9f23aeece482b5e314709e75ebc2cee03aa6d09e4769659b76f453a2f430825af4287f3ad807f1a549bbf2c71f02d0320982e33804d56ef2ba7ccc6218eb161a04761f1ece4d58f58b2150e19d8307433e6bdc307c19a97c303edb030ed9a095826e4fa2cc4ace1c551814454187ff468d74f03a8ef25e15167c46793ce9c4726d4b778b29567fc68aa1289e34e942905df4444defc2c427c2dd10aa27d401d6ea421c43d4bd27d1263ab90e0ad49a8206884a2b22fda93b01a4862c56ac8d5fdf48873399042ae6c27ad2d4712e7536414d820460febdb13a17266d31324aa9bdcab9b6467e844cfdd47e57a1d6f45a2216630866c71f495f08052b067b3f009425dbb228637c32615ed9d2a576ded91699f5e638c570fe27e3fb8e1e012f5d134b23b3606ddf845d74aa04b372a8a21360e61299fb9b27bd411a4341e8e89ae3bf9d59ec41df5d2c501c5888ffe8d93c45b8ca250332ba086c800885af49dfb9f045ab04d17139807146782351ffc3e5d9d28747bbc39f09fede60f781ed585972d86fabad5bc832da8d5914ec072828823e05712ac789360e4d54d4407d567f16f54b33f381a963f7a9e8ecd3a67b5834807eaa1820c8119c3aee110fd47a7ec57fb8a49a5ba49fe91b835301101f22dc91ae06de5cfeb420e8748f68f07f25432d8dca09bde2ce2680b2f4b26b5289acc26bff57aace745c7c261953d9131740f8e4af95f10471832ed489bc2d7215bf00b4d59413f47a18e1d1bdcc6d15ace8dc80be443111bcafe3820327ba2ba4eca11a21023a3e9e011054cd4278c9927ab1ed72f1a6defb49c5e9a457d8767242ebba66934feec09e1fd86c2cbc77fcdb329d5cdaf6573a96d27bcb448f74869a9e9d047a6cf82de4143ab8a5bce3fc6504ba9f39510d5afcc5fd63c7b3f6db4cbaed351aa00644ff3c96443b060bae37910c52ca2052aa86efead7eb83bbc25b576164dd7fc1d84f0ab8c28d6928e9a7d75cc9683475d025e17c66105651ff7ef00eab02bf6220d662487d17838d6aaa67bb048694d79feccf2d6dc1f95e6379910d408e3180bfded0b897069945a4a5e0a7292738d0f92d5a86faa3e5efab616c2bd258d0f2b8f7bf7581071bfccaace2a9c9007ae67f5ced63003302be532eed4d8f7c057b38e31d24c45dd167e65ea2f798a55f38130c68b22bb19caae0057328a4923b05d70074dc64e3687cac5df5141de2c5b13d9a60c55f3af5d301f2c17b62cdd92e3b3624f08cfaa192cfba5e0efae3feca7cd7f8c7bd6157c044e2879ea62a610e5e654007e64c6297a66896972f1477dc566147b5962d1432516701c61f858438bf3a8f758a21cb4dbc07f66c32e61700332eb72e0ab2415f02cc2f1f188d073e64be96d90e4368bfd4d7deabbbf6caf23cae3f8734843fac0fa8bfd8e5dc1fcae5ed31936deb28787568b4c500d227a57869c7bd8c3d71e18a25148abf49ef4a6d341b7b96cf2e64a51b1a10c63e0d60ebc48b0286a1264ed96c5af97825ff3f1757d17ccc00a237f180aca7474d5ec3a1b9a601d72fa05b14b8ca925f3363c3848f22721604d4b3ebd8ea22cea5a6bc88f5d4fe9882558e2bad02dab831e74fca1f7c1e91cc5092cbee738fcfa3df85ce2eb838183716468f70c47f1125128cdb9d2cb60a263aea3b06cffa805cf96c58145ee46fcec2d4da92230d3a7ef3386a7649a3d24295011d83f45e9115eccecf91a65aca199651e85aa50ad6afee34e457697fd3c7a64db40776be58799a522b2abc0aa0b24a340c8fb513b65c0d1fe1793473b23a8fede3a0b502a3062eba51d5c8198ef196eac3ccca29a27093ffe483228a4af5666b896181edf2e3bfcf704eb0718bed111dd39529b51385a02e474e1d081a0a2e90f941275f701cfd9f1bd6753f3ec55f15a1929dfd2578ce0ea282723d08607554f0f55fe3b998046cf0ef162d25fbe480155804bc7b9f985fb4387b5605b48f202b1e56dbeb332856acb7728c41947ab3b1a92c02fbc51f0878eb437c85e9af0c9532785d14605d2599345f5877a6c11aefae3f748cbb52d06cccf0b3d7c83b6f32dfb640f0002020d2cb4b98eed825a6f3ef0f672c6a3417f4f48223556bac660c36599feed56a6b1cdd2f16d13b87fb203ba62ce8c987e8c77b3292570359e0aca326e4282e286381392eda90c66ce144e566d498373eede4e14b523b4a3f42f2ca390d1fb980d71eaba12d4c9c546937b8809a6afa22247e1727bec4e4acf5f5a240d5abee77eccc76d5418c59a63e49a91a0d3b8fe7d37c5d79e31a673dd47e66679ecf5d1e46786a300e7a8a520f8a15801f2da8e261910c5abcec445089ab2f68caea78f084244f3af1f72bf3588c8607cef1da723fbe7e243e8cf3dc7c346e5073404a98c0c21efd2aac3644b3b55fc4d7908833e1b4cba6655d5c6abcf3d9c0fe1a3377dbd641cb89462d46671c45ba7e82d75fea405ed9dd653f6ae195776ecf0b0bf00246ad2caa5a6ba23bd6d0a56ac5016235f83993293d0c15b301f0363679e225d00d165f925119e83482cfa061532b6692d9caed011d35d78a654943f7ea74f60e7f9b4c056bd19c179d97d50fbcfdfe652e781b84f4e2da1870ae66d913f55c5d4f3a11c8610f28a985bac60721a8fe595600fa877c1c4799defeabcd136a4a39b94476f8d4a14201a148800a1f634d02c99ae48b03e0f5eb610bf37302dd6852b0418de69a0d62342ec4d48c408a9737d2314744fc25bcfc99a3e587ebff798e0633ad62f3ec097e0ec"}, @hao={0xc9, 0x10, @remote}, @generic={0x33, 0xb2, "18b45a915438e6f94e534c0dae8cc6131ec8004f8863c8db2832c1441a7c13dc55d7185631195a1ab2dfca1c2db2b71efe32c9ac17a6a942a1468ed9a29a2940968476e4f3dc9cb2236fb7a57921adffe2705613164c2f1ccb292acfdda276a9c791b1449009061734c395e2563cbd942ecdb6974b070621e9ceaf301be91611837a85df737c3e527590b424d8efcb07cee0a5416cb4fa29bee23c871cc68dbcaffc54cbc9eee255a1c8f9284db9b5dd8fd8"}]}, 0x11f8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000005180)=0x1, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f0000005300)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000052c0)={&(0x7f0000005200)={0x84, 0x2, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000000}, 0x8000) 2.807953571s ago: executing program 0 (id=40): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x1, 0x7fd, 0xd, 0x6}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) 2.807465081s ago: executing program 0 (id=41): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0x8001, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0x3, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x400002, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x3, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="64000000100001060000000000000000000000003f000000000000000000000010000300766574683000000000000000", 0x30}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x2}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @multicast}) write$tun(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffff000000000000810000000800451e0038006840000701907864010101ac1414aa05039078ffffffff45300006006500010802000fac1414aaac1414bbec07f54000000000"], 0x4a) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000380)={0x4, 0x0, [{0xc0000001, 0x2, 0x1, 0x6, 0x7, 0x10001, 0x44}, {0xc0000000, 0xffff7fff, 0x2, 0x80000001, 0x1, 0x3ff, 0x2}, {0x80000008, 0x9, 0x0, 0x1000005, 0xfffffffc, 0x4, 0x80000001}, {0x80000007, 0x33, 0x4, 0xe, 0x10000, 0x0, 0x1}]}) socket$netlink(0x10, 0x3, 0xa) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) preadv(r0, &(0x7f00000024c0)=[{&(0x7f00000004c0)=""/30, 0x1e}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/176, 0xb0}, {&(0x7f0000002200)=""/201, 0xc9}, {&(0x7f0000002300)=""/137, 0x89}, {&(0x7f00000023c0)=""/54, 0x36}, {&(0x7f0000002400)=""/133, 0x85}], 0x7, 0x8, 0xd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 2.589713146s ago: executing program 0 (id=42): syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x400) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1d70c2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000380)={0x0, 0x0, 0x3ed3, 0x5}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000002880)={0x1, 0x5, 0xfffffffb}, 0x10) write(r3, &(0x7f00000028c0)="240000001a005f0214f9f4070009010081ff000000000005000000000800040001000000", 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f00000003c0), 0x0) clock_gettime(0x0, 0x0) timer_settime(r2, 0x1, &(0x7f0000002800), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002840)={0x0, 0x0, 0x0}, 0x20008080) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000140)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x8041, 0x4, 0xa8df, 0x6, 0x7ffd, 0x7, 0x41, 0xdfe, 0x1, 0xeba7, 0x204, 0x80}}, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000002900)={'vxcan0\x00'}) mmap$IORING_OFF_SQ_RING(0x0, 0x71, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$uac3(r4, &(0x7f0000000500)={0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="200c8b0000008b07f16c738f2a25b0b6703c155425cca87530395dbc72bf2b99fd3b6b98a34a24542a199a773b2bb91c7fd14281731f9884ec903398a919fad15ba391aa79be4087c2139fdd0e6daf43b135f16f740b30f50de40d0629eb7513ce7254d5e1b22c200202fcda04f0c553bbf680bf44b62f2c7aa9c34b7dca0b0a0e8b0bc92349c7b48f77f9716d685b78c4"], &(0x7f0000000440)=ANY=[@ANYBLOB="0003a3000000a303c6285c686faf6990123ddaee44611e8abaa196cf1d6ef446ea03b6e760783a46eaec074ddc3b6c2690673792d512cf89d372b1861def0c63fc1048276167e7af714e8c1ba5c123a351fc423c188d2b29c721550806206e2957e94e42027fadc7e9c6f975e455e2f2005daf3988f836d34b0bd53d75e32dbe16f1a552670ef235040204578a713ef4efedc8ea24c100636beb00"/169]}, &(0x7f0000002780)={0x44, &(0x7f0000000540)={0x20, 0x15, 0x3a, "02dd43532178978f0af458bf71387eba923fd65f96f9c4e6e42414ffffda18de04b91cd5a23f4074c9037516482d5b6fbb306bf489e491a5fef1"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000600)={0x20, 0x81, 0x2, "38be"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'y'}, &(0x7f0000000680)={0x20, 0x83, 0x3, "e52ec3"}, &(0x7f0000002700)={0x20, 0x84, 0x3, "78b284"}, &(0x7f0000002740)={0x20, 0x85, 0x3, "1c5395"}}) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r5, 0x4008af25, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x2, 0x3}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000000400)={0x14, 0x0, 0x0}, 0x0) 2.205734835s ago: executing program 1 (id=46): ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@private0, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x0, 0x6, 0x808082}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, &(0x7f0000000900), 0x4, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000280)}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xfffffffffffffcf4, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x0, 0x92, 0xb3}, @NL80211_ATTR_REG_RULES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(&(0x7f00000006c0)=@filename='none\x00', &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) clock_settime(0xfffffffa, &(0x7f0000000980)) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/cpu/drivers/processor\x00', 0x0, 0x0) openat(r4, &(0x7f0000000840)='unbind\x00', 0x1, 0x0) (async) r5 = openat(r4, &(0x7f0000000840)='unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000880)='cpu1\n', 0x5) (async) write(r5, &(0x7f0000000880)='cpu1\n', 0x5) unshare(0x2c020400) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="a8000000000000000000000007000000442095f000000ec700008f45000000ff000000050000006800000800000000034404113386080000000305029410536db2748b4dcdca4c40489dbcfc89078c0000007a9410cc181a22b52159a44677ebaf61004414e8e30a01010100000008ffffffff0000000489234764ce000064010101ac1414bbac1414bbe000000264010101ac1e000100000000440c5623ac14143c000000090000"], 0xa8}, 0x6000000) (async) sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="a8000000000000000000000007000000442095f000000ec700008f45000000ff000000050000006800000800000000034404113386080000000305029410536db2748b4dcdca4c40489dbcfc89078c0000007a9410cc181a22b52159a44677ebaf61004414e8e30a01010100000008ffffffff0000000489234764ce000064010101ac1414bbac1414bbe000000264010101ac1e000100000000440c5623ac14143c000000090000"], 0xa8}, 0x6000000) write(0xffffffffffffffff, &(0x7f00000008c0)='cpu1\n', 0x5) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f00000002c0)="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"}) syz_usb_disconnect(r0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setuid(0xee00) (async) setuid(0xee00) socket(0x2b, 0x2, 0x0) (async) r7 = socket(0x2b, 0x2, 0x0) write(r7, &(0x7f0000000200)="2400000011005f0414f900655e00000000ae00002d000000000000ea08000f0001000000", 0x24) syslog(0x2, 0x0, 0x0) (async) syslog(0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.748223766s ago: executing program 3 (id=47): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'pimreg\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x202001, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) open(0x0, 0x60840, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) 1.687452378s ago: executing program 3 (id=49): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{0x1, 0x7fd, 0xd, 0x6}, 'syz0\x00', 0x40}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x30, 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xc) 1.61615069s ago: executing program 3 (id=50): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x228c02, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa4, 0x6}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x8c82c598d9485652}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x63a2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x90000005}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000300)={0x4}) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c, 0x0}}], 0x1, 0x40000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) fgetxattr(r4, &(0x7f0000000400)=@known='com.apple.system.Security\x00', &(0x7f00000004c0)=""/4096, 0x1000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000340)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000380)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f00000003c0)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfffffed2}, 0x105}], 0x1, 0x40002042, 0x0) 1.423955314s ago: executing program 3 (id=53): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score\x00') r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3e, "", [{{0x9, 0x4, 0x0, 0x0, 0xf7, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x20, 0x9, 0xe9, {0xe9, 0xa, "83efb930f01891f0478fa20961a54207b703a9e43d359c479c37f525cde38bf791408a366948aba64a9dbc6d3dfb8e7a5a7e17a80988d33c5e4c1b0b00007f06686538c697d986f8b4566f61d06378c6ed14c63ee030f3197b7b6ef5c5ff10752985251e2f3c34f1df4aa8b972b7bfe1a433ae86b8d0c1d9b976d76de76e2cc7fc20d69f1c5064897e0037040020b854e8b6fef8059370241c0dde8681bf1c00a0e3b0cb863d46f41a91a4948d40444400f7fbb0f491ea0d4a0fafa3b12e49e3378b02e0fad62c885e636a11255fa3870c8608c137dcce7ee1b9b89695ffc560d3fdc605b4168a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x30, 0x8, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xc8, 0xf0, 0x1, {0x22, 0x7a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x8, 0x9a}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0xb8, 0xf7}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x3, 0x2, 0x7, 0x10, 0x4}, 0x2d, &(0x7f0000000240)={0x5, 0xf, 0x2d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x4, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x2, 0x10, 0x61e}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xf, 0xe, 0x5b5}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x9a, 0xb5, 0x40}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x443}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x0, 0x1c, 0xd4, {0xd4, 0x21, "4110f28a36f50e995cd4525bc79c4f1a06408b6881ff704978b301ceea955b3bcc52d970815b4ca9b7410c587e117f1bbaf6e78f1708b97102f32765de42020e7d08ff15a0b42ff33fb0e153b6bc11a1fd46217f7b5f3a3216e3eece726483290d6029f6dc9b99ee542b0d1a41802bbc69d2814e54ca1c02e383f78d0eabee227e96b174c95d090ab8d3018aaebbbf3304488ab1d8918fa7a3b692093b43c9c837380d6f269b9ddc6845adc97b18a18fa5e25988581a94bd397aa2c910527d4415052d4e79c3f54b55fccfcb30719ba159d1"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}, &(0x7f0000000480)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, '\a'}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xd53}}}}, &(0x7f0000002780)={0x2c, &(0x7f0000000540)={0x0, 0xa, 0xa0, "7a337e1e24d0ce1f22449787b913f3a9b2370d3764071f33ce23ba1d513be52a8ce27101f22a646a8ccd965b6ed160ed43b72492d034f6c031f15e1b684be5cb00335c6a384e8bd3b33c9b3f217ed4e496cb357ad99b9b864e7647fe72871f6748baf80ec2138593c73ef84861b75c3823f9a57413cb48f86faa1458f6291f8664a251a0a5b5976f1d2b1c4a29907bd4903d16846d18d7e1d2d0264a8b191acd"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002680)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002800)=ANY=[@ANYBLOB="200154000000d30e811c2fe88c2ddb98c26b0139debd7d1aaf841f7db1717d7d1df7dfc72dbc535573d4548db06a9e5d011521c31ff235534d9e27cf5f75ff397c03936a7644d97d2e01381b4bceed81bd13895da8e8e8157965efc843c607ad8a3d0210d18d188e"], &(0x7f0000002740)={0x20, 0x3, 0x1, 0xc}}) (async) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) (async) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000027c0)=@x86={0x80, 0x5, 0x8, 0x0, 0x33, 0x7, 0x7, 0x2, 0x4, 0x6, 0xe0, 0xa, 0x0, 0x2, 0x5, 0x1, 0x6, 0x1, 0x6, '\x00', 0x7f, 0x1}) 1.291478608s ago: executing program 2 (id=56): openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000c00)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\`\x12\x1dk\xc8\xa1g~\x7fY@\nU\xa9e\\\x1b\xaa\x1cE\xdb\xa2\x8dO\x0e\xa1Z\n\xe2\xac\x12`lG\xecZ0N(\xf3\xa5N!\xd9\x8fl7\xa9\xc6(\x89v\xe5\x99~\x18b\x1c0\x14\x1f\x1a#\x8c\xa6\xd5:[\xe7\rah\xd8\xbeO\xee\xf9\"4\xd2\t\xb7\xfb\x00t\xb9C\xe9jFV\x00^\x92\x90}\xc1?\x10\"p\xcd\xdf\xab\x13/R-\xaby{\x0f\x12\x7fP\"\xb2P\x04W\xeb\xb2\x96\xd6\x06\xfe\x01q\x7f\xca\x98\xe1h{(\x8f\x9b\xd5\xf8\x13\xd2t\x05\xdan$\xe73\x9b\x95\xde\xa3&\xacA\x90\\\xa4@\x90>M8\xfb\xff]\r6k\x9d\xf5\xb2\xbf`\xa4y2W.GXd\t\xddQ\xb5|\xaf\x8cM%\x04\xf9\xcaCC;\x1c\xd7\x00\x00', 0x3a, 'G\xcaresv_l\xd5\xceel', 0x3a, './file0'}, 0xfd) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./mysys\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x23, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x62040200) (async) unshare(0x62040200) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r1], 0x128}, 0x4040010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x98}, 0x80) (async) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000640)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000680)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r5}}], 0x1, 0x0, 0x0) memfd_create(&(0x7f0000000240)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FIBMAP(r9, 0x5393, 0x0) (async) ioctl$FIBMAP(r9, 0x5393, 0x0) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r10, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r11, 0x0) 409.602569ms ago: executing program 2 (id=57): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 408.092669ms ago: executing program 2 (id=58): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80020, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, r2, 0x0) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) (async) listen(r5, 0x0) (async) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) (async, rerun: 32) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x7) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x7000000, 0x11, r4, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x80000) getpeername$packet(r7, 0x0, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) unshare(0x22020600) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) setreuid(0xee01, 0xee01) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="11140000000000000708000000020001c200c2040000000505020003c20400000001c2042d0000810738000000010c090004080000000000000009000000000000000300000000000000010000000000000001000000000000000100000000000000c2040000000601080000000000000000000100c910ff01000000000000000000000000000101040000000001080000000000000000040102050200070401070502fff70106000000000000000000"], 0xb0) (async) ioctl$IOC_PR_RESERVE(r9, 0x401070c9, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) (rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES16=r10, @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x1) 229.964904ms ago: executing program 2 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1bf) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c004}}], 0x1, 0x40000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1bf) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) sendmmsg$unix(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c004}}], 0x1, 0x40000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) (async) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) (async) 195.367444ms ago: executing program 2 (id=60): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./dev\x00', 0x1bf) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000180)) mount(0x0, &(0x7f00000005c0)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./mnt\x00', 0x24) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000140)={{@_ha_fsid={[0x3, 0x1]}, {0x7ff, 0x86a8, 0x8, 0x330}}, {{[0x8, 0x8, 0x8000, 0x4]}, 0x0, 0x3, 0xffffffff, 0x0, &(0x7f0000000000)=[{{@align=0xa, {0xf2f3, 0xfff8, 0x6}}, 0x6, 0x0, 'devtmpfs\x00'}, {{@_ha_fsid={[0x6, 0x4]}, {0x7fff, 0xdd, 0x6, 0x8}}, 0x80000001, 0x0, 'devtmpfs\x00'}, {{@_ha_fsid={[0x2, 0xa]}, {0x8, 0x8, 0x1ff, 0x1e4d}}, 0x2, 0x0, '!\x00'}, {{@_ha_fsid={[0x0, 0x5e49]}, {0x9, 0xffff, 0x8, 0x6}}, 0x1, 0x0, ':\x00'}, {{@align=0x8, {0x100, 0x3, 0xff, 0x9}}, 0x6, 0x0, '\x00'}, {{@align=0x1, {0x1, 0x7, 0x4}}, 0x1e, 0x0, '[,\x95\x00'}, {{@align=0x5, {0x401, 0x8, 0x7, 0xd7f}}, 0x9a77, 0x0, 'ext4\x00'}, {{@align=0x9, {0x0, 0x7, 0x6, 0x80000000}}, 0x7, 0x0, 'ext4\x00'}]}}) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f00000006c0)='./mnt\x00', &(0x7f0000000700)='ext4\x00', 0x8410, 0x0) r1 = open$dir(&(0x7f0000000740)='./mnt\x00', 0x0, 0x2) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000300)={&(0x7f00000001c0)=0x7, 0x9db, &(0x7f0000000200)=[{}], &(0x7f00000002c0)}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x41009432, &(0x7f0000000780)={@desc={0x1, 0x1000000, @auto="92f019a92d806a21"}}) 94.272177ms ago: executing program 3 (id=61): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x37, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6, 0x24, 0x1a, 0x0, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0x2}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xc0003, 0x4, 0x4, 0x10, 0x2002, 0x411, 0x4, 0x10, 0x8000, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x7fffffff) ioctl$TCFLSH(r3, 0x400455c8, 0x2000000000000004) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=62): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x1e3041, 0x0) write$khugepaged_scan(r0, &(0x7f0000000080), 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014000c0003007a302564aa58b9a64411f6bbf44dc48f575ad1", 0x3b}], 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000}) recvfrom(r1, &(0x7f0000000300)=""/149, 0x95, 0x220, &(0x7f00000003c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x80) ioctl$UBLK_U_CMD_GET_DEV_INFO(r0, 0x80207502, &(0x7f0000000140)={0x0, 0xffff, 0x40, &(0x7f0000000100)=@ublk_ctrl_dev_info_existing}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r2, &(0x7f00000002c0)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 29.075851][ T36] audit: type=1400 audit(1792190538.750:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.079328][ T286] cgroup: Unknown subsys name 'net' [ 29.098588][ T36] audit: type=1400 audit(1792190538.750:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.126019][ T36] audit: type=1400 audit(1792190538.780:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.126501][ T286] cgroup: Unknown subsys name 'devices' [ 29.249261][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.254920][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.371491][ T36] audit: type=1400 audit(1792190539.050:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.394690][ T36] audit: type=1400 audit(1792190539.050:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.419491][ T36] audit: type=1400 audit(1792190539.050:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.466385][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.475249][ T36] audit: type=1400 audit(1792190539.150:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.500740][ T36] audit: type=1400 audit(1792190539.150:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.545772][ T36] audit: type=1400 audit(1792190539.220:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.547114][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.571404][ T36] audit: type=1400 audit(1792190539.220:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.449990][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.457153][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.464267][ T293] bridge_slave_0: entered allmulticast mode [ 30.470716][ T293] bridge_slave_0: entered promiscuous mode [ 30.478603][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.485708][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.492964][ T293] bridge_slave_1: entered allmulticast mode [ 30.499301][ T293] bridge_slave_1: entered promiscuous mode [ 30.590910][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.598111][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.605207][ T294] bridge_slave_0: entered allmulticast mode [ 30.611653][ T294] bridge_slave_0: entered promiscuous mode [ 30.621040][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.628174][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.635250][ T294] bridge_slave_1: entered allmulticast mode [ 30.641646][ T294] bridge_slave_1: entered promiscuous mode [ 30.677631][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684705][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.691833][ T296] bridge_slave_0: entered allmulticast mode [ 30.698139][ T296] bridge_slave_0: entered promiscuous mode [ 30.704638][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.711726][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.718820][ T296] bridge_slave_1: entered allmulticast mode [ 30.725132][ T296] bridge_slave_1: entered promiscuous mode [ 30.791710][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.798813][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.805889][ T295] bridge_slave_0: entered allmulticast mode [ 30.812282][ T295] bridge_slave_0: entered promiscuous mode [ 30.821828][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.828982][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.836059][ T295] bridge_slave_1: entered allmulticast mode [ 30.842574][ T295] bridge_slave_1: entered promiscuous mode [ 30.865839][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.872931][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.880317][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.887383][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.949738][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.956820][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.964252][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.971321][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.992371][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.999770][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.007867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.015087][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.035887][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.043023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.050803][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.057999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.106247][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.113369][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.131671][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.138752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.157455][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.164523][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.173865][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.180941][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.208883][ T293] veth0_vlan: entered promiscuous mode [ 31.231527][ T294] veth0_vlan: entered promiscuous mode [ 31.246600][ T296] veth0_vlan: entered promiscuous mode [ 31.257118][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.264214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.278657][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285808][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.294841][ T293] veth1_macvtap: entered promiscuous mode [ 31.302158][ T294] veth1_macvtap: entered promiscuous mode [ 31.330258][ T296] veth1_macvtap: entered promiscuous mode [ 31.373521][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.390865][ T295] veth0_vlan: entered promiscuous mode [ 31.422199][ T315] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.422932][ T295] veth1_macvtap: entered promiscuous mode [ 31.449054][ T317] ======================================================= [ 31.449054][ T317] WARNING: The mand mount option has been deprecated and [ 31.449054][ T317] and is ignored by this kernel. Remove the mand [ 31.449054][ T317] option from the mount to silence this warning. [ 31.449054][ T317] ======================================================= [ 31.766989][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.767003][ T309] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.787247][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.787794][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.917164][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 31.923656][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.927190][ T31] usb 4-1: device descriptor read/64, error -71 [ 31.935085][ T309] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.944854][ T45] usb 2-1: config index 0 descriptor too short (expected 34617, got 36) [ 31.954742][ T309] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 31.960306][ T45] usb 2-1: config 217 has too many interfaces: 67, using maximum allowed: 32 [ 31.973248][ T309] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 31.981549][ T45] usb 2-1: config 217 has 1 interface, different from the descriptor's value: 67 [ 31.992535][ T309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.000023][ T45] usb 2-1: config 217 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 32.007871][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 32.022938][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 32.037092][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.039891][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.047339][ T10] usb 1-1: Product: syz [ 32.059665][ T10] usb 1-1: Manufacturer: syz [ 32.063385][ T45] usbhid 2-1:217.0: couldn't find an input interrupt endpoint [ 32.064945][ T309] usb 3-1: config 0 descriptor?? [ 32.076949][ T10] usb 1-1: SerialNumber: syz [ 32.186991][ T31] usb 4-1: device descriptor read/64, error -71 [ 32.271777][ T45] usb 2-1: USB disconnect, device number 2 [ 32.289710][ T10] usb 1-1: selecting invalid altsetting 1 [ 32.307373][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 32.317240][ T10] usb 1-1: selecting invalid altsetting 1 [ 32.323698][ T10] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 32.333570][ T10] usb 1-1: selecting invalid altsetting 1 [ 32.343132][ T10] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 32.357621][ T10] usb 1-1: USB disconnect, device number 2 [ 32.377037][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.427774][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.488336][ T309] usbhid 3-1:0.0: can't add hid device: -32 [ 32.494324][ T309] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 32.566992][ T31] usb 4-1: device descriptor read/64, error -71 [ 32.806967][ T31] usb 4-1: device descriptor read/64, error -71 [ 32.918471][ T31] usb usb4-port1: attempt power cycle [ 32.927422][ T45] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.937169][ T45] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.000549][ T345] hid-generic 0000:0000:0000.0001: pid 345 passed too large report [ 33.202049][ T353] PM: suspend entry (deep) [ 33.256996][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.277984][ T31] usb 4-1: device descriptor read/8, error -71 [ 33.356604][ T355] FAULT_INJECTION: forcing a failure. [ 33.356604][ T355] name failslab, interval 1, probability 0, space 0, times 1 [ 33.369362][ T355] CPU: 1 UID: 0 PID: 355 Comm: syz.1.13 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 33.369398][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 33.369423][ T355] Call Trace: [ 33.369431][ T355] [ 33.369439][ T355] __dump_stack+0x21/0x30 [ 33.369477][ T355] dump_stack_lvl+0x140/0x1c0 [ 33.369502][ T355] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.369528][ T355] dump_stack+0x19/0x20 [ 33.369552][ T355] should_fail_ex+0x3c2/0x510 [ 33.369568][ T355] should_failslab+0xac/0x100 [ 33.369584][ T355] __kmalloc_node_noprof+0x69/0x500 [ 33.369607][ T355] ? __kvmalloc_node_noprof+0x128/0x300 [ 33.369629][ T355] __kvmalloc_node_noprof+0x128/0x300 [ 33.369650][ T355] ? kasan_save_alloc_info+0x3a/0x50 [ 33.369671][ T355] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 33.369693][ T355] ? __kmalloc_cache_noprof+0x220/0x470 [ 33.369716][ T355] ? alloc_fdtable+0xd2/0x4f0 [ 33.369742][ T355] alloc_fdtable+0x18d/0x4f0 [ 33.369766][ T355] dup_fd+0x6af/0x9c0 [ 33.369789][ T355] ? copy_fs_struct+0x160/0x2d0 [ 33.369813][ T355] ksys_unshare+0x46a/0x920 [ 33.369837][ T355] ? fput+0x1a4/0x230 [ 33.369861][ T355] ? __cfi_ksys_unshare+0x10/0x10 [ 33.369886][ T355] ? __kasan_check_write+0x18/0x20 [ 33.369909][ T355] __x64_sys_unshare+0x3c/0x50 [ 33.369934][ T355] x64_sys_call+0x2998/0x2ee0 [ 33.369950][ T355] do_syscall_64+0x57/0xf0 [ 33.369965][ T355] ? clear_bhb_loop+0x50/0xa0 [ 33.369986][ T355] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.370005][ T355] RIP: 0033:0x7fcc62d9e559 [ 33.370025][ T355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.370061][ T355] RSP: 002b:00007fcc63c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.370096][ T355] RAX: ffffffffffffffda RBX: 00007fcc63025fa0 RCX: 00007fcc62d9e559 [ 33.370117][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 33.370144][ T355] RBP: 00007fcc62e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 33.370160][ T355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.370175][ T355] R13: 00007fcc63026038 R14: 00007fcc63025fa0 R15: 00007ffd1440a148 [ 33.370198][ T355] [ 33.619429][ T31] usb 4-1: device descriptor read/8, error -71 [ 33.730362][ T13] Filesystems sync: 0.523 seconds [ 33.757683][ T353] Freezing user space processes [ 33.764034][ T353] Freezing user space processes completed (elapsed 0.001 seconds) [ 33.771880][ T353] OOM killer disabled. [ 33.775946][ T353] Freezing remaining freezable tasks [ 33.857071][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.291383][ T353] Freezing remaining freezable tasks failed after 0.509 seconds (0 tasks refusing to freeze, wq_busy=1): [ 34.302698][ T353] Showing freezable workqueues that are still busy: [ 34.309352][ T353] workqueue events_freezable: flags=0x4 [ 34.314915][ T353] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=0 refcnt=2 [ 34.314971][ T353] inactive: update_balloon_stats_func [ 34.315009][ T353] workqueue usb_hub_wq: flags=0x4 [ 34.333101][ T353] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=2 refcnt=3 [ 34.333170][ T353] in-flight: 31:hub_event hub_event [ 34.333315][ T353] Restarting kernel threads ... done. [ 34.352250][ T353] OOM killer enabled. [ 34.356245][ T353] Restarting tasks ... [ 34.357686][ T36] kauditd_printk_skb: 64 callbacks suppressed [ 34.357704][ T36] audit: type=1400 audit(1792190544.040:138): avc: denied { create } for pid=318 comm="syz.3.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.359408][ T353] done. [ 34.379358][ T319] process 'syz.3.5' launched './file0' with NULL argv: empty string added [ 34.400433][ T36] audit: type=1400 audit(1792190544.050:139): avc: denied { execute } for pid=318 comm="syz.3.5" name="file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.423301][ T36] audit: type=1400 audit(1792190544.070:140): avc: denied { execute_no_trans } for pid=318 comm="syz.3.5" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.436981][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.453047][ T36] audit: type=1400 audit(1792190544.070:141): avc: denied { mounton } for pid=318 comm="syz.3.5" path="/1/file0" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.462213][ T353] random: crng reseeded on system resumption [ 34.475809][ T36] audit: type=1400 audit(1792190544.080:142): avc: denied { ioctl } for pid=318 comm="syz.3.5" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.481663][ T353] Abort: One or more tasks refusing to freeze [ 34.507883][ T36] audit: type=1400 audit(1792190544.080:143): avc: denied { ioctl } for pid=318 comm="syz.3.5" path="socket:[4151]" dev="sockfs" ino=4151 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.512143][ T353] PM: suspend exit [ 34.546215][ T10] usb 3-1: USB disconnect, device number 2 [ 34.564532][ T36] audit: type=1400 audit(1792190544.240:144): avc: denied { read write } for pid=365 comm="syz.0.15" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.590564][ T36] audit: type=1400 audit(1792190544.240:145): avc: denied { open } for pid=365 comm="syz.0.15" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.591822][ T366] input: syz0 as /devices/virtual/input/input4 [ 34.621865][ T36] audit: type=1400 audit(1792190544.260:146): avc: denied { ioctl } for pid=363 comm="syz.2.16" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=3931 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.625617][ T31] usb 4-1: device descriptor read/8, error -71 [ 34.649454][ T36] audit: type=1400 audit(1792190544.270:147): avc: denied { ioctl } for pid=365 comm="syz.0.15" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 34.751812][ T366] netlink: 140 bytes leftover after parsing attributes in process `syz.0.15'. [ 34.767150][ T31] usb usb4-port1: unable to enumerate USB device [ 34.850138][ T385] Zero length message leads to an empty skb [ 34.926958][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 35.081838][ T10] usb 3-1: Invalid ep0 maxpacket: 9 [ 35.217087][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 35.376956][ T10] usb 3-1: Invalid ep0 maxpacket: 9 [ 35.387896][ T10] usb usb3-port1: attempt power cycle [ 35.426961][ T309] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.508196][ T309] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 36.526939][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.595858][ T309] usb 1-1: config 0 descriptor?? [ 36.646995][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.658863][ T418] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 36.666503][ T418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.667734][ T10] usb 3-1: Invalid ep0 maxpacket: 9 [ 36.680363][ T418] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 36.680422][ T418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 36.804100][ T309] usb 1-1: Cannot read MAC address [ 36.809480][ T309] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 36.823347][ T309] usb 1-1: USB disconnect, device number 3 [ 36.829956][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.846998][ T331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 36.857557][ T10] usb 3-1: Invalid ep0 maxpacket: 9 [ 36.862936][ T10] usb usb3-port1: unable to enumerate USB device [ 36.998752][ T331] usb 4-1: unable to get BOS descriptor or descriptor too short [ 37.007138][ T331] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.017275][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.027639][ T331] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 37.036703][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.044810][ T331] usb 4-1: Product: syz [ 37.049046][ T331] usb 4-1: Manufacturer: syz [ 37.053643][ T331] usb 4-1: SerialNumber: syz [ 37.061322][ T331] usb 4-1: selecting invalid altsetting 1 [ 37.067335][ T331] usb 4-1: unit 6 not found! [ 37.260533][ T331] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 37.270753][ T331] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.288452][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.372803][ T422] input: syz0 as /devices/virtual/input/input5 [ 37.505507][ T429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 37.796973][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 37.948087][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.960739][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.967164][ T331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 37.971818][ T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 37.991085][ T45] usb 2-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 38.000369][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.013385][ T45] usb 2-1: config 0 descriptor?? [ 38.146966][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 38.153509][ T331] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 250, changing to 11 [ 38.164649][ T331] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 41089, setting to 1024 [ 38.177406][ T331] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 38.186489][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.194561][ T331] usb 3-1: Product: syz [ 38.198775][ T331] usb 3-1: Manufacturer: syz [ 38.203392][ T331] usb 3-1: SerialNumber: syz [ 38.416710][ T331] usb 3-1: USB disconnect, device number 7 [ 38.425868][ T45] wacom 0003:056A:00D2.0002: unknown main item tag 0x3 [ 38.433153][ T45] wacom 0003:056A:00D2.0002: Unknown device_type for 'HID 056a:00d2'. Assuming pen. [ 38.443695][ T45] wacom 0003:056A:00D2.0002: hidraw0: USB HID v0.00 Device [HID 056a:00d2] on usb-dummy_hcd.1-1/input0 [ 38.459079][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.480436][ T45] input: Wacom Bamboo Craft Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D2.0002/input/input6 [ 38.574142][ T445] input: syz0 as /devices/virtual/input/input9 [ 38.606123][ T447] syzkaller1: entered promiscuous mode [ 38.611775][ T447] syzkaller1: entered allmulticast mode [ 38.677053][ T331] usb 2-1: USB disconnect, device number 3 [ 39.077063][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.216984][ T45] usb 1-1: device descriptor read/64, error -71 [ 39.467004][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.474650][ T45] usb 1-1: device descriptor read/64, error -71 [ 39.611818][ T311] usb 4-1: USB disconnect, device number 6 [ 39.638268][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.649664][ T31] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 39.659302][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.659357][ T469] pimreg: tun_chr_ioctl cmd 21731 [ 39.674572][ T31] usb 2-1: config 0 descriptor?? [ 39.717020][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.739903][ T473] input: syz0 as /devices/virtual/input/input10 [ 39.778603][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 39.778622][ T36] audit: type=1400 audit(1792190549.460:187): avc: denied { getopt } for pid=470 comm="syz.2.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.856975][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.042553][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 40.051503][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 40.063160][ T31] usb 2-1: USB disconnect, device number 4 [ 40.117034][ T45] usb 1-1: device descriptor read/64, error -71 [ 40.135204][ T36] audit: type=1400 audit(1792190549.810:188): avc: denied { create } for pid=492 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 40.157994][ T36] audit: type=1400 audit(1792190549.810:189): avc: denied { create } for pid=492 comm="syz.2.56" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 40.217024][ T467] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.227201][ T45] usb usb1-port1: attempt power cycle [ 40.368147][ T467] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 40.379059][ T467] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 40.392113][ T467] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 40.401180][ T467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.409963][ T467] usb 4-1: config 0 descriptor?? [ 40.496991][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 40.566983][ T45] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 40.588029][ T45] usb 1-1: device descriptor read/8, error -71 [ 40.617792][ T499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.626836][ T499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.628285][ T467] logitech 0003:046D:C295.0003: hidraw0: USB HID v0.04 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 40.646946][ T467] logitech 0003:046D:C295.0003: no inputs found [ 40.658133][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.669111][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 40.678474][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.688474][ T31] usb 2-1: config 0 descriptor?? [ 40.728110][ T45] usb 1-1: device descriptor read/8, error -71 [ 40.818182][ T467] usb 4-1: USB disconnect, device number 7 [ 40.967001][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 40.989089][ T36] audit: type=1400 audit(1792190550.670:190): avc: denied { setopt } for pid=501 comm="syz.2.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.009622][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.034809][ T36] audit: type=1400 audit(1792190550.710:191): avc: denied { create } for pid=503 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.056486][ T36] audit: type=1400 audit(1792190550.710:192): avc: denied { bind } for pid=503 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.076570][ T36] audit: type=1400 audit(1792190550.710:193): avc: denied { listen } for pid=503 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.095983][ T36] audit: type=1400 audit(1792190550.710:194): avc: denied { connect } for pid=503 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.120052][ T36] audit: type=1400 audit(1792190550.720:195): avc: denied { accept } for pid=503 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.147989][ T45] usb 1-1: device descriptor read/8, error -71 [ 41.158645][ T36] audit: type=1400 audit(1792190550.840:196): avc: denied { mount } for pid=510 comm="syz.2.59" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.212498][ T513] ./dev/sda1: Can't lookup blockdev [ 41.257223][ T45] usb usb1-port1: unable to enumerate USB device [ 41.384335][ T520] netlink: 9 bytes leftover after parsing attributes in process `syz.2.62'. [ 41.393186][ T520] z00ªX¹¦: renamed from gretap0 (while UP) [ 41.399862][ T520] z00ªX¹¦: entered allmulticast mode [ 41.507343][ T31] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 41.515728][ T31] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 41.566961][ T45] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 41.660796][ C0] ------------[ cut here ]------------ [ 41.666300][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 41.674922][ C0] index 42396 is out of range for type 'const int[34]' [ 41.681790][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 41.681813][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.681824][ C0] Call Trace: [ 41.681830][ C0] [ 41.681837][ C0] __dump_stack+0x21/0x30 [ 41.681867][ C0] dump_stack_lvl+0x140/0x1c0 [ 41.681892][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.681918][ C0] ? start_kernel+0x462/0x4bb [ 41.681939][ C0] dump_stack+0x19/0x20 [ 41.681964][ C0] ubsan_epilogue+0xe/0x40 [ 41.681979][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 41.682001][ C0] aiptek_irq+0x208d/0x2a00 [ 41.682021][ C0] ? _raw_spin_unlock+0x45/0x60 [ 41.682036][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 41.682059][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 41.682083][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 41.682107][ C0] dummy_timer+0xa3f/0x4900 [ 41.682139][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 41.682165][ C0] ? timerqueue_del+0xd7/0x130 [ 41.682188][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 41.682207][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 41.682230][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 41.682251][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 41.682270][ C0] ? read_tsc+0xd/0x20 [ 41.682293][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 41.682319][ C0] hrtimer_run_softirq+0x159/0x560 [ 41.682339][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 41.682391][ C0] handle_softirqs+0x1aa/0x5b0 [ 41.682423][ C0] __irq_exit_rcu+0x47/0xb0 [ 41.682446][ C0] irq_exit_rcu+0xd/0x30 [ 41.682463][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 41.682485][ C0] [ 41.682490][ C0] [ 41.682496][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 41.682518][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 41.682541][ C0] Code: cc cc cc cc cc cc cc b8 dc 3d 11 71 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 09 3f 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 41.682555][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 41.682569][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a8553d [ 41.682582][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000002f47c [ 41.682593][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 41.682605][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 41.682617][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da328 [ 41.682631][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 41.682680][ C0] default_idle+0x17/0x30 [ 41.682703][ C0] arch_cpu_idle+0xd/0x20 [ 41.682726][ C0] default_idle_call+0x3e/0x80 [ 41.682749][ C0] do_idle+0x2fc/0x570 [ 41.682769][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 41.682790][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 41.682810][ C0] ? radix_tree_lookup+0x250/0x2a0 [ 41.682827][ C0] cpu_startup_entry+0x47/0x60 [ 41.682847][ C0] rest_init+0x10b/0x130 [ 41.682871][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 41.682895][ C0] start_kernel+0x462/0x4bb [ 41.682914][ C0] x86_64_start_reservations+0x2e/0x30 [ 41.682936][ C0] x86_64_start_kernel+0x6a/0x7b [ 41.682958][ C0] common_startup_64+0x13b/0x157 [ 41.682985][ C0] [ 41.682990][ C0] ---[ end trace ]--- [ 41.718735][ T45] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 41.719358][ C0] ================================================================== [ 41.724567][ T45] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 41.729286][ C0] BUG: KASAN: global-out-of-bounds in aiptek_irq+0x20ab/0x2a00 [ 41.729327][ C0] Read of size 4 at addr ffffffff86733410 by task swapper/0/0 [ 41.733738][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 41.737923][ C0] [ 41.737934][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 41.737964][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 41.737981][ C0] Call Trace: [ 41.738018][ C0] [ 41.738056][ C0] __dump_stack+0x21/0x30 [ 41.738177][ C0] dump_stack_lvl+0x140/0x1c0 [ 41.738273][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 41.738373][ C0] ? __cfi__printk+0x10/0x10 [ 41.738458][ C0] print_address_description+0x71/0x210 [ 41.738563][ C0] print_report+0x4a/0x70 [ 41.738649][ C0] kasan_report+0x162/0x1a0 [ 41.738712][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 41.738794][ C0] ? aiptek_irq+0x20ab/0x2a00 [ 41.738868][ C0] __asan_report_load4_noabort+0x18/0x20 [ 41.738946][ C0] aiptek_irq+0x20ab/0x2a00 [ 41.739014][ C0] ? _raw_spin_unlock+0x45/0x60 [ 41.739075][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 41.739153][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 41.739240][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 41.739324][ C0] dummy_timer+0xa3f/0x4900 [ 41.739443][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 41.739565][ C0] ? timerqueue_del+0xd7/0x130 [ 41.739656][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 41.739722][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 41.739805][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 41.739887][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 41.739954][ C0] ? read_tsc+0xd/0x20 [ 41.740041][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 41.740138][ C0] hrtimer_run_softirq+0x159/0x560 [ 41.740215][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 41.740312][ C0] handle_softirqs+0x1aa/0x5b0 [ 41.740386][ C0] __irq_exit_rcu+0x47/0xb0 [ 41.740448][ C0] irq_exit_rcu+0xd/0x30 [ 41.740512][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 41.740587][ C0] [ 41.740608][ C0] [ 41.740629][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 41.740713][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 41.740803][ C0] Code: cc cc cc cc cc cc cc b8 dc 3d 11 71 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 09 3f 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 41.740862][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 41.740946][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a8553d [ 41.741002][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000002f47c [ 41.741045][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 41.741083][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 41.741132][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da328 [ 41.741173][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 41.741257][ C0] default_idle+0x17/0x30 [ 41.741339][ C0] arch_cpu_idle+0xd/0x20 [ 41.741424][ C0] default_idle_call+0x3e/0x80 [ 41.741507][ C0] do_idle+0x2fc/0x570 [ 41.741576][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 41.741657][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 41.741724][ C0] ? radix_tree_lookup+0x250/0x2a0 [ 41.741788][ C0] cpu_startup_entry+0x47/0x60 [ 41.741861][ C0] rest_init+0x10b/0x130 [ 41.741947][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 41.742042][ C0] start_kernel+0x462/0x4bb [ 41.742109][ C0] x86_64_start_reservations+0x2e/0x30 [ 41.742194][ C0] x86_64_start_kernel+0x6a/0x7b [ 41.742295][ C0] common_startup_64+0x13b/0x157 [ 41.742414][ C0] [ 41.742429][ C0] [ 41.743910][ T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 41.748204][ C0] The buggy address belongs to the variable: [ 41.748214][ C0] .str.586+0x10/0x20 [ 41.753219][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.758193][ C0] [ 41.758200][ C0] The buggy address belongs to the physical page: [ 41.758226][ C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6733 [ 41.772299][ T45] usb 4-1: config 0 descriptor?? [ 41.773361][ C0] flags: 0x4000(reserved|zone=0) [ 42.452413][ C0] raw: 0000000000004000 ffffea000019ccc8 ffffea000019ccc8 0000000000000000 [ 42.461021][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 42.469636][ C0] page dumped because: kasan: bad access detected [ 42.476109][ C0] page_owner info is not present (never set?) [ 42.482198][ C0] [ 42.484536][ C0] Memory state around the buggy address: [ 42.490206][ C0] ffffffff86733300: 00 07 f9 f9 00 00 06 f9 f9 f9 f9 f9 00 00 06 f9 [ 42.498391][ C0] ffffffff86733380: f9 f9 f9 f9 00 00 05 f9 f9 f9 f9 f9 07 f9 f9 f9 [ 42.506481][ C0] >ffffffff86733400: 07 f9 f9 f9 00 00 f9 f9 00 00 00 02 f9 f9 f9 f9 [ 42.514560][ C0] ^ [ 42.519175][ C0] ffffffff86733480: 00 00 03 f9 f9 f9 f9 f9 00 00 01 f9 f9 f9 f9 f9 [ 42.527257][ C0] ffffffff86733500: 00 00 04 f9 f9 f9 f9 f9 00 07 f9 f9 00 00 06 f9 [ 42.535370][ C0] ================================================================== [ 42.543448][ C0] Disabling lock debugging due to kernel taint [ 42.549626][ C0] ------------[ cut here ]------------ [ 42.555103][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 42.563704][ C0] index 42397 is out of range for type 'const int[34]' [ 42.570581][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G B syzkaller #0 1451a78ca494a59835143b4712acff56c1d3762d [ 42.570618][ C0] Tainted: [B]=BAD_PAGE [ 42.570632][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 42.570643][ C0] Call Trace: [ 42.570649][ C0] [ 42.570656][ C0] __dump_stack+0x21/0x30 [ 42.570706][ C0] dump_stack_lvl+0x140/0x1c0 [ 42.570741][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.570779][ C0] ? input_event_dispose+0x2f5/0x6d0 [ 42.570805][ C0] dump_stack+0x19/0x20 [ 42.570845][ C0] ubsan_epilogue+0xe/0x40 [ 42.570870][ C0] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 42.570900][ C0] aiptek_irq+0x1f3c/0x2a00 [ 42.570932][ C0] ? kcov_remote_start+0x1d2/0x3c0 [ 42.570956][ C0] __usb_hcd_giveback_urb+0x36e/0x530 [ 42.570996][ C0] usb_hcd_giveback_urb+0x12b/0x400 [ 42.571029][ C0] dummy_timer+0xa3f/0x4900 [ 42.571077][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 42.571102][ C0] ? timerqueue_del+0xd7/0x130 [ 42.571126][ C0] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 42.571168][ C0] ? __cfi_dummy_timer+0x10/0x10 [ 42.571200][ C0] __hrtimer_run_queues+0x3ab/0x8e0 [ 42.571233][ C0] ? hrtimer_interrupt+0xf30/0xf30 [ 42.571251][ C0] ? read_tsc+0xd/0x20 [ 42.571275][ C0] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 42.571328][ C0] hrtimer_run_softirq+0x159/0x560 [ 42.571356][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 42.571392][ C0] handle_softirqs+0x1aa/0x5b0 [ 42.571411][ C0] __irq_exit_rcu+0x47/0xb0 [ 42.571443][ C0] irq_exit_rcu+0xd/0x30 [ 42.571469][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 42.571498][ C0] [ 42.571505][ C0] [ 42.571515][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 42.571542][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 42.571594][ C0] Code: cc cc cc cc cc cc cc b8 dc 3d 11 71 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 09 3f 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 42.571615][ C0] RSP: 0018:ffffffff87c07da0 EFLAGS: 000002c2 [ 42.571636][ C0] RAX: ffff8881f6c00000 RBX: ffffffff87c156c0 RCX: ffffffff85a8553d [ 42.571655][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000002f47c [ 42.571675][ C0] RBP: ffffffff87c07da0 R08: ffff8881f6c396fb R09: 1ffff1103ed872df [ 42.571688][ C0] R10: dffffc0000000000 R11: ffffed103ed872e0 R12: 0000000000000000 [ 42.571699][ C0] R13: 1ffffffff0f82ad8 R14: dffffc0000000000 R15: ffffffff886da328 [ 42.571713][ C0] ? ct_kernel_exit+0x7d/0xb0 [ 42.571755][ C0] default_idle+0x17/0x30 [ 42.571787][ C0] arch_cpu_idle+0xd/0x20 [ 42.571823][ C0] default_idle_call+0x3e/0x80 [ 42.571847][ C0] do_idle+0x2fc/0x570 [ 42.571866][ C0] ? idle_inject_timer_fn+0x80/0x80 [ 42.571904][ C0] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 42.571933][ C0] ? radix_tree_lookup+0x250/0x2a0 [ 42.571957][ C0] cpu_startup_entry+0x47/0x60 [ 42.571986][ C0] rest_init+0x10b/0x130 [ 42.572010][ C0] ? __cfi_x86_late_time_init+0x10/0x10 [ 42.572050][ C0] start_kernel+0x462/0x4bb [ 42.572079][ C0] x86_64_start_reservations+0x2e/0x30 [ 42.572110][ C0] x86_64_start_kernel+0x6a/0x7b [ 42.572140][ C0] common_startup_64+0x13b/0x157 [ 42.572167][ C0] [ 42.572173][ C0] ---[ end trace ]--- [ 42.921762][ T31] usb 2-1: USB disconnect, device number 5 [ 42.921810][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 43.114942][ T518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.123659][ T518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.135904][ T45] magicmouse 0003:05AC:0324.0004: ignoring exceeding usage max [ 43.151147][ T45] input: HID 05ac:0324 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0324.0004/input/input12 [ 43.165743][ T45] magicmouse 0003:05AC:0324.0004: input,hidraw0: USB HID v0.10 Joystick [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 43.306975][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 43.339292][ T45] usb 4-1: USB disconnect, device number 8 [ 43.458674][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 43.468850][ T31] usb 2-1: New USB device found, idVendor=0499, idProduct=1009, bcdDevice= 0.40 [ 43.477987][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.485997][ T31] usb 2-1: Product: syz [ 43.490220][ T31] usb 2-1: Manufacturer: syz [ 43.494841][ T31] usb 2-1: SerialNumber: syz [ 43.781924][ T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 43.793247][ T31] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 43.804754][ T31] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 43.814558][ T31] usb 2-1: USB disconnect, device number 6 [ 43.828096][ T328] udevd[328]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory