last executing test programs: 26m16.045842769s ago: executing program 1 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_pts(r8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) epoll_create1(0x0) 26m14.892114847s ago: executing program 1 (id=784): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18002aff0fab0ecd4018ba88c73681a30200000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = mq_open(&(0x7f0000000040)='contention_end\x00', 0x40, 0x16, &(0x7f0000000100)={0x4, 0x5, 0xce9, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) mq_timedsend(r4, &(0x7f00000001c0)="e6e7cf975c75840dfdf54213cd94deafe0f55b30b8d8ecff97b9becf72eb3bf718240b10d9d514d8e26c6bd3bd23", 0x2e, 0x0, &(0x7f0000000300)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140)=0x1, 0x4) 26m14.487655924s ago: executing program 1 (id=788): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 26m11.064061027s ago: executing program 1 (id=794): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18002aff0fab0ecd4018ba88c73681a30200000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = mq_open(&(0x7f0000000040)='contention_end\x00', 0x40, 0x16, &(0x7f0000000100)={0x4, 0x5, 0xce9, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) mq_timedsend(r4, &(0x7f00000001c0)="e6e7cf975c75840dfdf54213cd94deafe0f55b30b8d8ecff97b9becf72eb3bf718240b10d9d514d8e26c6bd3bd23", 0x2e, 0x0, &(0x7f0000000300)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140)=0x1, 0x4) 26m10.945131455s ago: executing program 1 (id=796): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18002aff0fab0ecd4018ba88"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = mq_open(&(0x7f0000000040)='contention_end\x00', 0x40, 0x16, &(0x7f0000000100)={0x4, 0x5, 0xce9, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) mq_timedsend(r4, &(0x7f00000001c0)="e6e7cf975c75840dfdf54213cd94deafe0f55b30b8d8ecff97b9becf72eb3bf718240b10d9d514d8e26c6bd3bd23", 0x2e, 0x0, &(0x7f0000000300)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140)=0x1, 0x4) 26m10.452177347s ago: executing program 1 (id=798): r0 = socket(0x10, 0x803, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x280, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c774802000000a41849f3673f9376bdd950550a39f6421788d905a275aa4cb54161d3ac8681137d06b0ad4f96", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x28000) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000680)={0x9, 0x3, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0xdb, 0x1ff, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x0, 0x112, 0x7}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000210001002abd7000000000000a000000000000000000000008000a00262d0c6ab7bfeddb95485f2fc5e46706000000d5e25ae80e457f2320bcf4720d69a0f59f06c17f7c6c3edd2886406a846b7094b8804c75ee9f6d1bdc7ef26f246bb4cd4a3fa6558272636eea6b63540d109eb43810b57ef3fa11edc68a62a154fa83da79bb81cbc69dbc76934d6c1e5d54282d89ebeb156a297c8a82f8014536064b8ddd4cc4698d9835fb08bba049a3e06abe27778f84"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc8) 25m54.712094478s ago: executing program 32 (id=798): r0 = socket(0x10, 0x803, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x280, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c774802000000a41849f3673f9376bdd950550a39f6421788d905a275aa4cb54161d3ac8681137d06b0ad4f96", @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x28000) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000680)={0x9, 0x3, 0x100}) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0xdb, 0x1ff, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000001c0)={0x0, 0x112, 0x7}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000210001002abd7000000000000a000000000000000000000008000a00262d0c6ab7bfeddb95485f2fc5e46706000000d5e25ae80e457f2320bcf4720d69a0f59f06c17f7c6c3edd2886406a846b7094b8804c75ee9f6d1bdc7ef26f246bb4cd4a3fa6558272636eea6b63540d109eb43810b57ef3fa11edc68a62a154fa83da79bb81cbc69dbc76934d6c1e5d54282d89ebeb156a297c8a82f8014536064b8ddd4cc4698d9835fb08bba049a3e06abe27778f84"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc8) 15m11.477695235s ago: executing program 4 (id=2363): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18002aff0fab0ecd4018ba88c73681a30200000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = mq_open(&(0x7f0000000040)='contention_end\x00', 0x40, 0x16, &(0x7f0000000100)={0x4, 0x5, 0xce9, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) mq_timedsend(r4, &(0x7f00000001c0)="e6e7cf975c75840dfdf54213cd94deafe0f55b30b8d8ecff97b9becf72eb3bf718240b10d9d514d8e26c6bd3bd23", 0x2e, 0x0, &(0x7f0000000300)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140)=0x1, 0x4) 15m11.410369326s ago: executing program 4 (id=2365): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000000)=@ethtool_channels={0x0, 0xfffff000, 0x7, 0x1, 0x9, 0x8, 0xfffffffc, 0x2, 0x200}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) pipe2$watch_queue(&(0x7f0000000300), 0x80) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000000)) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 15m1.016910792s ago: executing program 4 (id=2381): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @mcast1}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18002aff0fab0ecd4018ba88c73681a30200000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = mq_open(&(0x7f0000000040)='contention_end\x00', 0x40, 0x16, &(0x7f0000000100)={0x4, 0x5, 0xce9, 0x1}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000240)={0x18, r6, 0x1, 0x0, &(0x7f0000000080)=[{0x3cc5, 0x5e97}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r6, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2}) mq_timedsend(r4, &(0x7f00000001c0)="e6e7cf975c75840dfdf54213cd94deafe0f55b30b8d8ecff97b9becf72eb3bf718240b10d9d514d8e26c6bd3bd23", 0x2e, 0x0, &(0x7f0000000300)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x800000, 0x10008, 0x7}) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000140)=0x1, 0x4) 15m0.182934136s ago: executing program 4 (id=2385): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 14m59.21903735s ago: executing program 4 (id=2389): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x21, @none}, 0xfffffe2a) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x21) mkdir(&(0x7f0000000340)='./file0\x00', 0xd1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)) r2 = open(0x0, 0x12b842, 0x408) sendfile(r2, 0xffffffffffffffff, 0x0, 0x80000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000bd3000/0x2000)=nil, 0x2000, 0x0, 0x4008032, r0, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r5}, 0x10) sendmmsg$sock(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)="bc7090b0310a6f6f761aa81e5ad39519e99558090889d34c56a1a4697fdf9769453611c44424df48bebc84da5ce928209111bfad89c046cfc87e2bb8c857cd5f0428fc6ca679ab48964917bce64c9149b0c11f1f31e15cf4216ab098c148bce92894f29e718cade1308a0885024a9c75c1b8be9a8bfda3de29cefda0c6f5e4539c7f018d5cb08703eea8ad8d90d0b69c28042e9036b628f723cfa2b10489d762a2", 0xa1}], 0x1}}], 0x1, 0x24004090) 14m55.638276489s ago: executing program 4 (id=2397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000000)=@ethtool_channels={0x0, 0xfffff000, 0x7, 0x1, 0x9, 0x8, 0xfffffffc, 0x2, 0x200}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_emit_ethernet(0x5a, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 14m40.194668457s ago: executing program 33 (id=2397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'nr0\x00', &(0x7f0000000000)=@ethtool_channels={0x0, 0xfffff000, 0x7, 0x1, 0x9, 0x8, 0xfffffffc, 0x2, 0x200}}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) syz_emit_ethernet(0x5a, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r5, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000000)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) 9m34.293729526s ago: executing program 3 (id=3134): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002780)=@userptr={0x9, 0x2, 0x4, 0x400, 0xffffff00, {0x77359400}, {0x1, 0xb, 0xff, 0x5, 0xf5, 0x46, "688b7f16"}, 0x8, 0x2, {0x0}, 0x5}) write$binfmt_script(r6, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r6, &(0x7f0000000100), 0x100000000010001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f93224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) 9m33.38285223s ago: executing program 3 (id=3136): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1, 0x0, 0x0, @void, @value}, 0x20) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x1000000], [0x9]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) 9m33.152503622s ago: executing program 3 (id=3137): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) fadvise64(r0, 0xf5, 0x0, 0x4) 9m31.041710819s ago: executing program 3 (id=3143): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30}, 0x30) getdents(r0, &(0x7f0000001080)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008700"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f0000003ac0)={0x0, [[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x7b7f, 0x0, 0x0, 0x0, 0x0, 0x1], [0x1]], '\x00', [{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1ff}, {0x0, 0x1000}, {}, {}, {0x0, 0x1}, {}, {0x1}], '\x00', 0x3b}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x4, 0x1}, 0x25) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000200)={0x1fe}, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 9m28.17578646s ago: executing program 3 (id=3147): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"b645563c45bcc7e181fad43c40fc603ebaf6ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 9m24.707457431s ago: executing program 3 (id=3155): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 9m9.075263167s ago: executing program 34 (id=3155): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 8m31.092199227s ago: executing program 2 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x7a, 0xb, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0x3}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4004, r6}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r8, 0x2000) r9 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r9, &(0x7f0000002280)=""/4150, 0x1036) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) inotify_init1(0x0) 8m29.953756718s ago: executing program 2 (id=3252): syz_open_dev$vbi(0x0, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) munmap(&(0x7f0000647000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000180), 0x14) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, r3, 0x0) 8m28.042378634s ago: executing program 2 (id=3258): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x50) r4 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x80003, 0x0, [0xfffffffc, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000080)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x18603}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) 8m27.088000569s ago: executing program 2 (id=3261): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f3ffff07000000b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8m22.777745984s ago: executing program 2 (id=3265): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none, 0xdfff}, 0xe) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000fff000/0x1000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_enter(r1, 0x60, 0x776, 0x14, &(0x7f0000000240)={[0xe4]}, 0x8) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0xffff1000, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0xdddd1000, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x2f, 0x0, 0x4}, {0xffff1000, 0x0, 0x4}, {0x0, 0x0, 0xc}, {0x0, 0x2}, {}, 0xddfdffdb, 0x0, 0x0, 0x142131, 0x200006}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000040)={0x5000}) r4 = syz_open_procfs(0x0, &(0x7f0000001880)='numa_maps\x00') pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0x0) 8m20.609415617s ago: executing program 2 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x9, 0x0) r2 = memfd_secret(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x801, @local, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0xfdef, 0x0, 0x0, 0xfffffffffffffdfd) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x20000, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x400000000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ftruncate(r2, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000202070250000009657174d4106678d00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x21800, r6}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 8m5.392999786s ago: executing program 35 (id=3271): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x9, 0x0) r2 = memfd_secret(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x801, @local, 0x6}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0xfdef, 0x0, 0x0, 0xfffffffffffffdfd) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x20000, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x400000000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ftruncate(r2, 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000202070250000009657174d4106678d00002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x21800, r6}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 4m43.96773398s ago: executing program 6 (id=4006): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000540)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 4m43.073600299s ago: executing program 6 (id=4009): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x78) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 4m42.653615549s ago: executing program 6 (id=4012): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f3ffff07000000b70300000000008385000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) 4m39.597095724s ago: executing program 6 (id=4019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x7a, 0xb, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0x3}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4004, r7}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r9, 0x2000) r10 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r10, &(0x7f0000002280)=""/4150, 0x1036) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) inotify_init1(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 4m38.064545876s ago: executing program 6 (id=4023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000cc0)={0x1}) syz_genetlink_get_family_id$ethtool(0x0, r4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x1, &(0x7f0000000040)={0x0, 0x22}, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f00000000c0)) 4m36.53695004s ago: executing program 6 (id=4029): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 4m21.217744551s ago: executing program 36 (id=4029): getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x1000, 0x2}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 11.232645098s ago: executing program 8 (id=4762): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f3ffff07000000b7030000000000838500000071000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.229902434s ago: executing program 0 (id=4768): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.229487689s ago: executing program 9 (id=4769): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002780)=@userptr={0x9, 0x2, 0x4, 0x400, 0xffffff00, {0x77359400}, {0x1, 0xb, 0xff, 0x5, 0xf5, 0x46, "688b7f16"}, 0x8, 0x2, {0x0}, 0x5}) write$binfmt_script(r6, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r6, 0x0, 0x100000000010001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f93224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) 8.223559542s ago: executing program 0 (id=4770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x7a, 0xb, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0x3}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4004, r6}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r8, 0x2000) r9 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r9, &(0x7f0000002280)=""/4150, 0x1036) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x4) inotify_init1(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 8.026835309s ago: executing program 5 (id=4771): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7f3ffff07000000b7030000000000838500000071000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 7.850891729s ago: executing program 8 (id=4772): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x80044704, 0x20000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051802000008009000100b168fa316700000005000200020000000800030001ac0f00"], 0x58}}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000d4a30000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) fsetxattr$security_evm(r6, &(0x7f0000000140), &(0x7f0000000180)=@ng={0x4, 0xe, "b31f6d4afefc417bd34417a442875d67"}, 0x12, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = io_uring_setup(0x45dd, &(0x7f00000006c0)={0x0, 0x6, 0x40, 0x2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1000000000000052) 6.749029193s ago: executing program 9 (id=4774): syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000000, 0x0) poll(&(0x7f0000000000), 0xbed4794dbfa14a01, 0x7) syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000000, 0x0) (async) poll(&(0x7f0000000000), 0xbed4794dbfa14a01, 0x7) (async) 6.748469031s ago: executing program 0 (id=4775): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x500, &(0x7f00000002c0)={&(0x7f0000000bc0)={0xb0, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a, {0x800, 0x1, 0x2, 0x0, {0x1, 0x6, 0x0, 0x10, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x7f, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf0, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x24000010) r7 = dup3(r0, r1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 6.516736033s ago: executing program 8 (id=4776): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc246567c44de23b7fcb6738e038408387a52a10db27ad534605be8400ddedbd476d2e806725d48b8092cd0928c3dab", 0x3e}, {&(0x7f00000002c0)="83553afb74b35cdbb028b74ca927099904a1cd34961b07c394a05e290a1ef05563649e771ec633170acd70cdb9cf6c02f437ed00c6f7ae9e71407eff470b5e", 0x3f}], 0x2}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000180)=""/28, 0x1c}], 0x2}}], 0x1, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x2) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) waitid(0x0, r2, 0x0, 0x40000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',\x00', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) 6.503610045s ago: executing program 9 (id=4786): r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e670000000000000000000000001b00000000000000000400000000001804000000000000000000000c00000600000000000000000000000000000000000000000000000000000000000000000000002f00000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f0000000000000000000000938d5e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff0000000000008bdbd70d1c0496799ec47505726541060000000000000000000000000000000000000000000000000000000000000000000000ffef000000000000000000000000000000000000000000000000000200000000000000000000000000000002000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed2c14bc1d077b4817d693d02c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb00000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff8000000000000000000a37155e4844ccee500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c81e00000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000ea00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d1000000000000000000000000000000000000000000000000000000000000000000726564697265637400"/2376]}, 0x9c0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FICLONE(r5, 0x40049409, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7}, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1e000000890000000900"/20, @ANYRES32=0x1, @ANYRES8=0x0, @ANYRESDEC=r4, @ANYRES32=r7, @ANYBLOB="0200000004000000040000000b000000008000"/28], 0x50) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 5.548408629s ago: executing program 0 (id=4777): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x38, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmmsg$unix(r6, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0xf9, 0x3, 0x0, @mcast1, @private0, 0x1, 0x10, 0x6}}) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0085400c8600fedbdf25050000000500350000000800080039003e67188208000600", @ANYRES32=r7, @ANYBLOB="0500300000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000014) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 5.48152431s ago: executing program 9 (id=4779): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x56) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001300290a00"], 0x38}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xfeff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) getsockopt$sock_buf(r2, 0x1, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x97, 0x0, 0x7}) 4.800190298s ago: executing program 5 (id=4780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.731469551s ago: executing program 5 (id=4781): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000f024e3e600000000001000001d013000f0ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000c0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000187fb6341770443eb89d61d598a7000000010000000000000000950000000000"], &(0x7f0000000500)='GPL\x00', 0x2, 0xbd, &(0x7f0000000580)=""/189, 0x41100, 0x50, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0xe, 0x8001, 0x10000000}, 0x10, 0x9780, 0xffffffffffffffff, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x333, @void, @value}, 0x94) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0), 0x12) bind$x25(r4, &(0x7f0000000100), 0x12) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_ifreq(r6, 0x8942, 0x0) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000300)={0x7, 0x7, 0x80, 0xff, 0x2, 0x7, 0x4, "2f0d42f24aa3e5f41f000e2de37fbb97cf7b6725", "9ef9b4c723effc420000000000000000cf0b00"}) syz_usbip_server_init(0x1) syz_open_dev$usbfs(&(0x7f0000000000), 0x8001, 0x6f0000) dup3(r4, r2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) sendfile(r1, 0xffffffffffffffff, 0x0, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="16010200925f5510ac05261289b2010203010902"], 0x0) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) fsetxattr$security_capability(r7, &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x9f62, 0x21b}]}, 0xc, 0x50647f21226305a6) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='stack\x00') r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x5, r8, &(0x7f0000000080), 0x0) 4.497221565s ago: executing program 7 (id=4782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6982de7d824ef1eb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x00\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x6000001c}) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x5c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002a00090000000000000014000400002c450011"], 0x5c}, 0x1, 0x3000000}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 3.368040565s ago: executing program 8 (id=4783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x41, 0x3, 0x2b8, 0x0, 0x19, 0x7a, 0xb, 0x0, 0x220, 0x1f0, 0x1f0, 0x220, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xe0, 0x140, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@limit={{0x48}, {0x0, 0x1}}, @common=@inet=@socket1={{0x28}, 0x3}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x318) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4004, r6}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r8, 0x2000) read$char_usb(0xffffffffffffffff, &(0x7f0000002280)=""/4150, 0x1036) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) inotify_init1(0x0) 3.367405392s ago: executing program 7 (id=4784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r6, &(0x7f00000000c0)='!', 0xb7f40, 0x0, 0x3f00}]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r6, r4, 0x0) 2.290452032s ago: executing program 7 (id=4785): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000070010e102000000bbb383170efd0f60c239336795dcc856b4f685499ea56fac1a5dc9a04d29d6a80eae2576f59cc729d9db75e98002477e10008e4d6e80a97a370f8be10f01df555036f984290a216baba9f8980c196857379961782fab85993c4fea91f3e6fd38d4e63cf55d525e3d0f8ac7191583bd8fccf6616f5287518d610745fc70e74f0e78393fbaa857300a5a2aff090280b140bdbcdd619c1b2cbdb2f818d854f8a3d00ddec7c86271dfccab48d60a9935b6cef1d1c0661d964c980202d2a7d5f02dfa009f4b590256e276975a2b75a75ab4af809398cf29b28babdbb60e1f5e34f905960b2ea99095c6e69d607050e226d26bcce22ec39a971c0f6473abcca4f75eaaa9c36f76f99a70928613f33da25b0a4f8e1b2f7baa7d4e5a6a", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000002c0)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r5, 0xae7e, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000002780)=@userptr={0x9, 0x2, 0x4, 0x400, 0xffffff00, {0x77359400}, {0x1, 0xb, 0xff, 0x5, 0xf5, 0x46, "688b7f16"}, 0x8, 0x2, {0x0}, 0x5}) write$binfmt_script(r6, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r1, r6, 0x0, 0x100000000010001) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f93224fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r9, 0x0) 2.057882231s ago: executing program 9 (id=4787): socket(0x2a, 0x2, 0x4) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000100)) 1.976140373s ago: executing program 0 (id=4788): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000140)={{0x8, 0x9}, 'port1\x00', 0x4, 0x20020, 0x6, 0x20000003, 0x64, 0x0, 0x80, 0x0, 0x4, 0x66}) tkill(r0, 0x7) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x28b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff) keyctl$revoke(0x3, r7) add_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="c2", 0x1, 0xffffffffffffffff) write$tun(r5, 0x0, 0xffe) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$KDFONTOP_SET(r4, 0x4b72, 0x0) syz_open_procfs(0x0, 0x0) 1.895829046s ago: executing program 9 (id=4789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x2, 0x0, 0x20000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0)=0x3f, 0x4) r4 = io_uring_setup(0x6879, &(0x7f00000003c0)={0x0, 0x5264, 0x400, 0x1, 0xd1}) r5 = syz_io_uring_setup(0xd79, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r5, 0x291c, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f0000000080), 0x72a, 0x500, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.358844443s ago: executing program 7 (id=4790): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @none, 0xdfff}, 0xe) r2 = dup(r0) mount$9p_fd(0x20100000, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 1.26986402s ago: executing program 5 (id=4791): r0 = fanotify_init(0x0, 0x0) fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x27, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0x7, 0x3, 0x8, 0x100, 0x8}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb867}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0xe, 0x6, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x6, 0xfffffffffffffffb, &(0x7f00000002c0)=""/36, 0x41000, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x1f74a, 0xffffffffffffffff, 0x2, 0xfffffffffffffffc, &(0x7f00000004c0)=[{0x1, 0x1, 0x9, 0x2}, {0x4, 0x2, 0x8, 0x9}], 0x10, 0x1, @void, @value}, 0x94) open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r6, 0xc0385720, &(0x7f00000000c0)={0x1}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f00000000c0), 0x12) bind$x25(r7, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_ifreq(r7, 0x8911, 0x0) ioctl$sock_ifreq(r8, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 1.213023689s ago: executing program 8 (id=4792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.051028702s ago: executing program 7 (id=4793): iopl(0x3) iopl(0x5) setgroups(0x24, 0xffffffffffffffff) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) 973.642436ms ago: executing program 8 (id=4794): syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0xe8202) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000020a000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x1c, r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file2\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r6 = socket$inet6(0xa, 0x6, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) close_range(r6, 0xffffffffffffffff, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r5, &(0x7f0000000280)='./file1\x00', 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x14927e, 0x0) 968.50362ms ago: executing program 5 (id=4795): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x2000000000000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6982de7d824ef1eb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00') chdir(&(0x7f0000000140)='./bus\x00') syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x00\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x8, 0x9, 0x0, 0x1, [@typed={0x4}]}]}, 0x34}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0xb8e]}}, 0x5c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0x6000001c}) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x5c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000002a00090000000000000014000400002c450011"], 0x5c}, 0x1, 0x3000000}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000180)="a3", 0xfffff, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 870.016617ms ago: executing program 7 (id=4796): syz_usb_connect(0x0, 0x91a, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x96, 0x6f, 0x7d, 0x8, 0x1a8d, 0x1005, 0x1c87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x908, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7e, 0x0, 0x10, 0xff, 0x50, 0x9b, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x4a, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x40}, @generic={0x24, 0x4, "5aa0f5cc85c693a274c34e86978224aded14fd6ad1e6e89767b5ca27068df1083be1"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x8, 0x8, 0x0, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x800}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x7, 0x6, 0x5}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x0, 0x92, 0x4, [@generic={0x12, 0x5, "112ce7669781fad36d2406168cdfb11f"}, @generic={0xae, 0x31, "f0e881ca61e553aed50ca8a4090791e461ef469ed2c510fcf821f0883551324b338f7e69eac56dbe624171ba28975f34d642eb089e392c5fea9233f69f40a499f7a4c1b7a3f13f36404d769cfcccc68eac72e3c91aeee49294185118e5a71ba1e24607cf80de476d17a35242dc8b5f0d4e74292fac8c01099b14fb216c8ef116ee20f4e8c7b8e4c252d57352ca1c873da15ec92409d4f9549a536f1da2d9c08167c4607fec659c2b2f610819"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x4, 0x8, [@generic={0xcc, 0x22, "344925bb5c5d3ec0a66a50460511dda1fd388de1003e801aed567fd2fbf6cff6a48259a98e5eac740b42d099c25f734890c4e262f90f3d8e9fed913a3c4cff82a670ec1699d76cbe16d7a73134f70b39e6335dee2c3d3f6f00c16f75efbf99ef06b8db8b950c033451e85ef1d98507ea7cdb3ffe52f07d077beae85ffd876a34f1889c4f31a889038feb6a9619a85152f291796b3a56534a8a65ed157fc9ab5543a6c1b5f6ce20250cc21a606bdd7a5f103b48b9136cbf4cef8f7a542500736f66b08e333ae889da387c"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x21, 0x0, 0x3d, [@generic={0x82, 0xc, "1be75c13d97d3de120631a426f48c3d58d781001618079662972c91f3bbb754d8f6ce5532339ffeb1b7e34acec07b9e7a0d90083a0fc1b447f0b81f3f5f02414950490c51e1217a56dd723ffe8cc0e42c02fd4f5c2311cb8292ea8280bf0110400d9b133163c6c61719b207880012b05ab850e75217f562d1692db0b016913aa"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}]}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0x7, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x81}, @generic={0x8d, 0xa, "784e790c881b9fb313ffa833f5f18c7a196ebd2c61977dfd6059cef242133d1aacd1d976d52b6439325a00048588c3d5e5ba0e5d648398356d713fc0ae0fdf7f1cf0f828d59fa96f117a096263318b8e713b63d7d4d34482b1af6a7e05df7f2288c17fa79357a1c5dcff9c704c86a54c3c0430e5a915b3af06fcbeb224bd86d926ba6016eb3610eec85ed4"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x5, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x9b8}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xf7, 0x2, 0x0, [@generic={0xf1, 0x4, "c9fc4dce9ff805b4631b6f5d37950acdf1bbfee1da1081edfd44647a222387e361ae7794f250913cb04fd9db7ff41c658404d6d5b3ea708edac50949955dc88099e758408080a8dff40ff6d2a5adcf98001b793bdfe2a970b62b522d6e5cce0e96451d28480f1020a0ad434bec0bc30a50265e58046d10a4310eb4a131a8bd67e6459226256e5ae3997d54b24425f243f61770a15223179f52819ee417d86d353993de53cd5774090bce1c20de1cd75d3600cdacac5c85b7928f1ffbb6be3d90be4d323713358b9356160932a5221ff285a5dd8c5ccf58548de275be73ab8c46753777d390b95fd04bb07f50b50127"}, @generic={0x78, 0xa, "2c3a9cac23603e93d27a13ac61d0bb93b904c2c74bac9dce3750eb7ca3fbb68ae1bf65848207a4ddd5c77d943eff62f5d1366148cef77fdc22f02e080b7193f436b43420d5e5ee4b5a26fa4394870ccf48814377e272afb84fdfa8ed603f7c0938ba4543578b8b3f99be5ced9e41f1a1ee8240d06d38"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xf, 0x5, 0x35, [@generic={0xb8, 0x31, "8b5ea1b4e39d02dc75190bac51547bf439879189de1330adc396f45e2e61687dfd3d68ee126e324eab6c8d12c10dd4a1f12f0e35221094ff7ad847fe1065e189d9d9118b30c66390d8f25f24226a4ff23f0bd554133f0632454cd146a78b23ade47f82bea5a7b90eae0236c63c72543a79c0f69990c006dbf40ba8bdcab33bc66e2f65bdba7e804a929e9fd319c103ccf0ce50776659c49a0bbd54f5398368e1c7acaebc8478d38ac613c928f839496122f4a586f2c7"}, @generic={0x2f, 0x19, "0ea0ea692b9b8a814c2d768d5945316c5429a27aec95593155bc3ec7afc3df9f33e7bbf391c04b36cafe37c189"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x200, 0xa3, 0x2b, 0x2, [@generic={0xd6, 0x22, "8a44b20cc7ca905ad7e2f847b431409f0991a48ba34c8ab18d0d5d099c55b91f596e77dd382066d90e01d43f43d6b2c5a738402d43a38b06f733bcab088478a7b5ca36563c930ba11557ab28d6b1231e0ab2820bda85dff00458888d8dc2c7972a86606cc70a1f0197ff778828b0bbbc9a329c660afdeb4ffcfac3bbd3c3b1266cb2912479f64d5f9b4822dd5adb1837459704ca2cb056f99b277dfa6d03c9898ced030936ff9e1ce46820e0229feaf19c22d9b05c767c39491ed99dd3d6ec9606f9d3db6cc8d17243e326f0d2d8acaa1fc96b20"}, @generic={0xfd, 0x3, "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"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x1, 0x80, 0x5, [@generic={0x22, 0x22, "b399dd069c45bd190f0d07bdf9e0c29db2d7108a7c205f42d90cf1542048b4c1"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x4, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x1}]}}, {{0x9, 0x5, 0xc, 0x8, 0x8, 0x0, 0x3, 0x7, [@generic={0xca, 0x24, "78598ab4fcf7f490ea8b76e4f0b6de6ae27b95d142e075ba1104e478704b82576ed60f755058f27df8e5b98f78fbdd09544f2112479b6afee5169974e6407f180f0621b9313540629302ab73e56abe3bfeec2f7b4b9a8cd116546329615ce5151299abe9a14ee739e62b6aaf57cd7b8c30c6ca46e3ebcf300a6371b56862ceb84f6c3deb55fa1166ea67d3ce1d585d926aca45ccdb13ca1894bedb27209e8a792875f519908b4750dcd27d95739f6e178350fccc0baa7e343847398699cf28a1e8fcadaa1e29e5a8"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x0, 0xb, 0xe}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x40, 0x9, [@generic={0x67, 0x22, "48a14108b253247b4865ea82baf091591d50977d4b480c0fdc9353365899d3b26f5816e085029ad9e99ecaccd7cccad0e093a5c5a0d47b4627331820b78efc34126dcfdb9da733f5ddc2f3960ea917f6abbd764beefce511937bf7434678d5271310476c1f"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xe, 0x3}]}}]}}]}}]}}, 0x0) 738.437371ms ago: executing program 0 (id=4797): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000300)) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x56) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x101003, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000001300290a00"], 0x38}}, 0x0) statx(0xffffffffffffffff, 0x0, 0x1000, 0xfeff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) getsockopt$sock_buf(r2, 0x1, 0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0x97, 0x0, 0x7}) 0s ago: executing program 5 (id=4798): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x2, 0x0, 0x20000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0)=0x3f, 0x4) r3 = syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000100)=0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000300)=@in={0x2, 0x0, @local}}) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f0000000080), 0x72a, 0x500, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input285 [ 1478.216564][T19204] usb 9-1: USB disconnect, device number 3 [ 1478.813126][T20598] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 1479.201382][T20617] netlink: 'syz.7.3710': attribute type 8 has an invalid length. [ 1481.175293][T20661] __nla_validate_parse: 3 callbacks suppressed [ 1481.175331][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3719'. [ 1481.559912][T20667] ubi0: attaching mtd0 [ 1481.582465][T20667] ubi0: scanning is finished [ 1481.613131][T20667] ubi0: empty MTD device detected [ 1481.733771][T20664] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3722'. [ 1482.434315][T20667] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1483.391784][T20707] ubi0: attaching mtd0 [ 1483.405750][T20707] ubi0: scanning is finished [ 1483.875578][ T30] audit: type=1400 audit(1730775565.216:2467): avc: denied { module_load } for pid=20678 comm="syz.6.3725" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=59968 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 1484.007316][T20694] Invalid ELF header magic: != ELF [ 1484.014914][T20707] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1484.254853][ T30] audit: type=1400 audit(1730775565.596:2468): avc: denied { setopt } for pid=20723 comm="syz.5.3736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1485.003816][T19220] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1485.183907][T19220] usb 6-1: Using ep0 maxpacket: 32 [ 1485.384547][T19220] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1485.501497][T19220] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1485.512070][T19220] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1485.527411][T19220] usb 6-1: Product: syz [ 1485.531614][T19220] usb 6-1: Manufacturer: syz [ 1485.539606][T19220] usb 6-1: SerialNumber: syz [ 1485.571802][T19220] usb 6-1: config 0 descriptor?? [ 1485.583851][T20730] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1485.764625][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.771200][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.232168][T19220] usb 6-1: USB disconnect, device number 33 [ 1486.509133][T20771] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3746'. [ 1486.623058][T20772] rdma_rxe: rxe_newlink: failed to add bond0 [ 1487.153719][T19220] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1487.335985][T19220] usb 6-1: Using ep0 maxpacket: 32 [ 1487.343805][T17215] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1487.359939][T19220] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1487.418287][T19220] usb 6-1: string descriptor 0 read error: -71 [ 1487.444016][T19220] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1487.453092][T19220] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1487.475924][T19220] usb 6-1: config 0 descriptor?? [ 1487.481314][T19220] usb 6-1: can't set config #0, error -71 [ 1487.495021][T17215] usb 9-1: Using ep0 maxpacket: 32 [ 1487.495662][T19220] usb 6-1: USB disconnect, device number 34 [ 1487.506446][T17215] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1487.520112][T17215] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1487.537171][T17215] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1487.544856][T20783] binder: BINDER_SET_CONTEXT_MGR already set [ 1487.551336][T20783] binder: 20781:20783 ioctl 4018620d 20000540 returned -16 [ 1487.554845][T17215] usb 9-1: Product: syz [ 1487.568739][T17215] usb 9-1: Manufacturer: syz [ 1487.577905][T17215] usb 9-1: SerialNumber: syz [ 1487.591001][T17215] usb 9-1: config 0 descriptor?? [ 1487.610823][T20774] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1488.803300][T17215] usb 9-1: USB disconnect, device number 4 [ 1490.372161][T20816] rdma_rxe: rxe_newlink: failed to add bond0 [ 1491.036613][T20821] xt_socket: unknown flags 0x2 [ 1493.480737][T20849] ubi0: attaching mtd0 [ 1493.485126][T20849] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 1495.774707][T20874] Unsupported ieee802154 address type: 0 [ 1496.527267][T20880] Unsupported ieee802154 address type: 0 [ 1497.179100][T20884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1498.291755][T20887] rdma_rxe: rxe_newlink: failed to add bond0 [ 1499.517157][T20912] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3787'. [ 1501.524302][T20940] syz1: rxe_newlink: already configured on bond0 [ 1503.614179][T20928] Unsupported ieee802154 address type: 0 [ 1507.135798][T20994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'. [ 1507.274400][ T30] audit: type=1400 audit(1730775588.616:2469): avc: denied { create } for pid=20990 comm="syz.0.3807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1508.556733][T21006] Unsupported ieee802154 address type: 0 [ 1510.549615][T21028] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1512.868869][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1513.209873][T21075] rdma_rxe: rxe_newlink: failed to add bond0 [ 1514.050730][ T30] audit: type=1400 audit(1730775595.386:2470): avc: denied { ioctl } for pid=21070 comm="syz.0.3833" path="socket:[60874]" dev="sockfs" ino=60874 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1514.075696][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.135940][T21110] xt_socket: unknown flags 0x2 [ 1518.035492][T21123] Unsupported ieee802154 address type: 0 [ 1518.381190][T21126] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1518.407697][T21130] vlan2: entered promiscuous mode [ 1518.412765][T21130] vlan0: entered promiscuous mode [ 1519.723377][T21151] Unsupported ieee802154 address type: 0 [ 1520.813188][T21168] rdma_rxe: rxe_newlink: failed to add bond0 [ 1520.848074][T21167] xt_socket: unknown flags 0x2 [ 1521.884526][T21171] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3865'. [ 1523.923753][T21196] xt_socket: unknown flags 0x2 [ 1524.874599][T21211] Unsupported ieee802154 address type: 0 [ 1527.971200][T21247] xt_socket: unknown flags 0x2 [ 1530.885503][T14837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1530.906794][T21276] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3894'. [ 1530.920604][T14837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1531.040612][T14837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1531.064319][T14837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1531.072388][T14837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1531.162196][T21280] Unsupported ieee802154 address type: 0 [ 1531.647730][T14837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1531.828577][T18553] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.980980][T18553] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.470836][T18553] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.597633][T18553] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.887590][T21271] chnl_net:caif_netlink_parms(): no params data found [ 1533.983445][T21281] Bluetooth: hci2: command tx timeout [ 1534.804085][T21311] xt_socket: unknown flags 0x2 [ 1535.467803][T18553] bridge_slave_1: left allmulticast mode [ 1535.473580][T18553] bridge_slave_1: left promiscuous mode [ 1535.484018][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.522874][T18553] bridge_slave_0: left allmulticast mode [ 1535.528872][T18553] bridge_slave_0: left promiscuous mode [ 1535.534643][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.543858][ T9621] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1536.263033][T21281] Bluetooth: hci2: command tx timeout [ 1536.284348][T21340] Unsupported ieee802154 address type: 0 [ 1536.552760][ T9621] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1536.562621][ T9621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.571263][ T9621] usb 7-1: Product: syz [ 1536.584474][ T9621] usb 7-1: Manufacturer: syz [ 1536.597001][ T9621] usb 7-1: SerialNumber: syz [ 1536.684040][ T9621] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1536.788098][ T25] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1537.576829][ T5878] usb 7-1: USB disconnect, device number 9 [ 1537.863755][ T25] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1537.884313][ T25] ath9k_htc: Failed to initialize the device [ 1537.890880][ T5878] usb 7-1: ath9k_htc: USB layer deinitialized [ 1538.031162][T18553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.042812][T18553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.054050][T18553] bond0 (unregistering): Released all slaves [ 1538.065057][T18553] bond1 (unregistering): Released all slaves [ 1538.204558][T21271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.259607][T21271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.281477][T21271] bridge_slave_0: entered allmulticast mode [ 1538.289602][T21271] bridge_slave_0: entered promiscuous mode [ 1538.297563][T21271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.304768][T21271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.312659][T21271] bridge_slave_1: entered allmulticast mode [ 1538.319740][T21271] bridge_slave_1: entered promiscuous mode [ 1538.365637][T21281] Bluetooth: hci2: command tx timeout [ 1538.684916][T21369] xt_socket: unknown flags 0x2 [ 1539.337777][T21271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.500687][T18553] tipc: Left network mode [ 1539.538086][T21271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.547970][T21380] binder: 21379:21380 ioctl 4018620d 0 returned -22 [ 1540.339634][T21271] team0: Port device team_slave_0 added [ 1540.352722][T21271] team0: Port device team_slave_1 added [ 1540.429024][T21281] Bluetooth: hci2: command tx timeout [ 1541.519440][T21403] syz.0.3920[21403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1541.519621][T21403] syz.0.3920[21403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1541.532633][T21403] syz.0.3920[21403] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1541.684425][T21271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.713477][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1541.759553][T21271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.280071][T21271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.314173][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1542.469937][T21412] syz.8.3923[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.470371][T21412] syz.8.3923[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.604992][T21271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.759585][T21412] syz.8.3923[21412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.788944][T21417] syz.8.3923[21417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.923626][T21417] syz.8.3923[21417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1542.961114][T21417] syz.8.3923[21417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1543.245207][T21271] hsr_slave_0: entered promiscuous mode [ 1543.284437][T21271] hsr_slave_1: entered promiscuous mode [ 1543.370623][T21271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.543279][T21271] Cannot create hsr debugfs directory [ 1544.962342][T18553] hsr_slave_0: left promiscuous mode [ 1544.994754][T18553] hsr_slave_1: left promiscuous mode [ 1545.047441][T18553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.065758][T18553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.088034][T18553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.096219][T18553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1545.249314][T18553] veth1_macvtap: left promiscuous mode [ 1545.263411][T18553] veth0_macvtap: left promiscuous mode [ 1545.276144][T18553] veth1_vlan: left promiscuous mode [ 1545.393553][T21453] Unsupported ieee802154 address type: 0 [ 1545.849635][T18553] veth0_vlan: left promiscuous mode [ 1546.145330][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'. [ 1546.665481][T21465] Unsupported ieee802154 address type: 0 [ 1547.173017][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.179777][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.409150][T21482] Unsupported ieee802154 address type: 0 [ 1550.033085][T18553] team0 (unregistering): Port device team_slave_1 removed [ 1550.170210][T18553] team0 (unregistering): Port device team_slave_0 removed [ 1551.421696][T21494] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3945'. [ 1551.511899][T21496] binder: BINDER_SET_CONTEXT_MGR already set [ 1551.542118][T21496] binder: 21495:21496 ioctl 4018620d 20000540 returned -16 [ 1552.859172][T21514] Unsupported ieee802154 address type: 0 [ 1553.419909][T21518] Unsupported ieee802154 address type: 0 [ 1553.741740][T21513] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3953'. [ 1554.921925][T21542] binder: BINDER_SET_CONTEXT_MGR already set [ 1554.953951][T21542] binder: 21541:21542 ioctl 4018620d 20000540 returned -16 [ 1555.157764][T21548] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3961'. [ 1555.249285][T21550] xt_socket: unknown flags 0x2 [ 1556.282250][T21564] xt_socket: unknown flags 0x2 [ 1557.059716][T21565] Unsupported ieee802154 address type: 0 [ 1557.709832][T18553] IPVS: stop unused estimator thread 0... [ 1558.026726][T21581] xt_socket: unknown flags 0x2 [ 1558.825673][T21584] Unsupported ieee802154 address type: 0 [ 1558.873031][T21271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1558.968952][T21599] binder: BINDER_SET_CONTEXT_MGR already set [ 1558.969940][T21271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1558.975330][T21599] binder: 21594:21599 ioctl 4018620d 20000540 returned -16 [ 1559.038583][T21271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1559.080993][T21271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1559.678214][T21271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.763019][T21271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.906715][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.913890][T13765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1560.001080][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.008246][T18553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.060320][T21271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.648398][T21271] veth0_vlan: entered promiscuous mode [ 1561.673229][T21271] veth1_vlan: entered promiscuous mode [ 1561.731736][T21271] veth0_macvtap: entered promiscuous mode [ 1561.746806][T21271] veth1_macvtap: entered promiscuous mode [ 1561.780106][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.805603][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.824242][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.839528][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.851772][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.869296][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.882012][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1561.922649][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1561.960913][T21271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.979663][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1561.998292][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.021016][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.148562][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.191918][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.227143][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.258965][T21683] xt_socket: unknown flags 0x2 [ 1562.270790][T21271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1562.282098][T21271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1562.296264][T21271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1562.306927][T21688] binder: 21687:21688 ioctl c0306201 0 returned -14 [ 1562.322242][T21271] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.355860][T21271] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.372301][T21271] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.382089][T21271] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.521138][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.557532][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.616726][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.625278][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.843939][ T965] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1562.964763][T21702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3988'. [ 1563.010744][ T965] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1563.024227][ T965] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.032310][ T965] usb 9-1: Product: syz [ 1563.041263][ T965] usb 9-1: Manufacturer: syz [ 1563.051681][ T965] usb 9-1: SerialNumber: syz [ 1563.082635][ T965] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1563.130422][T19220] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1563.888030][ T25] usb 9-1: USB disconnect, device number 5 [ 1564.552696][T21726] binder: 21725:21726 ioctl c0306201 0 returned -14 [ 1564.588042][T19220] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1564.611604][T19220] ath9k_htc: Failed to initialize the device [ 1564.630473][ T25] usb 9-1: ath9k_htc: USB layer deinitialized [ 1565.286533][T21735] Unsupported ieee802154 address type: 0 [ 1566.826871][T21742] xt_socket: unknown flags 0x2 [ 1569.765223][T21767] binder: 21766:21767 ioctl c0306201 0 returned -14 [ 1569.806650][T21767] binder: BINDER_SET_CONTEXT_MGR already set [ 1569.812679][T21767] binder: 21766:21767 ioctl 4018620d 20000540 returned -16 [ 1573.675392][T21807] xt_socket: unknown flags 0x2 [ 1575.009244][T21808] tty tty35: ldisc open failed (-12), clearing slot 34 [ 1575.018240][T21809] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1579.073277][T21856] Unsupported ieee802154 address type: 0 [ 1580.345023][T21860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4035'. [ 1582.105778][T21894] xt_socket: unknown flags 0x2 [ 1585.147396][T21930] syz.0.4057[21930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.147486][T21930] syz.0.4057[21930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1585.179058][T21930] syz.0.4057[21930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.254061][T21962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4068'. [ 1589.299773][T21966] binder: BINDER_SET_CONTEXT_MGR already set [ 1589.317804][T21966] binder: 21964:21966 ioctl 4018620d 20000540 returned -16 [ 1589.327298][T21965] syz.5.4069[21965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.327360][T21965] syz.5.4069[21965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1589.552315][T21965] syz.5.4069[21965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1590.081481][T21977] syz.5.4074[21977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1590.317364][T21977] syz.5.4074[21977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1590.468969][T21977] syz.5.4074[21977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1591.144470][T21988] xt_socket: unknown flags 0x2 [ 1591.998851][T21992] rdma_rxe: rxe_newlink: failed to add bond0 [ 1592.453045][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1592.466062][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1592.483464][T18553] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1592.494484][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1592.512454][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1592.536000][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1592.543439][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1592.987954][T18553] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.582856][T22009] Unsupported ieee802154 address type: 0 [ 1593.651920][T18553] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.008642][T22015] syz.7.4084[22015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.008730][T22015] syz.7.4084[22015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.011199][T18553] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.064733][T22015] syz.7.4084[22015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.181534][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4085'. [ 1594.853629][ T5836] Bluetooth: hci1: command tx timeout [ 1595.264351][T18553] bridge_slave_1: left allmulticast mode [ 1595.332790][T18553] bridge_slave_1: left promiscuous mode [ 1595.341887][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.380134][T18553] bridge_slave_0: left allmulticast mode [ 1595.484725][T18553] bridge_slave_0: left promiscuous mode [ 1595.515934][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.366298][T18553] infiniband syz1: set down [ 1596.905760][ T5836] Bluetooth: hci1: command tx timeout [ 1597.548853][ T11] smc: removing ib device syz1 [ 1597.559202][T18553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1597.570712][T18553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.581487][T18553] bond0 (unregistering): Released all slaves [ 1597.698490][T21997] chnl_net:caif_netlink_parms(): no params data found [ 1598.054152][T22074] Unsupported ieee802154 address type: 0 [ 1598.984231][ T5836] Bluetooth: hci1: command tx timeout [ 1598.994545][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4097'. [ 1599.604117][T22096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1599.863701][T21997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.942362][T21997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.973349][T21997] bridge_slave_0: entered allmulticast mode [ 1600.129473][T21997] bridge_slave_0: entered promiscuous mode [ 1600.637522][T21997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.647039][T21997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.659293][T21997] bridge_slave_1: entered allmulticast mode [ 1600.668392][T21997] bridge_slave_1: entered promiscuous mode [ 1600.692475][T22123] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4104'. [ 1600.868164][T22130] xt_socket: unknown flags 0x2 [ 1600.984153][T21997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1601.080831][ T5836] Bluetooth: hci1: command tx timeout [ 1601.096398][T21997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.211103][T21997] team0: Port device team_slave_0 added [ 1601.490288][T21997] team0: Port device team_slave_1 added [ 1601.569165][T21997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.576552][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.608912][T21997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.624557][T21997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.640312][T21997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.694953][T21997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.886229][T21997] hsr_slave_0: entered promiscuous mode [ 1601.894926][T21997] hsr_slave_1: entered promiscuous mode [ 1601.902342][T21997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1601.910107][T21997] Cannot create hsr debugfs directory [ 1602.040241][T18553] hsr_slave_0: left promiscuous mode [ 1602.075059][T18553] hsr_slave_1: left promiscuous mode [ 1602.095615][T18553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.113657][T18553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.125023][T18553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.139267][T18553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.172410][T18553] vlan0: left promiscuous mode [ 1602.183101][T18553] veth1_macvtap: left promiscuous mode [ 1602.201525][T18553] veth0_macvtap: left promiscuous mode [ 1602.227168][T18553] veth1_vlan: left promiscuous mode [ 1602.244527][T18553] veth0_vlan: left promiscuous mode [ 1603.041111][T18553] team0 (unregistering): Port device team_slave_1 removed [ 1603.100963][T18553] team0 (unregistering): Port device team_slave_0 removed [ 1603.561693][T22151] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4114'. [ 1603.571361][T22155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4113'. [ 1604.122330][T22173] xt_socket: unknown flags 0x2 [ 1605.143635][T22191] Unsupported ieee802154 address type: 0 [ 1606.453297][T21997] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1606.479914][T18553] IPVS: stop unused estimator thread 0... [ 1606.487040][T21997] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1606.633941][T21997] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1606.686907][T22209] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4126'. [ 1606.893893][T21997] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1607.163241][T21997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.223382][T21997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.497402][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.504609][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.803401][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.810612][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.033252][T21997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1608.043955][T21997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1608.592725][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.662610][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.820401][T21997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.131333][T21997] veth0_vlan: entered promiscuous mode [ 1610.150925][T21997] veth1_vlan: entered promiscuous mode [ 1610.183453][T21997] veth0_macvtap: entered promiscuous mode [ 1610.213000][T21997] veth1_macvtap: entered promiscuous mode [ 1610.237522][T22277] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4139'. [ 1610.262463][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.288914][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.301811][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.313079][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.325912][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.343046][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.353565][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1610.369793][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.388746][T21997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.416494][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.430814][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.442462][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.454166][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.464742][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.481473][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.491917][T21997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1610.502884][T21997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1610.515961][T21997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.547143][T21997] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.564476][T21997] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.573453][T21997] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.588024][T21997] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1611.421808][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.434448][T13765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1611.442288][T13765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1611.969764][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.497526][T22329] infiniband syz1: set active [ 1614.503787][T22329] infiniband syz1: added bond0 [ 1614.723875][T22329] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1614.727426][T22329] infiniband syz1: Couldn't open port 1 [ 1614.813353][T22329] RDS/IB: syz1: added [ 1614.817450][T22329] smc: adding ib device syz1 with port count 1 [ 1614.823760][T22329] smc: ib device syz1 port 1 has pnetid SYZ1 (user defined) [ 1615.547581][T22354] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4157'. [ 1619.212470][T22398] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1619.815401][T22408] xt_socket: unknown flags 0x2 [ 1619.937599][T22417] syz.0.4172[22417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1619.937688][T22417] syz.0.4172[22417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1619.957364][T22417] syz.0.4172[22417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1625.030087][T22484] rdma_rxe: rxe_newlink: failed to add bond0 [ 1630.886617][ T30] audit: type=1804 audit(1730775712.096:2471): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4208" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 1631.264815][ T30] audit: type=1800 audit(1730775712.096:2472): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4208" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1631.326904][ T30] audit: type=1804 audit(1730775712.106:2473): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4208" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 1631.409313][ T30] audit: type=1804 audit(1730775712.106:2474): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4208" name="/newroot/13/file1" dev="fuse" ino=1 res=1 errno=0 [ 1631.541748][ T30] audit: type=1800 audit(1730775712.106:2475): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4208" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1634.191173][T22634] rdma_rxe: rxe_newlink: failed to add bond0 [ 1634.363799][T22639] xt_socket: unknown flags 0x2 [ 1636.056500][T22659] Unsupported ieee802154 address type: 0 [ 1638.014784][ T30] audit: type=1804 audit(1730775719.056:2476): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4228" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 1638.275882][ T30] audit: type=1800 audit(1730775719.066:2477): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4228" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1638.347071][ T30] audit: type=1804 audit(1730775719.196:2478): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4228" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 1638.457894][ T30] audit: type=1804 audit(1730775719.196:2479): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4228" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 1638.613867][ T30] audit: type=1800 audit(1730775719.216:2480): pid=22673 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4228" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1644.821233][T22727] rdma_rxe: rxe_newlink: failed to add bond0 [ 1645.800529][T22739] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4241'. [ 1645.834471][T22743] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4242'. [ 1647.356655][ T30] audit: type=1804 audit(1730775727.966:2481): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4246" name="/newroot/25/file1" dev="fuse" ino=1 res=1 errno=0 [ 1647.415735][ T30] audit: type=1800 audit(1730775727.966:2482): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4246" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1647.568745][ T30] audit: type=1804 audit(1730775727.976:2483): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4246" name="/newroot/25/file1" dev="fuse" ino=1 res=1 errno=0 [ 1647.993664][ T30] audit: type=1804 audit(1730775727.976:2484): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4246" name="/newroot/25/file1" dev="fuse" ino=1 res=1 errno=0 [ 1648.517539][ T30] audit: type=1800 audit(1730775727.976:2485): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4246" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1648.856812][T22786] syz.0.4253[22786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.856910][T22786] syz.0.4253[22786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.902405][T22786] syz.0.4253[22786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.916233][T22791] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1649.805149][T22801] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4255'. [ 1650.980774][T22818] xt_socket: unknown flags 0x2 [ 1652.121223][T22836] Unsupported ieee802154 address type: 0 [ 1653.168903][T22854] syz.0.4268[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1653.168995][T22854] syz.0.4268[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1653.205341][T22857] rdma_rxe: rxe_newlink: failed to add bond0 [ 1653.229786][T22854] syz.0.4268[22854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1654.098166][T22867] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4270'. [ 1655.811477][T22886] xt_socket: unknown flags 0x2 [ 1656.915518][T21281] Bluetooth: hci2: command 0x0406 tx timeout [ 1658.059655][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4282'. [ 1658.216720][T22928] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4285'. [ 1659.244792][T22940] Unsupported ieee802154 address type: 0 [ 1659.752001][T22950] Unsupported ieee802154 address type: 0 [ 1660.767907][T22961] xt_socket: unknown flags 0x2 [ 1660.947059][ T30] audit: type=1804 audit(1730775742.266:2486): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4289" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 1661.176945][ T30] audit: type=1800 audit(1730775742.266:2487): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4289" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1661.484604][ T30] audit: type=1804 audit(1730775742.266:2488): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4289" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 1661.534742][ T30] audit: type=1804 audit(1730775742.276:2489): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4289" name="/newroot/65/file1" dev="fuse" ino=1 res=1 errno=0 [ 1662.058286][T22977] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4294'. [ 1662.345163][ T30] audit: type=1800 audit(1730775742.276:2490): pid=22962 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4289" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1662.866172][T22986] rdma_rxe: rxe_newlink: failed to add bond0 [ 1664.652655][T23011] rdma_rxe: rxe_newlink: failed to add bond0 [ 1668.019886][T23014] tty tty39: ldisc open failed (-12), clearing slot 38 [ 1668.029146][T23016] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1668.943127][T23030] xt_socket: unknown flags 0x2 [ 1670.264533][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.278834][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.357639][T23095] syz.9.4319[23095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1674.357729][T23095] syz.9.4319[23095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1674.467973][T23095] syz.9.4319[23095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1675.280095][T23106] xt_socket: unknown flags 0x2 [ 1679.683507][T23157] binder: BINDER_SET_CONTEXT_MGR already set [ 1679.701655][T23157] binder: 23156:23157 ioctl 4018620d 20000540 returned -16 [ 1679.727830][T23157] binder: 23156:23157 ioctl c0306201 0 returned -14 [ 1681.921548][T23179] xt_socket: unknown flags 0x2 [ 1682.923088][T23189] syz.9.4343[23189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1682.923179][T23189] syz.9.4343[23189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1682.940672][T23189] syz.9.4343[23189] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1686.395651][T23203] binder: 23202:23203 ioctl c0306201 0 returned -14 [ 1689.873921][T23234] fuse: Bad value for 'fd' [ 1690.577357][T23238] syz.9.4355[23238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1690.577453][T23238] syz.9.4355[23238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1690.591719][T23239] xt_socket: unknown flags 0x2 [ 1690.979034][T23238] syz.9.4355[23238] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1693.126096][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4358'. [ 1694.327705][ T30] audit: type=1804 audit(1730775775.366:2491): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4361" name="/newroot/81/file1" dev="fuse" ino=1 res=1 errno=0 [ 1694.743592][ T30] audit: type=1800 audit(1730775775.366:2492): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4361" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1695.175429][ T30] audit: type=1804 audit(1730775775.406:2493): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4361" name="/newroot/81/file1" dev="fuse" ino=1 res=1 errno=0 [ 1695.725078][ T30] audit: type=1804 audit(1730775775.406:2494): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4361" name="/newroot/81/file1" dev="fuse" ino=1 res=1 errno=0 [ 1695.776367][ T30] audit: type=1800 audit(1730775775.406:2495): pid=23271 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4361" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1695.825682][T23280] binder: 23279:23280 ioctl c0306201 0 returned -14 [ 1701.434548][T23309] xt_socket: unknown flags 0x2 [ 1704.087701][T23330] binder: BINDER_SET_CONTEXT_MGR already set [ 1704.113665][T23330] binder: 23328:23330 ioctl 4018620d 20000540 returned -16 [ 1706.005727][ T30] audit: type=1804 audit(1730775786.976:2496): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4383" name="/newroot/211/file1" dev="fuse" ino=1 res=1 errno=0 [ 1707.020753][ T30] audit: type=1800 audit(1730775786.976:2497): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4383" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1707.244214][ T30] audit: type=1804 audit(1730775787.006:2498): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4383" name="/newroot/211/file1" dev="fuse" ino=1 res=1 errno=0 [ 1710.069340][ T30] audit: type=1804 audit(1730775787.006:2499): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4383" name="/newroot/211/file1" dev="fuse" ino=1 res=1 errno=0 [ 1710.664241][ T30] audit: type=1800 audit(1730775787.006:2500): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4383" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1711.596164][T23376] rdma_rxe: rxe_newlink: failed to add bond0 [ 1713.411278][ T30] audit: type=1804 audit(1730775794.726:2501): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4395" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 1714.037395][ T30] audit: type=1800 audit(1730775794.726:2502): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4395" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1714.060093][ T30] audit: type=1804 audit(1730775794.726:2503): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4395" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 1714.180584][ T30] audit: type=1804 audit(1730775794.726:2504): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4395" name="/newroot/48/file1" dev="fuse" ino=1 res=1 errno=0 [ 1714.228761][ T30] audit: type=1800 audit(1730775794.726:2505): pid=23391 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.4395" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1716.921214][T23417] syz.0.4401[23417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1716.921303][T23417] syz.0.4401[23417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1717.139047][T23417] syz.0.4401[23417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1718.911180][T21281] Bluetooth: hci1: command 0x0406 tx timeout [ 1719.055500][ T30] audit: type=1804 audit(1730775800.146:2506): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4403" name="/newroot/243/file1" dev="fuse" ino=1 res=1 errno=0 [ 1719.081003][ T30] audit: type=1800 audit(1730775800.146:2507): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4403" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1719.133313][ T30] audit: type=1804 audit(1730775800.156:2508): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4403" name="/newroot/243/file1" dev="fuse" ino=1 res=1 errno=0 [ 1719.298898][ T30] audit: type=1804 audit(1730775800.156:2509): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4403" name="/newroot/243/file1" dev="fuse" ino=1 res=1 errno=0 [ 1719.353608][ T30] audit: type=1800 audit(1730775800.156:2510): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4403" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1719.815943][T23445] rdma_rxe: rxe_newlink: failed to add bond0 [ 1721.666659][T23463] xt_socket: unknown flags 0x2 [ 1724.675468][T23478] syz.8.4417[23478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1724.675556][T23478] syz.8.4417[23478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1724.717646][T23478] syz.8.4417[23478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1726.345115][ T30] audit: type=1804 audit(1730775807.666:2511): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4419" name="/newroot/92/file1" dev="fuse" ino=1 res=1 errno=0 [ 1726.719160][ T30] audit: type=1800 audit(1730775807.666:2512): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4419" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1727.290361][ T30] audit: type=1804 audit(1730775807.666:2513): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4419" name="/newroot/92/file1" dev="fuse" ino=1 res=1 errno=0 [ 1727.360205][ T30] audit: type=1804 audit(1730775807.666:2514): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.4419" name="/newroot/92/file1" dev="fuse" ino=1 res=1 errno=0 [ 1727.395513][ T30] audit: type=1800 audit(1730775807.666:2515): pid=23493 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4419" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1728.110403][ T30] audit: type=1804 audit(1730775809.416:2516): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4423" name="/newroot/218/file1" dev="fuse" ino=1 res=1 errno=0 [ 1728.275838][ T30] audit: type=1800 audit(1730775809.416:2517): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4423" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1728.453615][ T30] audit: type=1804 audit(1730775809.416:2518): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4423" name="/newroot/218/file1" dev="fuse" ino=1 res=1 errno=0 [ 1728.475518][ T30] audit: type=1804 audit(1730775809.426:2519): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4423" name="/newroot/218/file1" dev="fuse" ino=1 res=1 errno=0 [ 1728.497425][ T30] audit: type=1800 audit(1730775809.426:2520): pid=23505 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4423" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1729.047814][T23519] xt_socket: unknown flags 0x2 [ 1729.188624][T23497] syz1: rxe_newlink: already configured on bond0 [ 1729.487636][T23521] Unsupported ieee802154 address type: 0 [ 1730.322076][T23525] binder: BINDER_SET_CONTEXT_MGR already set [ 1730.328473][T23525] binder: 23524:23525 ioctl 4018620d 20000540 returned -16 [ 1731.469505][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.476069][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.857597][ T30] audit: type=1804 audit(1730775814.116:2521): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4432" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0 [ 1733.078221][ T30] audit: type=1800 audit(1730775814.116:2522): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4432" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1733.110225][ T30] audit: type=1804 audit(1730775814.126:2523): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4432" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0 [ 1733.132050][ T30] audit: type=1804 audit(1730775814.126:2524): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4432" name="/newroot/248/file1" dev="fuse" ino=1 res=1 errno=0 [ 1733.154252][ T30] audit: type=1800 audit(1730775814.136:2525): pid=23544 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4432" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1734.226027][T23558] xt_socket: unknown flags 0x2 [ 1734.563898][T23563] xt_socket: unknown flags 0x2 [ 1734.601070][ T965] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1735.006417][T23575] binder: BINDER_SET_CONTEXT_MGR already set [ 1735.012441][T23575] binder: 23573:23575 ioctl 4018620d 20000540 returned -16 [ 1735.093530][ T965] usb 9-1: Using ep0 maxpacket: 32 [ 1735.102018][ T30] audit: type=1400 audit(1730775816.436:2526): avc: denied { watch } for pid=23564 comm="syz.7.4440" path="/250" dev="tmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1735.104525][ T965] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 1735.128084][ T30] audit: type=1400 audit(1730775816.436:2527): avc: denied { watch_sb } for pid=23564 comm="syz.7.4440" path="/250" dev="tmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1736.096148][ T30] audit: type=1400 audit(1730775816.436:2528): avc: denied { watch_sb } for pid=23564 comm="syz.7.4440" path="/250/blkio.bfq.time_recursive" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1737.097372][ T965] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1737.406502][ T965] usb 9-1: can't read configurations, error -61 [ 1739.198715][T23610] xt_socket: unknown flags 0x2 [ 1739.556662][ T30] audit: type=1400 audit(1730775820.896:2529): avc: denied { setattr } for pid=23612 comm="syz.0.4454" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1739.586787][T23616] FAULT_INJECTION: forcing a failure. [ 1739.586787][T23616] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.599701][T23616] CPU: 0 UID: 0 PID: 23616 Comm: syz.0.4454 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1739.610500][T23616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1739.620546][T23616] Call Trace: [ 1739.623818][T23616] [ 1739.626740][T23616] dump_stack_lvl+0x16c/0x1f0 [ 1739.631417][T23616] should_fail_ex+0x497/0x5b0 [ 1739.636094][T23616] ? fs_reclaim_acquire+0xae/0x150 [ 1739.641201][T23616] should_failslab+0xc2/0x120 [ 1739.645872][T23616] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1739.651234][T23616] ? getname_flags.part.0+0x4c/0x550 [ 1739.656512][T23616] ? fput+0x30/0x390 [ 1739.660400][T23616] getname_flags.part.0+0x4c/0x550 [ 1739.665527][T23616] ? __pfx_ksys_write+0x10/0x10 [ 1739.670375][T23616] getname_flags+0x93/0xf0 [ 1739.674783][T23616] __x64_sys_mknodat+0x9f/0xe0 [ 1739.679536][T23616] do_syscall_64+0xcd/0x250 [ 1739.684031][T23616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1739.689919][T23616] RIP: 0033:0x7f9894d7e719 [ 1739.694320][T23616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1739.713929][T23616] RSP: 002b:00007f98931f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 1739.722593][T23616] RAX: ffffffffffffffda RBX: 00007f9894f36058 RCX: 00007f9894d7e719 [ 1739.730548][T23616] RDX: 0000000000006004 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1739.738508][T23616] RBP: 00007f98931f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.746466][T23616] R10: 0000000000000701 R11: 0000000000000246 R12: 0000000000000001 [ 1739.754429][T23616] R13: 0000000000000000 R14: 00007f9894f36058 R15: 00007ffe0d6eb2b8 [ 1739.762404][T23616] [ 1742.126987][T23633] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1742.177235][ T30] audit: type=1804 audit(1730775823.516:2530): pid=23635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4449" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 1742.210986][ T30] audit: type=1800 audit(1730775823.546:2531): pid=23635 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4449" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1742.648092][ T30] audit: type=1804 audit(1730775823.966:2532): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4449" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 1742.695394][ T30] audit: type=1804 audit(1730775823.966:2533): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.4449" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 1742.717938][ T30] audit: type=1800 audit(1730775823.966:2534): pid=23615 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.4449" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1742.728030][T23648] xt_socket: unknown flags 0x2 [ 1743.515980][T23659] xt_socket: unknown flags 0x2 [ 1743.846955][T23661] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4468'. [ 1743.893657][ T5877] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1744.651649][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 1744.757905][ T5877] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1744.770998][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.792477][ T5877] usb 6-1: config 0 descriptor?? [ 1744.929873][ T5877] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1745.691209][T23679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23679 comm=syz.9.4472 [ 1745.697941][T23680] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4471'. [ 1746.105573][ T30] audit: type=1400 audit(1730775827.446:2535): avc: denied { write } for pid=23676 comm="syz.8.4471" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1746.325004][ T5877] gspca_nw80x: reg_w err -110 [ 1746.331757][ T5877] nw80x 6-1:0.0: probe with driver nw80x failed with error -110 [ 1746.731467][ T30] audit: type=1400 audit(1730775828.046:2536): avc: denied { create } for pid=23681 comm="syz.0.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1746.805438][T13897] libceph: connect (1)[c::]:6789 error -101 [ 1746.888833][T13897] libceph: mon0 (1)[c::]:6789 connect error [ 1747.110887][ T30] audit: type=1326 audit(1730775828.446:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23695 comm="syz.8.4476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x0 [ 1747.687739][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 1747.810567][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1748.773558][T23712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4479'. [ 1748.931155][T23714] xt_socket: unknown flags 0x2 [ 1749.186813][T23685] ceph: No mds server is up or the cluster is laggy [ 1749.222714][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 1749.230298][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 1749.285784][T23712] : entered promiscuous mode [ 1750.696208][T23733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23733 comm=syz.0.4484 [ 1750.779867][T23736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4485'. [ 1750.815544][ T5909] usb 6-1: USB disconnect, device number 35 [ 1751.060753][ T30] audit: type=1400 audit(1730775832.396:2538): avc: denied { map } for pid=23737 comm="syz.0.4486" path="/dev/hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1751.728622][T23746] Process accounting resumed [ 1751.759688][T23752] FAULT_INJECTION: forcing a failure. [ 1751.759688][T23752] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.777898][T23752] CPU: 0 UID: 0 PID: 23752 Comm: syz.9.4491 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1751.788679][T23752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1751.798737][T23752] Call Trace: [ 1751.802003][T23752] [ 1751.804915][T23752] dump_stack_lvl+0x16c/0x1f0 [ 1751.809578][T23752] should_fail_ex+0x497/0x5b0 [ 1751.814248][T23752] ? fs_reclaim_acquire+0xae/0x150 [ 1751.819341][T23752] should_failslab+0xc2/0x120 [ 1751.824004][T23752] __kmalloc_noprof+0xcb/0x400 [ 1751.828751][T23752] drm_atomic_state_init+0xe4/0x320 [ 1751.833938][T23752] ? __kasan_kmalloc+0xaa/0xb0 [ 1751.838716][T23752] drm_atomic_state_alloc+0xd3/0x120 [ 1751.844010][T23752] drm_mode_atomic_ioctl+0x3a3/0x25e0 [ 1751.849371][T23752] ? __pfx___lock_acquire+0x10/0x10 [ 1751.854552][T23752] ? __pfx___lock_acquire+0x10/0x10 [ 1751.859741][T23752] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1751.865546][T23752] ? lock_acquire.part.0+0x11b/0x380 [ 1751.870817][T23752] ? find_held_lock+0x2d/0x110 [ 1751.875587][T23752] ? do_raw_spin_unlock+0x172/0x230 [ 1751.880783][T23752] drm_ioctl_kernel+0x1e6/0x3d0 [ 1751.885717][T23752] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1751.891514][T23752] ? __might_fault+0x81/0x190 [ 1751.896191][T23752] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1751.901552][T23752] ? __might_fault+0xe3/0x190 [ 1751.906230][T23752] drm_ioctl+0x5d6/0xc00 [ 1751.910466][T23752] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1751.916267][T23752] ? __pfx_drm_ioctl+0x10/0x10 [ 1751.921029][T23752] ? trace_lock_acquire+0x14a/0x1d0 [ 1751.926228][T23752] ? selinux_file_ioctl+0x180/0x270 [ 1751.931419][T23752] ? selinux_file_ioctl+0xb4/0x270 [ 1751.936519][T23752] ? __pfx_drm_ioctl+0x10/0x10 [ 1751.941282][T23752] __x64_sys_ioctl+0x18f/0x220 [ 1751.946039][T23752] do_syscall_64+0xcd/0x250 [ 1751.950531][T23752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.956419][T23752] RIP: 0033:0x7f1ff197e719 [ 1751.960822][T23752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.980415][T23752] RSP: 002b:00007f1ff26b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.988821][T23752] RAX: ffffffffffffffda RBX: 00007f1ff1b35f80 RCX: 00007f1ff197e719 [ 1751.996792][T23752] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003 [ 1752.004767][T23752] RBP: 00007f1ff26b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.012727][T23752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.020686][T23752] R13: 0000000000000000 R14: 00007f1ff1b35f80 R15: 00007ffe9d8d2488 [ 1752.028661][T23752] [ 1752.163059][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4492'. [ 1753.060166][T23769] input: syz0 as /devices/virtual/input/input292 [ 1753.113837][T23775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23775 comm=syz.8.4496 [ 1755.454946][T23803] xt_socket: unknown flags 0x2 [ 1756.387062][T23815] FAULT_INJECTION: forcing a failure. [ 1756.387062][T23815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1756.493656][T23815] CPU: 0 UID: 0 PID: 23815 Comm: syz.5.4504 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1756.504463][T23815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1756.514530][T23815] Call Trace: [ 1756.517809][T23815] [ 1756.520741][T23815] dump_stack_lvl+0x16c/0x1f0 [ 1756.525453][T23815] should_fail_ex+0x497/0x5b0 [ 1756.530145][T23815] _copy_to_user+0x32/0xd0 [ 1756.534575][T23815] simple_read_from_buffer+0xd0/0x160 [ 1756.539960][T23815] proc_fail_nth_read+0x198/0x270 [ 1756.544990][T23815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.550554][T23815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1756.556116][T23815] vfs_read+0x1df/0xbe0 [ 1756.560307][T23815] ? __fget_files+0x23a/0x3f0 [ 1756.565010][T23815] ? fdget_pos+0x24c/0x360 [ 1756.569438][T23815] ? __pfx_lock_release+0x10/0x10 [ 1756.574475][T23815] ? trace_lock_acquire+0x14a/0x1d0 [ 1756.579684][T23815] ? __pfx_vfs_read+0x10/0x10 [ 1756.584357][T23815] ? __pfx___mutex_lock+0x10/0x10 [ 1756.589378][T23815] ? __fget_files+0x244/0x3f0 [ 1756.594062][T23815] ksys_read+0x12f/0x260 [ 1756.598299][T23815] ? __pfx_ksys_read+0x10/0x10 [ 1756.603056][T23815] ? rcu_is_watching+0x12/0xc0 [ 1756.607817][T23815] do_syscall_64+0xcd/0x250 [ 1756.612312][T23815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1756.618204][T23815] RIP: 0033:0x7fea2fd7d15c [ 1756.622605][T23815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1756.642211][T23815] RSP: 002b:00007fea2e1f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1756.650618][T23815] RAX: ffffffffffffffda RBX: 00007fea2ff35f80 RCX: 00007fea2fd7d15c [ 1756.658579][T23815] RDX: 000000000000000f RSI: 00007fea2e1f60a0 RDI: 0000000000000004 [ 1756.666536][T23815] RBP: 00007fea2e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1756.674495][T23815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1756.682452][T23815] R13: 0000000000000000 R14: 00007fea2ff35f80 R15: 00007ffc703410b8 [ 1756.690421][T23815] [ 1757.697418][T23830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23830 comm=syz.8.4511 [ 1757.827439][ T30] audit: type=1400 audit(1730775839.166:2539): avc: denied { create } for pid=23831 comm="syz.9.4510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1758.053649][ T25] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1758.470825][T23847] rdma_rxe: rxe_newlink: failed to add bond0 [ 1758.908647][T23850] netlink: 'syz.9.4510': attribute type 12 has an invalid length. [ 1758.917210][T23850] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4510'. [ 1761.308584][T23865] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4520'. [ 1761.323982][ T30] audit: type=1400 audit(1730775842.646:2540): avc: denied { bind } for pid=23862 comm="syz.7.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1761.523315][ T30] audit: type=1400 audit(1730775842.856:2541): avc: denied { listen } for pid=23862 comm="syz.7.4520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1761.681313][ T30] audit: type=1400 audit(1730775842.986:2542): avc: denied { read } for pid=23862 comm="syz.7.4520" path="socket:[74154]" dev="sockfs" ino=74154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1761.764329][T23878] xt_socket: unknown flags 0x2 [ 1762.717741][T23885] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4524'. [ 1763.110993][T23898] rdma_rxe: rxe_newlink: failed to add bond0 [ 1763.576893][ T30] audit: type=1400 audit(1730775844.606:2543): avc: denied { ioctl } for pid=23886 comm="syz.9.4527" path="socket:[72683]" dev="sockfs" ino=72683 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1766.779624][T23916] xt_socket: unknown flags 0x2 [ 1766.811611][T23930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4538'. [ 1767.169579][T23934] syz.0.4539[23934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1767.169676][T23934] syz.0.4539[23934] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1768.731856][T23947] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4542'. [ 1768.904462][T23951] rdma_rxe: rxe_newlink: failed to add bond0 [ 1771.440114][T23967] openvswitch: : Dropping previously announced user features [ 1772.480823][T23975] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1772.502677][T23975] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1772.510801][ T30] audit: type=1326 audit(1730775853.746:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.562694][T23975] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1772.575826][T23975] bond1 (unregistering): Released all slaves [ 1772.594823][T23989] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4554'. [ 1772.608024][ T30] audit: type=1326 audit(1730775853.746:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.633566][ T30] audit: type=1326 audit(1730775853.746:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.657167][ T30] audit: type=1326 audit(1730775853.746:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.680707][ T30] audit: type=1326 audit(1730775853.746:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.704710][ T30] audit: type=1326 audit(1730775853.746:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.729056][ T30] audit: type=1326 audit(1730775853.746:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.753031][ T30] audit: type=1326 audit(1730775853.746:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.776651][ T30] audit: type=1326 audit(1730775853.746:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.800880][ T30] audit: type=1326 audit(1730775853.756:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23983 comm="syz.8.4546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e697e719 code=0x7ffc0000 [ 1772.876536][T23992] FAULT_INJECTION: forcing a failure. [ 1772.876536][T23992] name failslab, interval 1, probability 0, space 0, times 0 [ 1772.891071][T23992] CPU: 1 UID: 0 PID: 23992 Comm: syz.0.4552 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1772.901852][T23992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1772.911916][T23992] Call Trace: [ 1772.915202][T23992] [ 1772.918136][T23992] dump_stack_lvl+0x16c/0x1f0 [ 1772.922834][T23992] should_fail_ex+0x497/0x5b0 [ 1772.927521][T23992] ? fs_reclaim_acquire+0xae/0x150 [ 1772.932630][T23992] should_failslab+0xc2/0x120 [ 1772.937309][T23992] __kmalloc_noprof+0xcb/0x400 [ 1772.942056][T23992] __list_lru_init+0xee/0x650 [ 1772.946721][T23992] alloc_super+0x90d/0xbd0 [ 1772.951136][T23992] ? __pfx_test_bdev_super+0x10/0x10 [ 1772.956400][T23992] sget+0x11b/0x760 [ 1772.960188][T23992] ? __pfx_set_bdev_super+0x10/0x10 [ 1772.965372][T23992] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 1772.970897][T23992] mount_bdev+0x108/0x2d0 [ 1772.975226][T23992] ? __pfx_mount_bdev+0x10/0x10 [ 1772.980087][T23992] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1772.985722][T23992] ? kasan_save_track+0x14/0x30 [ 1772.990560][T23992] ? cap_capable+0x1cf/0x240 [ 1772.995154][T23992] ? __pfx_hfsplus_mount+0x10/0x10 [ 1773.000254][T23992] legacy_get_tree+0x109/0x220 [ 1773.005015][T23992] vfs_get_tree+0x8f/0x380 [ 1773.009427][T23992] path_mount+0x14e6/0x1f20 [ 1773.013947][T23992] ? kmem_cache_free+0x152/0x4b0 [ 1773.018887][T23992] ? __pfx_path_mount+0x10/0x10 [ 1773.023732][T23992] ? putname+0x12e/0x170 [ 1773.027977][T23992] __x64_sys_mount+0x294/0x320 [ 1773.032749][T23992] ? __pfx___x64_sys_mount+0x10/0x10 [ 1773.038044][T23992] do_syscall_64+0xcd/0x250 [ 1773.042536][T23992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.048430][T23992] RIP: 0033:0x7f9894d7e719 [ 1773.052892][T23992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.072494][T23992] RSP: 002b:00007f98931d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1773.080898][T23992] RAX: ffffffffffffffda RBX: 00007f9894f36130 RCX: 00007f9894d7e719 [ 1773.088908][T23992] RDX: 0000000020000040 RSI: 00000000200001c0 RDI: 0000000020000000 [ 1773.096882][T23992] RBP: 00007f98931d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.104837][T23992] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 1773.112786][T23992] R13: 0000000000000000 R14: 00007f9894f36130 R15: 00007ffe0d6eb2b8 [ 1773.120756][T23992] [ 1773.910293][T24005] syz.7.4558[24005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1773.910899][T24005] syz.7.4558[24005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1774.086305][T24005] syz.7.4558[24005] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1777.684329][T24035] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1777.914187][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1777.914206][ T30] audit: type=1400 audit(1730775859.036:2563): avc: denied { read } for pid=24033 comm="syz.5.4564" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1778.954681][ T30] audit: type=1400 audit(1730775859.036:2564): avc: denied { open } for pid=24033 comm="syz.5.4564" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1780.179800][ T30] audit: type=1400 audit(1730775861.516:2565): avc: denied { create } for pid=24052 comm="syz.7.4570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1780.245709][T24055] syz.0.4571[24055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.245775][T24055] syz.0.4571[24055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.293044][T24055] syz.0.4571[24055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1780.304088][ T30] audit: type=1400 audit(1730775861.606:2566): avc: denied { write } for pid=24052 comm="syz.7.4570" path="socket:[75807]" dev="sockfs" ino=75807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1781.905526][T24067] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4568'. [ 1782.842656][T24077] syz.7.4576[24077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1782.842744][T24077] syz.7.4576[24077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1782.882877][T24077] syz.7.4576[24077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1784.403554][T17215] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1784.588744][T17215] usb 10-1: Using ep0 maxpacket: 16 [ 1784.618452][T17215] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1785.083518][T17215] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1785.093492][T17215] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1785.104856][T17215] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1785.928794][T17215] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1785.938541][T17215] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.946715][T17215] usb 10-1: Product: syz [ 1785.950979][T17215] usb 10-1: Manufacturer: syz [ 1785.955747][T17215] usb 10-1: SerialNumber: syz [ 1786.225144][ T30] audit: type=1400 audit(1730775867.546:2567): avc: denied { write } for pid=24095 comm="syz.8.4582" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1786.270673][T24102] syz.0.4583[24102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1786.270767][T24102] syz.0.4583[24102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1786.285297][T24102] syz.0.4583[24102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1787.696291][T24125] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 1787.815246][T17215] usb 10-1: USB disconnect, device number 2 [ 1787.829191][T24127] syz.5.4589[24127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1787.829278][T24127] syz.5.4589[24127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1787.882907][T24127] syz.5.4589[24127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1788.287023][T23866] udevd[23866]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1788.391788][T24141] openvswitch: : Dropping previously announced user features [ 1789.348910][T24146] rdma_rxe: rxe_newlink: failed to add bond0 [ 1789.939316][T24148] hsr0: entered allmulticast mode [ 1789.945148][T24148] hsr_slave_0: entered allmulticast mode [ 1789.953674][T24148] hsr_slave_1: entered allmulticast mode [ 1790.083552][T24149] hsr_slave_0: left promiscuous mode [ 1790.092176][T24153] syz.8.4596[24153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1790.092305][T24153] syz.8.4596[24153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1790.104077][T24153] syz.8.4596[24153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1790.554053][ T8] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1790.855637][T24149] hsr_slave_1: left promiscuous mode [ 1791.491681][ T8] usb 10-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 1791.514703][ T8] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1791.543994][T24149] hsr0 (unregistering): left allmulticast mode [ 1791.559044][ T8] usb 10-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1791.574458][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.679833][ T8] usb 10-1: config 0 descriptor?? [ 1792.909720][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.916551][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.288613][ T8] usb 10-1: USB disconnect, device number 3 [ 1793.411777][T24203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4605'. [ 1793.801274][T24212] syz1: rxe_newlink: already configured on bond0 [ 1794.737724][T24218] FAULT_INJECTION: forcing a failure. [ 1794.737724][T24218] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.750803][T24218] CPU: 1 UID: 0 PID: 24218 Comm: syz.5.4610 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1794.761584][T24218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1794.771632][T24218] Call Trace: [ 1794.774901][T24218] [ 1794.777820][T24218] dump_stack_lvl+0x16c/0x1f0 [ 1794.782496][T24218] should_fail_ex+0x497/0x5b0 [ 1794.787166][T24218] ? fs_reclaim_acquire+0xae/0x150 [ 1794.792267][T24218] should_failslab+0xc2/0x120 [ 1794.796937][T24218] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1794.802732][T24218] ? __alloc_skb+0x2b1/0x380 [ 1794.807339][T24218] __alloc_skb+0x2b1/0x380 [ 1794.811774][T24218] ? __pfx___alloc_skb+0x10/0x10 [ 1794.816713][T24218] ? genl_rcv_msg+0x4f0/0x800 [ 1794.821388][T24218] ? genl_rcv_msg+0x4bd/0x800 [ 1794.826068][T24218] netlink_ack+0x164/0xb90 [ 1794.830487][T24218] netlink_rcv_skb+0x348/0x440 [ 1794.835246][T24218] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1794.840262][T24218] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1794.845547][T24218] ? down_read+0xc9/0x330 [ 1794.849874][T24218] ? __pfx_down_read+0x10/0x10 [ 1794.854633][T24218] ? netlink_deliver_tap+0x1ae/0xd90 [ 1794.859920][T24218] genl_rcv+0x28/0x40 [ 1794.863893][T24218] netlink_unicast+0x53c/0x7f0 [ 1794.868667][T24218] ? __pfx_netlink_unicast+0x10/0x10 [ 1794.873971][T24218] netlink_sendmsg+0x8b8/0xd70 [ 1794.878733][T24218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1794.884014][T24218] ____sys_sendmsg+0xaaf/0xc90 [ 1794.888774][T24218] ? copy_msghdr_from_user+0x10b/0x160 [ 1794.894227][T24218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1794.899522][T24218] ? __pfx___lock_acquire+0x10/0x10 [ 1794.904715][T24218] ___sys_sendmsg+0x135/0x1e0 [ 1794.909385][T24218] ? __pfx____sys_sendmsg+0x10/0x10 [ 1794.914586][T24218] ? lock_acquire+0x2f/0xb0 [ 1794.919076][T24218] ? __fget_files+0x40/0x3f0 [ 1794.923671][T24218] ? fdget+0x176/0x210 [ 1794.927741][T24218] __sys_sendmsg+0x117/0x1f0 [ 1794.932340][T24218] ? __pfx___sys_sendmsg+0x10/0x10 [ 1794.937456][T24218] ? __fget_files+0x244/0x3f0 [ 1794.942151][T24218] do_syscall_64+0xcd/0x250 [ 1794.946650][T24218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.952545][T24218] RIP: 0033:0x7fea2fd7e719 [ 1794.956978][T24218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.976588][T24218] RSP: 002b:00007fea2e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1794.984996][T24218] RAX: ffffffffffffffda RBX: 00007fea2ff35f80 RCX: 00007fea2fd7e719 [ 1794.992956][T24218] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1795.000916][T24218] RBP: 00007fea2e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.009223][T24218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.017184][T24218] R13: 0000000000000000 R14: 00007fea2ff35f80 R15: 00007ffc703410b8 [ 1795.025154][T24218] [ 1795.123537][T24222] syz.5.4612[24222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.123627][T24222] syz.5.4612[24222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.187633][T24222] syz.5.4612[24222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1795.316919][T24220] xt_socket: unknown flags 0x2 [ 1796.861225][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4618'. [ 1797.804838][T24257] netlink: 'syz.8.4621': attribute type 1 has an invalid length. [ 1797.838080][T24257] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4621'. [ 1797.850438][T24257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1797.861039][T24257] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 1797.942384][T24257] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 1798.019349][T24257] bond1 (unregistering): Released all slaves [ 1798.152756][T24263] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1800.037671][T24292] syz.8.4629[24292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.038298][T24292] syz.8.4629[24292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.063136][T24294] syz.0.4628[24294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.063699][T24292] syz.8.4629[24292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.081567][T24294] syz.0.4628[24294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1800.100321][T24290] xt_socket: unknown flags 0x2 [ 1800.106885][T24294] syz.0.4628[24294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1802.357108][ T30] audit: type=1400 audit(1730775883.699:2568): avc: denied { create } for pid=24310 comm="syz.7.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1802.432752][T24323] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1802.440959][ T30] audit: type=1400 audit(1730775883.739:2569): avc: denied { setopt } for pid=24310 comm="syz.7.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1802.476993][ T5836] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1802.495062][T24323] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1802.521750][T24310] delete_channel: no stack [ 1802.543484][ T30] audit: type=1400 audit(1730775883.739:2570): avc: denied { write } for pid=24310 comm="syz.7.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1802.564654][ T30] audit: type=1400 audit(1730775883.829:2571): avc: denied { bind } for pid=24310 comm="syz.7.4634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1803.145330][T24347] openvswitch: : Dropping previously announced user features [ 1805.401404][T24358] syz.0.4648[24358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1805.401497][T24358] syz.0.4648[24358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1805.413153][T24358] syz.0.4648[24358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1805.429087][ T30] audit: type=1400 audit(1730775886.749:2572): avc: denied { write } for pid=24354 comm="syz.9.4649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1806.355805][ T30] audit: type=1400 audit(1730775887.699:2573): avc: denied { ioctl } for pid=24363 comm="syz.8.4650" path="socket:[76446]" dev="sockfs" ino=76446 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1806.620345][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1806.627917][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1807.057945][T24380] ceph: No mds server is up or the cluster is laggy [ 1807.292614][ T30] audit: type=1400 audit(1730775888.589:2574): avc: denied { write } for pid=24388 comm="syz.5.4658" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1807.294971][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 1807.295151][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 1807.508523][ T30] audit: type=1400 audit(1730775888.829:2575): avc: denied { listen } for pid=24388 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1807.614241][T24397] FAULT_INJECTION: forcing a failure. [ 1807.614241][T24397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1807.627863][T24397] CPU: 1 UID: 0 PID: 24397 Comm: syz.9.4660 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1807.638646][T24397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1807.648695][T24397] Call Trace: [ 1807.651965][T24397] [ 1807.654888][T24397] dump_stack_lvl+0x16c/0x1f0 [ 1807.659562][T24397] should_fail_ex+0x497/0x5b0 [ 1807.664234][T24397] _copy_from_user+0x2e/0xd0 [ 1807.668822][T24397] memdup_user+0x71/0xd0 [ 1807.673063][T24397] strndup_user+0x78/0xe0 [ 1807.677380][T24397] __x64_sys_mount+0x138/0x320 [ 1807.682131][T24397] ? __pfx___x64_sys_mount+0x10/0x10 [ 1807.687405][T24397] do_syscall_64+0xcd/0x250 [ 1807.691896][T24397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1807.697782][T24397] RIP: 0033:0x7f1ff197e719 [ 1807.702185][T24397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1807.721867][T24397] RSP: 002b:00007f1fefdf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1807.730274][T24397] RAX: ffffffffffffffda RBX: 00007f1ff1b36130 RCX: 00007f1ff197e719 [ 1807.738236][T24397] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000020000040 [ 1807.746192][T24397] RBP: 00007f1fefdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.754156][T24397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.762114][T24397] R13: 0000000000000000 R14: 00007f1ff1b36130 R15: 00007ffe9d8d2488 [ 1807.770083][T24397] [ 1808.489927][ T30] audit: type=1400 audit(1730775888.829:2576): avc: denied { accept } for pid=24388 comm="syz.5.4658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1808.583750][ T30] audit: type=1400 audit(1730775888.839:2577): avc: denied { write } for pid=24391 comm="syz.0.4659" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1808.644803][T24401] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4661'. [ 1808.693676][ T965] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1808.785738][ T30] audit: type=1326 audit(1730775890.129:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1808.955900][T24404] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4662'. [ 1808.969059][T24412] syz.9.4665[24412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.969153][T24412] syz.9.4665[24412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.983045][T24412] syz.9.4665[24412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1808.993620][ T30] audit: type=1326 audit(1730775890.169:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1809.592724][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 1809.724270][ T30] audit: type=1326 audit(1730775890.169:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1809.762205][ T30] audit: type=1326 audit(1730775890.169:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1809.786203][ T30] audit: type=1326 audit(1730775890.169:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1809.890907][ T30] audit: type=1400 audit(1730775890.169:2583): avc: denied { getopt } for pid=24403 comm="syz.7.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1809.911552][ T30] audit: type=1326 audit(1730775890.179:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24402 comm="syz.5.4662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea2fd7e719 code=0x7ffc0000 [ 1809.953277][ T965] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 1809.962900][ T965] usb 1-1: config 56 has an invalid interface number: 191 but max is 0 [ 1809.971687][ T965] usb 1-1: config 56 descriptor has 1 excess byte, ignoring [ 1809.979582][ T965] usb 1-1: config 56 has no interface number 0 [ 1809.993573][ T965] usb 1-1: too many endpoints for config 56 interface 191 altsetting 98: 229, using maximum allowed: 30 [ 1810.017574][ T965] usb 1-1: config 56 interface 191 altsetting 98 bulk endpoint 0x1 has invalid maxpacket 640 [ 1810.038022][ T965] usb 1-1: config 56 interface 191 altsetting 98 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.078219][ T965] usb 1-1: config 56 interface 191 altsetting 98 bulk endpoint 0x81 has invalid maxpacket 0 [ 1810.109224][ T965] usb 1-1: config 56 interface 191 altsetting 98 has 2 endpoint descriptors, different from the interface descriptor's value: 229 [ 1810.514945][ T965] usb 1-1: config 56 interface 191 has no altsetting 0 [ 1810.853930][T24428] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4670'. [ 1811.043726][ T965] usb 1-1: string descriptor 0 read error: -71 [ 1811.049969][ T965] usb 1-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=f8.11 [ 1811.059118][ T965] usb 1-1: New USB device strings: Mfr=13, Product=0, SerialNumber=0 [ 1812.022537][ T965] usb 1-1: can't set config #56, error -71 [ 1812.042283][ T965] usb 1-1: USB disconnect, device number 59 [ 1812.461991][T24454] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4675'. [ 1812.529214][T24455] rdma_rxe: rxe_newlink: failed to add bond0 [ 1815.234827][T24476] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4682'. [ 1816.287627][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1816.287645][ T30] audit: type=1400 audit(1730775897.629:2618): avc: denied { write } for pid=24488 comm="syz.0.4687" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1816.331091][ T30] audit: type=1400 audit(1730775897.669:2619): avc: denied { bind } for pid=24488 comm="syz.0.4687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1816.351330][ T30] audit: type=1400 audit(1730775897.669:2620): avc: denied { write } for pid=24488 comm="syz.0.4687" path="socket:[76661]" dev="sockfs" ino=76661 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1816.713719][ T8] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1816.880591][ T8] usb 1-1: not running at top speed; connect to a high speed hub [ 1816.948120][ T965] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1816.966327][ T8] usb 1-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.020807][ T8] usb 1-1: config 247 has 1 interface, different from the descriptor's value: 2 [ 1817.061232][ T8] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=90.6c [ 1817.089731][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.103664][ T965] usb 9-1: Using ep0 maxpacket: 32 [ 1817.139005][ T965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.160935][ T8] usb 1-1: Product: syz [ 1817.183366][ T8] usb 1-1: Manufacturer: syz [ 1817.193675][ T965] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.213768][ T8] usb 1-1: SerialNumber: syz [ 1817.259093][ T965] usb 9-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice=21.00 [ 1817.313931][ T965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.385027][ T965] usb 9-1: config 0 descriptor?? [ 1818.314465][ T8] ch9200 1-1:247.0: probe with driver ch9200 failed with error -22 [ 1818.358413][ T8] usb 1-1: USB disconnect, device number 60 [ 1818.628315][ T965] usbhid 9-1:0.0: can't add hid device: -71 [ 1818.634836][ T965] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1818.663230][ T965] usb 9-1: USB disconnect, device number 9 [ 1818.678569][T24518] rdma_rxe: rxe_newlink: failed to add bond0 [ 1818.703532][ T5877] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1818.883868][ T5877] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1818.895312][ T5877] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.914671][ T5877] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1818.934385][ T5877] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.129171][ T5877] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1819.138444][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1819.146654][ T5877] usb 8-1: Product: syz [ 1819.150905][ T5877] usb 8-1: Manufacturer: syz [ 1819.161163][ T5877] cdc_wdm 8-1:1.0: skipping garbage [ 1819.166504][ T5877] cdc_wdm 8-1:1.0: skipping garbage [ 1819.175765][ T5877] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1819.182662][ T5877] cdc_wdm 8-1:1.0: Unknown control protocol [ 1819.750406][ T8] usb 8-1: USB disconnect, device number 7 [ 1819.973040][ T2998] Bluetooth: (null): Invalid header checksum [ 1819.989411][ T2998] Bluetooth: (null): Invalid header checksum [ 1820.076931][ T52] Bluetooth: (null): Invalid header checksum [ 1820.123543][T17215] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1820.186814][ T12] Bluetooth: (null): Invalid header checksum [ 1820.273866][T17215] usb 9-1: Using ep0 maxpacket: 8 [ 1820.280317][T17215] usb 9-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 1820.296333][T13765] Bluetooth: (null): Invalid header checksum [ 1820.337953][T17215] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1820.363614][T17215] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1820.385225][T17215] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.406251][ T12] Bluetooth: (null): Invalid header checksum [ 1820.429029][T17215] usb 9-1: config 0 descriptor?? [ 1820.463499][ T5877] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1820.521596][T13765] Bluetooth: (null): Invalid header checksum [ 1820.645090][T24543] xt_socket: unknown flags 0x2 [ 1820.710855][T13765] Bluetooth: (null): Invalid header checksum [ 1820.719635][ T5877] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.735407][ T5877] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1820.764095][T13765] Bluetooth: (null): Invalid header checksum [ 1820.786499][ T5877] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1820.832265][ T5877] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1820.853865][T14758] Bluetooth: (null): Invalid header checksum [ 1820.889327][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.919604][T24539] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1820.932162][ T5877] hub 10-1:1.0: bad descriptor, ignoring hub [ 1820.949025][ T5877] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1820.954695][ T52] Bluetooth: (null): Invalid header checksum [ 1820.969864][ T5877] cdc_wdm 10-1:1.0: skipping garbage [ 1820.986993][ T5877] cdc_wdm 10-1:1.0: skipping garbage [ 1821.007074][ T5877] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1821.022479][ T5877] cdc_wdm 10-1:1.0: Unknown control protocol [ 1821.064347][T14758] Bluetooth: (null): Invalid header checksum [ 1821.083572][ T965] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1821.177148][ T52] Bluetooth: (null): Invalid header checksum [ 1821.190201][T24557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.216659][T24557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.240920][T24557] netlink: 'syz.9.4700': attribute type 1 has an invalid length. [ 1821.261242][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.268132][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.283994][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.290718][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.297429][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.304132][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.310570][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.317272][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.323688][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.330391][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.336750][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.343454][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.353757][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.360476][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.367232][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.373942][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.383997][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.390709][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.397475][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1821.404185][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1821.481978][T24559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.525435][ T965] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1821.557375][T24559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.581079][ T965] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.632955][ T965] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1821.664169][T18758] usb 9-1: USB disconnect, device number 10 [ 1821.681631][ T965] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1821.781204][ T965] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1821.822110][ T965] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1821.882518][T24566] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4706'. [ 1821.915694][ T965] usb 6-1: Product: syz [ 1821.931942][ T965] usb 6-1: Manufacturer: syz [ 1821.968902][ T965] cdc_wdm 6-1:1.0: skipping garbage [ 1821.997580][ T965] cdc_wdm 6-1:1.0: skipping garbage [ 1822.017530][ T965] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1822.478313][ T30] audit: type=1804 audit(1730775903.799:2621): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4704" name="/newroot/297/file1" dev="fuse" ino=1 res=1 errno=0 [ 1822.533532][ T30] audit: type=1800 audit(1730775903.799:2622): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4704" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1822.598643][T18758] usb 6-1: USB disconnect, device number 36 [ 1822.753783][ T30] audit: type=1804 audit(1730775903.799:2623): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4704" name="/newroot/297/file1" dev="fuse" ino=1 res=1 errno=0 [ 1822.776133][ T30] audit: type=1804 audit(1730775903.799:2624): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4704" name="/newroot/297/file1" dev="fuse" ino=1 res=1 errno=0 [ 1822.801122][ T30] audit: type=1800 audit(1730775903.799:2625): pid=24571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4704" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1823.692091][T24582] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1823.980765][T24587] xt_socket: unknown flags 0x2 [ 1824.040933][T17215] usb 10-1: USB disconnect, device number 4 [ 1824.703527][ T5909] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1824.749406][ T30] audit: type=1326 audit(1730775906.089:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24595 comm="syz.9.4716" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1ff197e719 code=0x0 [ 1824.985032][ T5909] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1824.996122][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1825.007859][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1825.018635][ T5909] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1825.036948][ T5909] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1825.147959][T24604] syz1: rxe_newlink: already configured on bond0 [ 1825.306681][ T5909] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1825.621500][ T5909] usb 8-1: Manufacturer: syz [ 1825.722705][ T5909] usb 8-1: config 0 descriptor?? [ 1826.527872][ T30] audit: type=1400 audit(1730775907.689:2627): avc: denied { getopt } for pid=24581 comm="syz.7.4709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1826.607485][T24619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4724'. [ 1826.790444][ T5877] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1826.803024][T24621] xt_socket: unknown flags 0x2 [ 1826.943711][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 1826.970568][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1826.982707][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1827.243765][ T5877] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 1827.318131][T24626] FAULT_INJECTION: forcing a failure. [ 1827.318131][T24626] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1827.319205][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.332204][T24626] CPU: 0 UID: 0 PID: 24626 Comm: syz.9.4721 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1827.350785][T24626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1827.360850][T24626] Call Trace: [ 1827.364139][T24626] [ 1827.364769][ T5877] usb 6-1: config 0 descriptor?? [ 1827.367060][T24626] dump_stack_lvl+0x16c/0x1f0 [ 1827.367091][T24626] should_fail_ex+0x497/0x5b0 [ 1827.381350][T24626] ? fs_reclaim_acquire+0xae/0x150 [ 1827.386482][T24626] should_fail_alloc_page+0xe7/0x130 [ 1827.391787][T24626] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1827.397956][T24626] __alloc_pages_noprof+0x190/0x25a0 [ 1827.403258][T24626] ? __schedule+0x3b3f/0x5740 [ 1827.407961][T24626] ? __pfx_mark_lock+0x10/0x10 [ 1827.412747][T24626] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1827.418480][T24626] ? __pfx___schedule+0x10/0x10 [ 1827.423355][T24626] ? __pfx___schedule+0x10/0x10 [ 1827.428232][T24626] ? irqentry_exit+0x3b/0x90 [ 1827.432849][T24626] ? lockdep_hardirqs_on+0x7c/0x110 [ 1827.438074][T24626] ? preempt_schedule_thunk+0x1a/0x30 [ 1827.443464][T24626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1827.449388][T24626] ? policy_nodemask+0xea/0x4e0 [ 1827.454264][T24626] alloc_pages_mpol_noprof+0x2c9/0x610 [ 1827.459745][T24626] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1827.465752][T24626] ? rcu_is_watching+0x12/0xc0 [ 1827.470545][T24626] folio_alloc_noprof+0x1e/0xc0 [ 1827.475409][T24626] filemap_alloc_folio_noprof+0x3b4/0x480 [ 1827.481150][T24626] ? __pfx_filemap_get_entry+0x10/0x10 [ 1827.486627][T24626] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1827.492900][T24626] __filemap_get_folio+0x539/0xaf0 [ 1827.498038][T24626] ioctx_alloc+0x757/0x1fc0 [ 1827.502553][T24626] ? __might_fault+0x13b/0x190 [ 1827.507326][T24626] ? __pfx_ioctx_alloc+0x10/0x10 [ 1827.512270][T24626] ? lock_acquire+0x2f/0xb0 [ 1827.516778][T24626] ? __might_fault+0xe3/0x190 [ 1827.521457][T24626] __x64_sys_io_setup+0xc9/0x210 [ 1827.526413][T24626] do_syscall_64+0xcd/0x250 [ 1827.530922][T24626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.536812][T24626] RIP: 0033:0x7f1ff197e719 [ 1827.541229][T24626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1827.560827][T24626] RSP: 002b:00007f1ff268f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1827.569234][T24626] RAX: ffffffffffffffda RBX: 00007f1ff1b36058 RCX: 00007f1ff197e719 [ 1827.577205][T24626] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000008000 [ 1827.585172][T24626] RBP: 00007f1ff268f090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.593156][T24626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.601136][T24626] R13: 0000000000000001 R14: 00007f1ff1b36058 R15: 00007ffe9d8d2488 [ 1827.609118][T24626] [ 1827.812316][T24613] batadv_slave_0: entered promiscuous mode [ 1828.556374][T24612] batadv_slave_0: left promiscuous mode [ 1828.674970][ T5877] usbhid 6-1:0.0: can't add hid device: -71 [ 1828.681102][ T5877] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1828.753802][ T5877] usb 6-1: USB disconnect, device number 37 [ 1829.623622][ T5909] usbhid 8-1:0.0: can't add hid device: -71 [ 1829.630386][ T5909] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1829.680016][ T5909] usb 8-1: USB disconnect, device number 8 [ 1832.128353][T24659] 9pnet: Could not find request transport: f0xffffffffffffffff [ 1832.786894][T24669] rdma_rxe: rxe_newlink: failed to add bond0 [ 1833.357874][T24672] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4736'. [ 1833.882846][T24674] capability: warning: `syz.9.4737' uses 32-bit capabilities (legacy support in use) [ 1835.062277][ T5909] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1835.993515][ T5909] usb 10-1: Using ep0 maxpacket: 16 [ 1836.004740][ T5909] usb 10-1: config 0 has no interfaces? [ 1836.025463][ T5909] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1836.060500][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.079294][ T5909] usb 10-1: Product: syz [ 1836.089663][ T5909] usb 10-1: Manufacturer: syz [ 1836.099896][ T5909] usb 10-1: SerialNumber: syz [ 1836.111691][ T5909] usb 10-1: config 0 descriptor?? [ 1838.110896][ T965] usb 10-1: USB disconnect, device number 5 [ 1838.564845][T24716] netlink: 'syz.7.4747': attribute type 29 has an invalid length. [ 1839.036567][T24733] IPVS: length: 178 != 8 [ 1839.142507][T24735] rdma_rxe: rxe_newlink: failed to add bond0 [ 1840.967400][T24758] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4758'. [ 1841.477737][ T30] audit: type=1804 audit(1730775922.819:2628): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4751" name="/newroot/305/file1" dev="fuse" ino=1 res=1 errno=0 [ 1841.520399][ T30] audit: type=1800 audit(1730775922.819:2629): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4751" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1841.607391][ T30] audit: type=1804 audit(1730775922.829:2630): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4751" name="/newroot/305/file1" dev="fuse" ino=1 res=1 errno=0 [ 1841.698279][ T30] audit: type=1804 audit(1730775922.829:2631): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.4751" name="/newroot/305/file1" dev="fuse" ino=1 res=1 errno=0 [ 1841.754934][ T30] audit: type=1800 audit(1730775922.829:2632): pid=24766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4751" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1843.604684][T19212] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1843.773951][T19212] usb 1-1: Using ep0 maxpacket: 32 [ 1843.792322][T19212] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 1843.811351][T19212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.823171][T19212] usb 1-1: Product: syz [ 1843.838800][T19212] usb 1-1: Manufacturer: syz [ 1843.845590][T19212] usb 1-1: SerialNumber: syz [ 1843.852422][T19212] usb 1-1: config 0 descriptor?? [ 1844.093198][T19212] usb 1-1: USB disconnect, device number 61 [ 1844.920685][T24810] xt_socket: unknown flags 0x2 [ 1846.362398][T24825] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1846.373535][T24825] qnx6: wrong signature (magic) in superblock #1. [ 1846.379969][T24825] qnx6: unable to read the first superblock [ 1846.746806][ T5909] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1847.077731][ T5909] usb 9-1: Using ep0 maxpacket: 32 [ 1847.190947][ T5909] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1847.207411][ T5909] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1847.396874][ T5909] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1847.425131][ T5909] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1847.449683][ T5909] usb 9-1: Product: syz [ 1847.457688][ T5909] usb 9-1: Manufacturer: syz [ 1847.471788][ T5909] hub 9-1:4.0: USB hub found [ 1847.673476][T18758] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1847.827935][T18758] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1847.847953][T18758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1847.864777][T18758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1847.874533][ T5909] hub 9-1:4.0: config failed, can't read hub descriptor (err -22) [ 1847.884883][T18758] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1847.902569][T18758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.927593][T24835] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1847.942335][T18758] hub 1-1:1.0: bad descriptor, ignoring hub [ 1847.954674][T18758] hub 1-1:1.0: probe with driver hub failed with error -5 [ 1847.969604][T18758] cdc_wdm 1-1:1.0: skipping garbage [ 1847.979871][T18758] cdc_wdm 1-1:1.0: skipping garbage [ 1847.990196][T18758] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1848.001959][T18758] cdc_wdm 1-1:1.0: Unknown control protocol [ 1848.230443][T24849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1848.233572][ T30] audit: type=1400 audit(1730775929.569:2633): avc: denied { ioctl } for pid=24847 comm="syz.5.4781" path="socket:[77473]" dev="sockfs" ino=77473 ioctlcmd=0x8942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1848.252058][T24849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1848.289163][T24848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1848.309166][T24848] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1848.338322][T24835] netlink: 'syz.0.4777': attribute type 1 has an invalid length. [ 1848.347714][ T30] audit: type=1400 audit(1730775929.679:2634): avc: denied { ioctl } for pid=24847 comm="syz.5.4781" path="socket:[77471]" dev="sockfs" ino=77471 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1848.382573][T24848] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 1848.389463][T24848] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1848.430991][T24848] vhci_hcd vhci_hcd.0: Device attached [ 1848.784229][ C0] wdm_int_callback: 406 callbacks suppressed [ 1848.784264][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.796886][ C0] wdm_int_callback: 406 callbacks suppressed [ 1848.796910][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.813824][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.820496][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.828869][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.835496][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.841822][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.848462][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.854771][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.861390][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.867657][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.874270][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.880535][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.887142][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.894721][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.901354][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.901747][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.914185][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1848.921952][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1848.928600][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1849.104021][ T5909] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1849.233891][T19212] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1849.463697][T19212] usb 6-1: Using ep0 maxpacket: 16 [ 1849.490635][T19212] usb 6-1: config 0 has no interfaces? [ 1849.509586][T19212] usb 6-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 1849.551264][T19212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.589087][T19212] usb 6-1: Product: syz [ 1849.601729][T19212] usb 6-1: Manufacturer: syz [ 1849.613241][T19212] usb 6-1: SerialNumber: syz [ 1849.646607][T19212] apple-mfi-fastcharge 6-1: config 0 descriptor?? [ 1849.851072][ T965] usb 9-1: USB disconnect, device number 11 [ 1850.683832][ T9621] usb 1-1: USB disconnect, device number 62 [ 1851.804292][T24914] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1852.854298][ T5905] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1853.603483][ T5905] usb 8-1: Using ep0 maxpacket: 8 [ 1853.619488][ T5905] usb 8-1: config 0 has an invalid interface number: 126 but max is 0 [ 1853.639214][ T5905] usb 8-1: config 0 has an invalid interface number: 90 but max is 0 [ 1853.654670][ T5905] usb 8-1: config 0 has an invalid interface number: 201 but max is 0 [ 1853.666474][ T5905] usb 8-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 1853.675730][ T5905] usb 8-1: config 0 has no interface number 0 [ 1853.682005][ T5905] usb 8-1: config 0 has no interface number 1 [ 1853.688502][ T5905] usb 8-1: config 0 has no interface number 2 [ 1853.696016][ T5905] usb 8-1: config 0 interface 126 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1853.714381][ T5905] usb 8-1: config 0 interface 126 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 1853.728815][ T5905] usb 8-1: too many endpoints for config 0 interface 90 altsetting 160: 245, using maximum allowed: 30 [ 1853.747151][ T5905] usb 8-1: config 0 interface 90 altsetting 160 has an endpoint descriptor with address 0x11, changing to 0x1 [ 1853.799513][ T5905] usb 8-1: config 0 interface 90 altsetting 160 endpoint 0x1 has invalid maxpacket 26343, setting to 64 [ 1853.825095][ T30] audit: type=1400 audit(1730775935.169:2635): avc: denied { append } for pid=24956 comm="syz.8.4799" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1853.881610][ T30] audit: type=1400 audit(1730775935.189:2636): avc: denied { map } for pid=24956 comm="syz.8.4799" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1853.929854][ T30] audit: type=1400 audit(1730775935.189:2637): avc: denied { execute } for pid=24956 comm="syz.8.4799" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1853.972064][ T5905] usb 8-1: config 0 interface 90 altsetting 160 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1854.002205][ T5905] usb 8-1: config 0 interface 90 altsetting 160 has a duplicate endpoint with address 0x7, skipping [ 1854.133789][ T5905] usb 8-1: config 0 interface 90 altsetting 160 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1854.145508][ T5905] usb 8-1: config 0 interface 90 altsetting 160 has 9 endpoint descriptors, different from the interface descriptor's value: 245 [ 1854.159307][ T5905] usb 8-1: too many endpoints for config 0 interface 201 altsetting 252: 77, using maximum allowed: 30 [ 1854.170654][ T5905] usb 8-1: config 0 interface 201 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 1854.181582][ T5905] usb 8-1: config 0 interface 201 altsetting 252 has a duplicate endpoint with address 0x7, skipping [ 1854.192594][ T5905] usb 8-1: config 0 interface 201 altsetting 252 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1854.202991][ T5905] usb 8-1: config 0 interface 201 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 1854.215302][ T5905] usb 8-1: config 0 interface 201 altsetting 252 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1854.231272][ T5905] usb 8-1: config 0 interface 201 altsetting 252 has a duplicate endpoint with address 0xC, skipping [ 1854.243081][ T5905] usb 8-1: config 0 interface 201 altsetting 252 has 7 endpoint descriptors, different from the interface descriptor's value: 77 [ 1854.256927][ T5905] usb 8-1: config 0 interface 90 has no altsetting 0 [ 1854.264002][ T5905] usb 8-1: config 0 interface 201 has no altsetting 0 [ 1854.276207][ T5905] usb 8-1: New USB device found, idVendor=1a8d, idProduct=1005, bcdDevice=1c.87 [ 1854.286456][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.294549][ T5905] usb 8-1: Product: syz [ 1854.298740][ T5905] usb 8-1: Manufacturer: syz [ 1854.303350][ T5905] usb 8-1: SerialNumber: syz [ 1854.309927][ T5905] usb 8-1: config 0 descriptor?? [ 1854.318041][ T5905] option 8-1:0.126: GSM modem (1-port) converter detected [ 1854.347212][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.363085][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.627523][ T5905] usb 8-1: USB disconnect, device number 9 [ 1855.700424][T24980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1855.716535][ T5905] option 8-1:0.126: device disconnected [ 1855.967515][T24988] FAULT_INJECTION: forcing a failure. [ 1855.967515][T24988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1855.980851][T24988] CPU: 1 UID: 0 PID: 24988 Comm: syz.0.4808 Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 1855.991643][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1856.001706][T24988] Call Trace: [ 1856.004986][T24988] [ 1856.007922][T24988] dump_stack_lvl+0x16c/0x1f0 [ 1856.012619][T24988] should_fail_ex+0x497/0x5b0 [ 1856.017314][T24988] _copy_to_user+0x32/0xd0 [ 1856.021746][T24988] simple_read_from_buffer+0xd0/0x160 [ 1856.027130][T24988] proc_fail_nth_read+0x198/0x270 [ 1856.032165][T24988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1856.037734][T24988] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1856.043292][T24988] vfs_read+0x1df/0xbe0 [ 1856.047463][T24988] ? __fget_files+0x23a/0x3f0 [ 1856.052150][T24988] ? fdget_pos+0x24c/0x360 [ 1856.056572][T24988] ? __pfx_lock_release+0x10/0x10 [ 1856.061609][T24988] ? trace_lock_acquire+0x14a/0x1d0 [ 1856.066823][T24988] ? __pfx_vfs_read+0x10/0x10 [ 1856.071509][T24988] ? __pfx___mutex_lock+0x10/0x10 [ 1856.076545][T24988] ? __fget_files+0x244/0x3f0 [ 1856.081246][T24988] ksys_read+0x12f/0x260 [ 1856.085509][T24988] ? __pfx_ksys_read+0x10/0x10 [ 1856.090295][T24988] do_syscall_64+0xcd/0x250 [ 1856.094803][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.100707][T24988] RIP: 0033:0x7f9894d7d15c [ 1856.105124][T24988] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1856.124736][T24988] RSP: 002b:00007f98931d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1856.133163][T24988] RAX: ffffffffffffffda RBX: 00007f9894f36130 RCX: 00007f9894d7d15c [ 1856.141142][T24988] RDX: 000000000000000f RSI: 00007f98931d50a0 RDI: 0000000000000007 [ 1856.149120][T24988] RBP: 00007f98931d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.157092][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.165077][T24988] R13: 0000000000000000 R14: 00007f9894f36130 R15: 00007ffe0d6eb2b8 [ 1856.173069][T24988] [ 1915.785648][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.791980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.224991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.231338][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2018.183590][ T31] INFO: task kworker/0:7:5909 blocked for more than 143 seconds. [ 2018.191369][ T31] Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 2018.199969][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2018.208745][ T31] task:kworker/0:7 state:D stack:20464 pid:5909 tgid:5909 ppid:2 flags:0x00004000 [ 2018.219113][ T31] Workqueue: usb_hub_wq hub_event [ 2018.224282][ T31] Call Trace: [ 2018.227562][ T31] [ 2018.230476][ T31] __schedule+0xe55/0x5740 [ 2018.235005][ T31] ? __pfx_mark_lock+0x10/0x10 [ 2018.239775][ T31] ? lock_acquire.part.0+0x11b/0x380 [ 2018.245379][ T31] ? find_held_lock+0x2d/0x110 [ 2018.250169][ T31] ? __pfx___schedule+0x10/0x10 [ 2018.255116][ T31] ? schedule+0x298/0x350 [ 2018.259878][ T31] ? __pfx_lock_release+0x10/0x10 [ 2018.265211][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.270435][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2018.275699][ T31] schedule+0xe7/0x350 [ 2018.279788][ T31] usb_kill_urb.part.0+0x1ca/0x250 [ 2018.285772][ T31] ? __pfx_usb_kill_urb.part.0+0x10/0x10 [ 2018.291434][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2018.297595][ T31] ? __pfx___might_resched+0x10/0x10 [ 2018.302904][ T31] usb_kill_urb+0x83/0xa0 [ 2018.307336][ T31] usb_start_wait_urb+0x255/0x4c0 [ 2018.312381][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2018.318136][ T31] ? usb_init_urb+0x38/0x130 [ 2018.322742][ T31] usb_control_msg+0x327/0x4b0 [ 2018.327558][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 2018.332848][ T31] ? __pfx_hub_port_reset+0x10/0x10 [ 2018.338098][ T31] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 2018.344364][ T31] hub_port_init+0x693/0x3a40 [ 2018.349046][ T31] hub_event+0x2b4f/0x4e10 [ 2018.353762][ T31] ? __pfx_hub_event+0x10/0x10 [ 2018.358562][ T31] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2018.364781][ T31] ? rcu_is_watching+0x12/0xc0 [ 2018.369560][ T31] ? trace_lock_acquire+0x14a/0x1d0 [ 2018.374831][ T31] ? process_one_work+0x921/0x1ba0 [ 2018.379953][ T31] ? lock_acquire+0x2f/0xb0 [ 2018.384532][ T31] ? process_one_work+0x921/0x1ba0 [ 2018.390488][ T31] process_one_work+0x9c5/0x1ba0 [ 2018.395492][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 2018.400778][ T31] ? __pfx_process_one_work+0x10/0x10 [ 2018.406230][ T31] ? assign_work+0x1a0/0x250 [ 2018.410834][ T31] worker_thread+0x6c8/0xf00 [ 2018.415521][ T31] ? __kthread_parkme+0x148/0x220 [ 2018.420562][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2018.425758][ T31] kthread+0x2c1/0x3a0 [ 2018.429840][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.435103][ T31] ? __pfx_kthread+0x10/0x10 [ 2018.439714][ T31] ret_from_fork+0x45/0x80 [ 2018.444193][ T31] ? __pfx_kthread+0x10/0x10 [ 2018.448804][ T31] ret_from_fork_asm+0x1a/0x30 [ 2018.453687][ T31] [ 2018.456771][ T31] [ 2018.456771][ T31] Showing all locks held in the system: [ 2018.465337][ T31] 2 locks held by kworker/u8:1/12: [ 2018.470477][ T31] #0: ffff8880b873ee98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 2018.480427][ T31] #1: ffff8880b8728a48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x203/0x8e0 [ 2018.492519][ T31] 1 lock held by khungtaskd/31: [ 2018.497476][ T31] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 2018.507421][ T31] 2 locks held by getty/5595: [ 2018.512078][ T31] #0: ffff888031a0a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2018.521875][ T31] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 2018.532059][ T31] 5 locks held by kworker/0:7/5909: [ 2018.537288][ T31] #0: ffff8881442ead48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2018.548138][ T31] #1: ffffc900042e7d80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2018.559421][ T31] #2: ffff888029f6f190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 2018.568925][ T31] #3: ffff888029fea510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27ec/0x4e10 [ 2018.579192][ T31] #4: ffff888029ba1f68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2815/0x4e10 [ 2018.589010][ T31] [ 2018.591947][ T31] ============================================= [ 2018.591947][ T31] [ 2018.600442][ T31] NMI backtrace for cpu 0 [ 2018.604772][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 2018.615247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2018.625283][ T31] Call Trace: [ 2018.628540][ T31] [ 2018.631449][ T31] dump_stack_lvl+0x116/0x1f0 [ 2018.636111][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 2018.641032][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2018.647012][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2018.652973][ T31] watchdog+0xf0c/0x1240 [ 2018.657218][ T31] ? __pfx_watchdog+0x10/0x10 [ 2018.661909][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2018.667113][ T31] ? __kthread_parkme+0x148/0x220 [ 2018.672120][ T31] ? __pfx_watchdog+0x10/0x10 [ 2018.676775][ T31] kthread+0x2c1/0x3a0 [ 2018.680821][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2018.686000][ T31] ? __pfx_kthread+0x10/0x10 [ 2018.690567][ T31] ret_from_fork+0x45/0x80 [ 2018.694962][ T31] ? __pfx_kthread+0x10/0x10 [ 2018.699536][ T31] ret_from_fork_asm+0x1a/0x30 [ 2018.704306][ T31] [ 2018.708441][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2018.714377][ C1] NMI backtrace for cpu 1 [ 2018.714389][ C1] CPU: 1 UID: 0 PID: 5191 Comm: klogd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 2018.714409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2018.714418][ C1] RIP: 0010:avc_lookup+0xcf/0x1d0 [ 2018.714444][ C1] Code: 00 00 e8 f4 60 47 fd 48 83 eb 28 e8 eb 60 47 fd 48 85 db 0f 84 c4 00 00 00 e8 dd 60 47 fd 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 74 08 3c 03 0f 8e bc 00 00 00 8b 2b 44 89 ef 89 ee e8 39 62 [ 2018.714460][ C1] RSP: 0018:ffffc90004a9f938 EFLAGS: 00000a02 [ 2018.714475][ C1] RAX: 0000000000000000 RBX: ffff88807b5730d0 RCX: ffffffff84461a97 [ 2018.714487][ C1] RDX: ffff88807b4d8000 RSI: ffffffff84461a73 RDI: ffff88807b47ed28 [ 2018.714499][ C1] RBP: 0000000000000092 R08: 0000000000000004 R09: 000000000000004e [ 2018.714510][ C1] R10: 0000000000000092 R11: 0000000000000000 R12: dffffc0000000000 [ 2018.714521][ C1] R13: 000000000000004e R14: 0000000000000019 R15: 0000000000000049 [ 2018.714532][ C1] FS: 00007fe11fecc500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2018.714550][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2018.714562][ C1] CR2: 000055bb7d5df100 CR3: 000000002ff50000 CR4: 00000000003526f0 [ 2018.714574][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2018.714584][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2018.714595][ C1] Call Trace: [ 2018.714601][ C1] [ 2018.714608][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2018.714631][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2018.714655][ C1] ? nmi_handle+0x1a9/0x5c0 [ 2018.714673][ C1] ? avc_lookup+0xcf/0x1d0 [ 2018.714691][ C1] ? default_do_nmi+0x6a/0x160 [ 2018.714711][ C1] ? exc_nmi+0x170/0x1e0 [ 2018.714729][ C1] ? end_repeat_nmi+0xf/0x53 [ 2018.714748][ C1] ? avc_lookup+0xe7/0x1d0 [ 2018.714765][ C1] ? avc_lookup+0xc3/0x1d0 [ 2018.714783][ C1] ? avc_lookup+0xcf/0x1d0 [ 2018.714801][ C1] ? avc_lookup+0xcf/0x1d0 [ 2018.714821][ C1] ? avc_lookup+0xcf/0x1d0 [ 2018.714839][ C1] [ 2018.714844][ C1] [ 2018.714851][ C1] avc_has_perm_noaudit+0x97/0x3a0 [ 2018.714873][ C1] ? __lock_acquire+0x163e/0x3ce0 [ 2018.714891][ C1] avc_has_perm+0xc1/0x1c0 [ 2018.714911][ C1] ? __pfx_avc_has_perm+0x10/0x10 [ 2018.714933][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2018.714948][ C1] ? __pfx_lock_release+0x10/0x10 [ 2018.714963][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 2018.714985][ C1] selinux_socket_unix_may_send+0x1e8/0x2b0 [ 2018.715009][ C1] ? __pfx_selinux_socket_unix_may_send+0x10/0x10 [ 2018.715034][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2018.715052][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2018.715071][ C1] ? lock_acquire+0x2f/0xb0 [ 2018.715085][ C1] ? unix_dgram_sendmsg+0x698/0x19e0 [ 2018.715112][ C1] security_unix_may_send+0x8e/0x210 [ 2018.715133][ C1] unix_dgram_sendmsg+0xe5a/0x19e0 [ 2018.715164][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2018.715191][ C1] __sys_sendto+0x479/0x4d0 [ 2018.715209][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 2018.715225][ C1] ? __pfx_lock_release+0x10/0x10 [ 2018.715240][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 2018.715264][ C1] ? rcu_is_watching+0x12/0xc0 [ 2018.715288][ C1] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 2018.715312][ C1] ? rcu_is_watching+0x12/0xc0 [ 2018.715331][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 2018.715347][ C1] ? do_syscall_64+0x91/0x250 [ 2018.715362][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2018.715384][ C1] do_syscall_64+0xcd/0x250 [ 2018.715401][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2018.715423][ C1] RIP: 0033:0x7fe12002e9b5 [ 2018.715446][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 2018.715462][ C1] RSP: 002b:00007ffcfe1cff68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2018.715478][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe12002e9b5 [ 2018.715490][ C1] RDX: 0000000000000090 RSI: 0000559e7861e990 RDI: 0000000000000003 [ 2018.715501][ C1] RBP: 0000559e786162c0 R08: 0000000000000000 R09: 0000000000000000 [ 2018.715512][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 2018.715523][ C1] R13: 00007fe1201bc212 R14: 00007ffcfe1d0068 R15: 0000000000000000 [ 2018.715540][ C1] [ 2018.716805][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2019.143390][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.12.0-rc6-syzkaller-00005-g557329bcecc2 #0 [ 2019.153875][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2019.163935][ T31] Call Trace: [ 2019.167200][ T31] [ 2019.170119][ T31] dump_stack_lvl+0x3d/0x1f0 [ 2019.174701][ T31] panic+0x71d/0x800 [ 2019.178589][ T31] ? __pfx_panic+0x10/0x10 [ 2019.182996][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 2019.188357][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2019.194328][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 2019.199686][ T31] ? watchdog+0xd76/0x1240 [ 2019.204087][ T31] ? watchdog+0xd69/0x1240 [ 2019.208495][ T31] watchdog+0xd87/0x1240 [ 2019.212725][ T31] ? __pfx_watchdog+0x10/0x10 [ 2019.217386][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 2019.222580][ T31] ? __kthread_parkme+0x148/0x220 [ 2019.227596][ T31] ? __pfx_watchdog+0x10/0x10 [ 2019.232257][ T31] kthread+0x2c1/0x3a0 [ 2019.236314][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2019.241503][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.246081][ T31] ret_from_fork+0x45/0x80 [ 2019.250482][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.255059][ T31] ret_from_fork_asm+0x1a/0x30 [ 2019.259827][ T31] [ 2019.263045][ T31] Kernel Offset: disabled [ 2019.267351][ T31] Rebooting in 86400 seconds..