last executing test programs: 19m54.203724191s ago: executing program 3 (id=4): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getsadinfo={0x14, 0x23, 0x1}, 0x14}}, 0x0) socket(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1000f) 19m52.806267369s ago: executing program 3 (id=12): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0]) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) r5 = socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100", @ANYBLOB="000000000000000014001a80100005800c0008"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000100)) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d1048007ea60864160a1d001931a025", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, 0x0, 0x10) 19m51.921376443s ago: executing program 3 (id=15): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xfffe, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="1800003bf0ffefffffff182700"/23, @ANYRES32=r4, @ANYBLOB="000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000186200000d00000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x7, 0x8}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x4, 0x3}, {0x0, 0x1, 0xf, 0xb}, {0x5, 0x5, 0x9, 0x9}, {0x3, 0x2, 0x6, 0x8}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x142, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r8, @ANYBLOB="a7d68a7bfe15a3eac70c343a4fc6dff4e6cd25e94ee9ce0eb631dd484c21671c8591f059c5bdbf5d66909560da4dc57ee428300673285dbe258ee2d113b3cb28bb77fb"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="76ec43d3755f211f5cacb84a00"/23, @ANYRES32=r8, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setfsgid(0xee01) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 19m49.108616744s ago: executing program 3 (id=18): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) write$dsp(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 19m32.354693916s ago: executing program 32 (id=18): socket$inet6(0xa, 0x6, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x6aa81, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r1 = socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syslog(0x2, &(0x7f0000006900)=""/91, 0x5b) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) write$dsp(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 16m31.257463006s ago: executing program 0 (id=487): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/189, 0xbd}], 0x1) 16m29.973086991s ago: executing program 0 (id=491): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d71", 0x60}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c", 0xc}], 0x6, &(0x7f00000005c0)}}, {{&(0x7f0000000740)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17efd93089f033a33419a6b1", 0xce}, {&(0x7f00000008c0)="0754dc5013d057cd169513cbe6353375cc9c3efbdd65b66665cb22853cb7e3c75ade300e8bd8da3a32d4532822a3d7599164458c14d5306c86b52510a68002ff0230edcfb268a12de4c67cc18598d7b4", 0x50}, {0x0}, {0x0}], 0x4}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 16m28.131828407s ago: executing program 0 (id=496): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xf) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) syz_usb_control_io(r1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3274, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000006000/0x4000)=nil) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16m24.468229326s ago: executing program 0 (id=509): r0 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 16m24.330757953s ago: executing program 0 (id=511): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x89901) memfd_create(&(0x7f0000000a00)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\xca`\xf7\x12#\xfcm\xcf\xb2\x14\xf1\xab\xd9d\'\x1a<\xfee7{l\x16}\xa0I\x7f]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9cu\x1f\x85\x14\xae\x81Qy\x92[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd\xcc\xda[\xe1\xc4~\x8b\x9e\xa0\xf9P\xf5a&\xd4\xf4\x8eum\x04\x00~\xfa\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 16m24.203620972s ago: executing program 0 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000280)="ae9feb608344a091ab31f8a957de706a796f6a3961d9820a4b0a40125d31d217fe048db8f98ff6f6fdf7bf56df5d3a84c6684ee7ae27f9"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000001840), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r6 = semget(0x0, 0x1, 0x281) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000b40), 0x105103, 0x0) semop(r6, &(0x7f0000000680)=[{0x0, 0xeffa, 0x1000}], 0x21) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)=ANY=[]) 16m8.713792169s ago: executing program 33 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000340)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000002c0)={0x28, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x37, &(0x7f0000000280)="ae9feb608344a091ab31f8a957de706a796f6a3961d9820a4b0a40125d31d217fe048db8f98ff6f6fdf7bf56df5d3a84c6684ee7ae27f9"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000001840), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) syz_open_dev$admmidi(&(0x7f0000000240), 0x2, 0x52de994789af003) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) r6 = semget(0x0, 0x1, 0x281) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000b40), 0x105103, 0x0) semop(r6, &(0x7f0000000680)=[{0x0, 0xeffa, 0x1000}], 0x21) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)=ANY=[]) 11m57.707134312s ago: executing program 1 (id=1251): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18600000060000000000000008000000184700000800000000000000000000001862000008000000000000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f8fe8b5e79b1cf972e0f"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480), 0x10, 0x9, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141021) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40046f41, 0x20000502) userfaultfd(0x1) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 11m55.787378176s ago: executing program 1 (id=1255): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfd66, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x6}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() r6 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000680)) r8 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x1000) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000640)=ANY=[@ANYRESHEX=r6, @ANYRES16=r4, @ANYRESHEX=r8], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r9, 0xc4c85513, &(0x7f0000000b00)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xc6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES64, @ANYBLOB="00000003230000000000b7080000b2000000bfa20000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a3200"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x100) getresuid(&(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) 11m54.837013037s ago: executing program 1 (id=1258): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = syz_pidfd_open(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYRES32=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0)={0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x7, 0x408701) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x0) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000080)={0xffff1000, 0x100000, 0x0, 0x0, 0x6}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 11m53.16688133s ago: executing program 1 (id=1262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x74, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x18, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, 'X'}]}]]}, 0x74}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) socket$inet6_tcp(0xa, 0x1, 0x0) 11m52.089375713s ago: executing program 1 (id=1263): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18600000060000000000000008000000184700000800000000000000000000001862000008000000000000000600000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000f8fe8b5e79b1cf972e0f"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x69, &(0x7f0000000380)=""/105, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x1, 0x3, 0xffff, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000480), 0x10, 0x9, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141021) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) truncate(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r6, 0x40046f41, 0x20000502) userfaultfd(0x1) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x800}, &(0x7f0000000100), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 11m48.50806626s ago: executing program 1 (id=1270): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)=ANY=[]) 11m30.824230531s ago: executing program 34 (id=1270): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)=ANY=[]) 1m16.233462354s ago: executing program 7 (id=2899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x319c}) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m15.188311915s ago: executing program 7 (id=2902): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xfffe, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="1800003bf0ffefffffff182700"/23, @ANYRES32=r4, @ANYBLOB="000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000186200000d00000000000000020000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000006c0)=[{0x5, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x7, 0x8}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x4, 0x3}, {0x0, 0x1, 0xf, 0xb}, {0x5, 0x5, 0x9, 0x9}, {0x3, 0x2, 0x6, 0x8}, {0x2, 0x5, 0x8, 0x1}], 0x10, 0x142, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r8, @ANYBLOB="a7d68a7bfe15a3eac70c343a4fc6dff4e6cd25e94ee9ce0eb631dd484c21671c8591f059c5bdbf5d66909560da4dc57ee428300673285dbe258ee2d113b3cb28bb77fb"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="76ec43d3755f211f5cacb84a00"/23, @ANYRES32=r8, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) setfsgid(0xee01) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m14.01821738s ago: executing program 7 (id=2903): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {0x0}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f54", 0x48}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c", 0xc}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b", 0x51}], 0x7, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e18", 0x63}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m12.338677757s ago: executing program 7 (id=2908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x52) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "a926b0dc", {0x1, 0x0, 0x7, 0x9}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2f55dff781623bd}, {@in6=@local, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x8000000, 0x0, 0xfffffffffffffdfc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x2000}, {}, 0x0, 0x3502, 0xa, 0x1}}, 0xf0}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x8}, &(0x7f0000000580)=0x8) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$key(0xf, 0x3, 0x2) 1m6.405049158s ago: executing program 7 (id=2922): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000000c0)={{r2}, 0x7, &(0x7f0000000000)=[0x2, 0xad3a15e, 0x2, 0x6, 0x9, 0x1, 0x97ad], 0x4, 0xb}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000200) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') read$FUSE(r6, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setresgid(0x0, 0x0, r7) mount$tmpfs(0x0, &(0x7f00000001c0)='.\x02/file1\x00', &(0x7f0000000240), 0x400, &(0x7f0000000380)={[{@gid={'gid', 0x3d, r7}}], [{@obj_user}, {@measure}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x24040000) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) bind$bt_l2cap(r8, 0x0, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000200)=0x10) symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='.\x02\x00') 1m5.046802436s ago: executing program 7 (id=2925): prlimit64(0x0, 0xdb994fe4eda61c32, &(0x7f0000000140)={0x2, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r5 = socket$kcm(0x29, 0x4, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r5, 0x0, 0x400c885) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_pgetevents(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 49.520455584s ago: executing program 35 (id=2925): prlimit64(0x0, 0xdb994fe4eda61c32, &(0x7f0000000140)={0x2, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r5 = socket$kcm(0x29, 0x4, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(r5, 0x0, 0x400c885) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2000000, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) io_pgetevents(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 13.405043769s ago: executing program 8 (id=3047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6ce231cfeedd7d71", 0x60}, {&(0x7f0000000100)="cfc4a70042dd2be7b702132c", 0xc}, {&(0x7f0000000640)="853ef8e048602d96b1098f1b1265a8315b5158ee6dc61dfe5be1063bac6eec0a9525fcfe6be179cbbd8c5cf9a7fc1ae037fba1f6fb5a060fd0ec2dfc4edf69fdc23a30e510d2fba92bd55ed7f4f893103b2772151cbdb17e1ddb141ea1e99c28e7", 0x61}], 0x7}}], 0x1, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0x49, 0x11, 0x0, 0x0) 13.395209473s ago: executing program 2 (id=3048): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0xfffe, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r4, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x12, &(0x7f0000000300)=ANY=[@ANYBLOB="1800003bf0ffefffffff182700"/23, @ANYRES32=r4, @ANYBLOB="000000000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000186200000d00000000000000020000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000004c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x5, 0x1, 0x7, 0x8}, {0x5, 0x5, 0x7, 0x8}, {0x1, 0x3, 0x2, 0x6}, {0x3, 0x2, 0x4, 0x3}, {0x0, 0x1, 0xf, 0xb}, {0x5, 0x5, 0x9, 0x9}, {0x3, 0x2, 0x6, 0x8}], 0x10, 0x142, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r8, @ANYBLOB="a7d68a7bfe15a3eac70c343a4fc6dff4e6cd25e94ee9ce0eb631dd484c21671c8591f059c5bdbf5d66909560da4dc57ee428300673285dbe258ee2d113b3cb28bb77fb"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="76ec43d3755f211f5cacb84a00"/23, @ANYRES32=r8, @ANYBLOB="9201000000000000"], 0x20}}, 0x0) setfsgid(0xee01) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x6200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13.202440042s ago: executing program 8 (id=3050): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000d3", @ANYRES16=r2, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x90, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x688d3}, [@IFLA_VFINFO_LIST={0x68, 0x16, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xa32, 0x1006}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0xbdc1}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @broadcast}}, @IFLA_VF_TRUST={0xc, 0x9, {0xffffffdf, 0x5}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xc, 0x1000}}]}]}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{&(0x7f0000000240)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000640)=""/132, 0x84}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000840)=""/223, 0xdf}, {&(0x7f0000000940)=""/105, 0x69}, {&(0x7f00000009c0)=""/175, 0xaf}], 0x8, &(0x7f0000000bc0)=""/120, 0x78}, 0xa}], 0x1, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 10.530470864s ago: executing program 2 (id=3057): socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0x0, &(0x7f0000000380)={0x8, 0x7115}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x452a) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500030000000500010006000000140099ba5c1a1507800600044000040000060005"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) setrlimit(0x7, &(0x7f0000000040)={0xfffffffffffffff8, 0x2}) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000280)='./file1/file3\x00', 0x0, 0x10}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340"], 0xf0}, 0x1, 0x0, 0x0, 0x4c004}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES64=r3, @ANYRES8=r2, @ANYBLOB="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", @ANYRESDEC=r3, @ANYRES8=r5, @ANYRES8=r5], 0x528}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="de07725a", @ANYRES16=r8, @ANYRES64=r6, @ANYRES32=0x0, @ANYRES8=r1], 0x30}, 0x4, 0x700000000000000}, 0x0) 8.341611933s ago: executing program 8 (id=3063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000300)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000000300)}], 0x3}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r5, 0x0) r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r9, 0xae9a) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x100000000, 0x100000, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000000000, 0x4, 0x8000000, 0xfffffffffffffffe, 0x0, 0x100000000, 0x0, 0x0, 0x7], 0x10000}) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 7.444886775s ago: executing program 6 (id=3067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000002c0)) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x52) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "a926b0dc", {0x1, 0x0, 0x7, 0x9}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2f55dff781623bd}, {@in6=@local, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x8000000, 0x0, 0xfffffffffffffdfc, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x2000}, {}, 0x0, 0x3502, 0xa, 0x1}}, 0xf0}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x3, 0x8}, &(0x7f0000000580)=0x8) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$key(0xf, 0x3, 0x2) 7.440168975s ago: executing program 5 (id=3068): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0x1260, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r3, 0x5608) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000040000000000080000100850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x25, 0x80002, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x3f8, 0xb, 0x60, 0x2}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) syz_usb_ep_read(0xffffffffffffffff, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x7, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000200)=0x23) socket$nl_netfilter(0x10, 0x3, 0xc) 7.329484136s ago: executing program 2 (id=3069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x102) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0xec, 0xb, 0xb, 0x0, 0x8, 0x7, 0xd0, 0x73, 0x6, 0x1, 0x35, 0x1, 0x0, 0xffffff33, 0x3f, 0x0, 0x0, 0x8, 0x0, '\x00', 0xf9, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 5.981851451s ago: executing program 5 (id=3070): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) 5.807562999s ago: executing program 5 (id=3071): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb2, 0x4c, 0x8d, 0x20, 0x5dc, 0x1, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x10, 0x0, 0x2, 0xee, 0x89, 0x98, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000000)={0x4}) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x20, 0x4, 0x84, {0x84, 0x21, "2cac75ac7fa9585d7a14c809b27802d10d54e8d450b210a6080eb6fde83cab109396e7c0951229af52da3823fd826be79fde1525bb0a89e293cea7066eaa7fb347f37b130b7d555f472f43d8e5954546555df8869f3a4b86fe9d410ca402d58336c6cbdbf3040dcd5e11c6b070a3970db79fa54aef4ae6ba4e5f804aa740581243fa"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0x43f}}, &(0x7f0000000140)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x8, 0x28, "c1175fd1", "aad2825a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xfffffffffffffe38, {0xc, 0x2a, 0x7f, 0x60, 0x2, 0x0, 0x5, 0x9, 0x1000}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x20, 0x5, 0x90, "2218739fb352335ec677377c88e09e013d96bedb4793aa79a7ed64fca517894b53475c684440873c080ea5dde363ae8765cdbedf907d5674d1f23b509ee133cb3e65508049ce885aff98e62cc4df8521bd2935d3e19646a2e2d5beba538910aba5afdc2141ffaae1605ba44025e2084a542e6064825817a6e22a14cd75a7b10347a4e96173304d729135e5b068e5fa7c"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000180)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf00]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000480)={0x40, 0xb, 0x2, "59ed"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f00000003c0)={0x40, 0x13, 0x6}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, '\f>'}, &(0x7f00000005c0)={0x40, 0x1a, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000680)={0x40, 0x21, 0xfffffffffffffeca, 0x4}}) 5.471340542s ago: executing program 2 (id=3072): r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x17f6, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='io_uring_req_failed\x00', r3}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f0000000240)={0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x470fc, &(0x7f00000005c0)={0x0, 0x4691, 0x0, 0x0, 0xc6}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{&(0x7f0000000280)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14450700000002000a0041d12b17538a6efdb6ec74a5eb818f3024640a4f", @ANYRESHEX=r6, @ANYBLOB="00000080"], 0x18, 0x20008880}}], 0x2, 0x4c054) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000100)=0x8, 0x4) socket$inet(0x2, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fdffffff03000000400001802c0004001400010002000000ac14140f0000000000000000020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000ff0f00000400000005010000", @ANYRES32, @ANYBLOB="00000000000010fa2d2100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000d3a609631811670000a2", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) setpriority(0x0, r13, 0x100) ptrace$peeksig(0x4209, r13, &(0x7f0000000140)={0x8, 0x1, 0x1}, &(0x7f0000000340)=[{}]) 5.01494199s ago: executing program 4 (id=3074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f00000108000100", @ANYRES64], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x220448c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendto$inet(r5, &(0x7f0000000300)="487d6b18b574c76fcfd83ef690b0081d51139c0e2b98c1ea25b6d53d91bc2995c269b4843f89e56b09dc876e7972961d77740fd05172b11c2832fe643a07ae27ac366ebb7b405be790fd9974aa96d65f194727dfad0b886e4842cc35fdff808b8c439e324e", 0x65, 0x64000010, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2e6) r7 = dup2(r6, r6) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) 4.459782693s ago: executing program 4 (id=3075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10001}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffe47) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 4.368999277s ago: executing program 2 (id=3076): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x80094) socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x60, @private=0xa010102}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '/dev/ttyS3\x00'}, {0x20, '\x00'}, {0x20, '\x05\xb8\x06\x89\x81\xcfUYn\x7f\xb4Z`O\x1b1\x1e\ah\xf2\x92\x93/FVB\xc2G1\x92\xf3\xad\x8eyv;e0x\x8e\xea>\xe2wgc)9\xa8Q\xc2\xf6\x17\xb9\xe5M?X\xcb\xf2\x97.P\xaa\xeb\x01)v(\xe6\vp\xbf\xe6\xd5\x9a\xc7\xaf\xc8\xfan\xd5\xf2\x97\xb5]\x8a\x12\xfe\x1d\xaf\xd5\r\xb1*\x1f\xdab5\xb2'}], 0xa, "c803b54148f7817ad92d372da2b2d860aa75bbe2e0253455a33587bf86b9ab283966d952e61a97e992cc22b0c23b91e325357835e8529a782117e01b44e90b570b302afefd60e8adc94dccfc486a31066b907a770dcd0270cc1608ece1dcc2a672a171d22bfc2215e5bf14479778ae8eb1aa047511837ce7f48ea9a42936f6c5ba6432cfbfd0e87ec4c778ed31be64a2c676581d9e14c06c95c001f21406e341d4169674733644a955423b427da6273dcaca1f4d06489bd6cd80ce105a25227ac49e46556764da5f060daa676eabeb434bc2d670e7f6683e4ac168530bc9ee658f25103ae3d259b2e7c0d79484c5e8187247da"}, 0x171) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0xa) futex(0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffe) r1 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 4.298174616s ago: executing program 6 (id=3077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x6c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "1952"}]}]]}, 0x6c}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x319c}) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.308274463s ago: executing program 4 (id=3078): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0xffffff23, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff2}, {0x3, 0xfff2}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\{\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100181a00000000000030000000300000ffffff7f0000000000010000000000000000000000020000000000000000000000000000090300788dd53ad403eec14c7b75f572d1320000000000000000000d00"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 3.219596251s ago: executing program 4 (id=3079): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r3, r3, 0x0, 0x7ff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000200)=0xa0000) openat$vmci(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000100)={{@host}, 0x1, 0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000240)={0x0, 0x6}) syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_mr_cache\x00') r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0xfefc, 0x0, 0x0, 0x4, @vifc_lcl_addr=@private=0xa010100, @loopback}, 0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) read$FUSE(r5, &(0x7f0000002200)={0x2020}, 0x2020) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.127446973s ago: executing program 6 (id=3080): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="ae1d4b178f10911a2dab191193b809cf9294262aa07902937575ee00b79dde347c0e6b2970ac6c8aa4d76a09fbd96643ee0877b3d0badfdcef5d45ff3c02cbf632464c24039086f74548ccae132a1bafbfef8cc1860c4aad820da4977e44f7b489cfccac766c51391bfcdb9f5510c7770582516cb7d41772001624e5905bba54f08547a4485b5a2a98b5f5c690d0a825161e3d7e4b39365b43b2701c68b167bbdce33c013a9b89c9a7b823ec5ecd432f12dc063ddaa7431a3385e29d0c7ac17389308b450e1d06ab9388183e9828783f6a23183986257098262af4ba197ca5e4499ec85fd8c1f1c7a122ff", 0xeb}, {&(0x7f00000002c0)="7f2f58967d9a6924bf6fed7467470b436ce6b9060056d5096e3c4efeec82e9e3e6446a274bca12243a4965600d3e1843baccebbad5e427aeaff4e1431a4569bfdc0a70ca0e6c7bbd4dbaaae3af04662d606b229f3d36a44238f6711f", 0x5c}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872b1bee0e7", 0x58}, {&(0x7f00000003c0)="e9623a2564f0dca65929e3dcaf93431db8a9e128b420d32a401394714e0352e456d446ac080b638c9d63fa92e935cebeb2273e06064c044da5b383b4a6222d0d6afb6612404566faeee57d678a63a91eea4242f87342c64a95ebfdc6ad6b0a72feab53b2d53d805f90cc578b2bafbdcfd62f2ef4861b76e32272e8c799fdffd209b1c8fc26d842bd31482458ef705a7ff7f14faa90a193977eb376443d524cbb7ec9c6b73d441c57d69e2389a1fed974289ad4ce97d971edd3d7d678ee9de3caeeefe4cfcb09bc11ca162e06e98a2ce596070d83081e8d4014d917145aeb224f2a4a530cf5bbf1021647b99cd5", 0xed}, {&(0x7f00000004c0)="73d4ee65bba261afcec94075e4f13fb157c1bc27e26547cde7ff7244ed31797dfb8df9b8695ca5667526d5594901cd5e1a944936387c97d9ac91804b46657552fa7bbad707c25f5412e40742ee435f6774a8edced6ae721b6c", 0x59}, {&(0x7f0000000100)="cfc4a70042dd", 0x6}], 0x6, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17ef", 0xc4}], 0x1}}], 0x2, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 3.126709609s ago: executing program 8 (id=3081): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}]]}, 0x60}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x319c}) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.91254871s ago: executing program 2 (id=3082): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7402f8ed7ca62f2bc83f74a833985f857aea120980634d28db59881240ddcdb80ae6800e45e612019d9a17a04", 0xa2, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x102) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000040)=@x86={0xec, 0xb, 0xb, 0x0, 0x8, 0x7, 0xd0, 0x73, 0x6, 0x1, 0x35, 0x1, 0x0, 0xffffff33, 0x3f, 0x0, 0x0, 0x8, 0x0, '\x00', 0xf9, 0x7}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}, {0x0, 0x18}], 0x2) 1.912049928s ago: executing program 6 (id=3083): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) 1.900613891s ago: executing program 5 (id=3084): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) r2 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$inet6(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$dsp(r0, &(0x7f00000006c0)="d7cd8e440678b638e205280ac4f6619de3c1a3bfcd4ac8351a83db277185999f60a5762eb22a9447b8daaa95df3d8f12e0ca9742f021242acd8b072e1b8a3685c94a3fbc78a009222835a77a0a0599640d1e1e9c468b87dcac85d2931a3e7408bb3722d9ccdeae11d0a888887dcfdbb3ef5d817447bb61a6c59d477c7cefbea957e789695437e615e7f1b1eadcb7da45320eb992a1cb689a2609a0bcde9a5e8de304363fd144f6e659a35f2e778056da8f264e2c", 0xb4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020701020000000000000000020000080c00024000000000000000030c00034000000000000000091c00078008000140000000050800"], 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x20004010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x7, 0x6b, &(0x7f0000000280)}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000001100)=ANY=[@ANYRESDEC=r5, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x7ee6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff24, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.897803964s ago: executing program 4 (id=3085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="8c0000000001010400000000ffffff8802000000240001801400018008000100ac1414bb08000200ac1414bb0c00028005000100000000002400028014000180080001000000004008000200ac1414bb0c0002800500010000000000080007400000000028000680080002007f00000108000100", @ANYRES64], 0x8c}, 0x1, 0x600000000000000, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x220448c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414800c"], 0x528}}, 0xc000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c000180060006006558000004050280ff0411"], 0x528}}, 0xc000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) sendto$inet(r5, &(0x7f0000000300)="487d6b18b574c76fcfd83ef690b0081d51139c0e2b98c1ea25b6d53d91bc2995c269b4843f89e56b09dc876e7972961d77740fd05172b11c2832fe643a07ae27ac366ebb7b405be790fd9974aa96d65f194727dfad0b886e4842cc35fdff808b8c439e324e", 0x65, 0x64000010, &(0x7f0000000480)={0x2, 0x4e21, @empty}, 0x10) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2e6) r7 = dup2(r6, r6) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) 1.396052796s ago: executing program 6 (id=3086): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0x5c}}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.3950102s ago: executing program 8 (id=3087): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x200}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000}) 1.393832712s ago: executing program 5 (id=3088): close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = gettid() rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x33, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x160, 0x0, 0x148, 0x0, 0x148, 0x240, 0x240, 0x240, 0x240, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cluster={{0x30}, {0x3f00}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket$kcm(0x10, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r5, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) lseek(r8, 0x6, 0x0) 170.114141ms ago: executing program 6 (id=3089): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) 169.060416ms ago: executing program 8 (id=3090): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 168.298822ms ago: executing program 5 (id=3091): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000100000004000000ff000000"], 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5049, 0x0) read$msr(r4, &(0x7f0000000580)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r5) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) listen(r1, 0x5) (async) accept4(r1, 0x0, 0x0, 0x80800) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x44800) (async) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 4 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0x13) ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd0700000000000000c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331337c3592a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128dc2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb79cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6b62a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01e84ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be3486047315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5c66da0586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa700", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x200, 0x2, 0x42, 0xe000, 0x0, r3, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000080)=ANY=[@ANYBLOB="4cbb489ea150c62cb488280aee54000015", @ANYRESDEC, @ANYRES32, @ANYRES64=r0, @ANYRES16=r6], 0x4c}, 0x1, 0x300}, 0x8086) kernel console output (not intermixed with test programs): ][T16669] netlink_sendmsg+0x689/0xd70 [ 1151.587210][T16669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1151.592528][T16669] ____sys_sendmsg+0xaaf/0xc90 [ 1151.597319][T16669] ? copy_msghdr_from_user+0x10b/0x160 [ 1151.602791][T16669] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1151.608112][T16669] ___sys_sendmsg+0x135/0x1e0 [ 1151.612803][T16669] ? __pfx____sys_sendmsg+0x10/0x10 [ 1151.618020][T16669] ? __pfx_lock_release+0x10/0x10 [ 1151.623087][T16669] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.628316][T16669] ? __fget_files+0x206/0x3a0 [ 1151.633029][T16669] __sys_sendmsg+0x16e/0x220 [ 1151.637636][T16669] ? __pfx___sys_sendmsg+0x10/0x10 [ 1151.642767][T16669] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 1151.648797][T16669] do_syscall_64+0xcd/0x250 [ 1151.653338][T16669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.659265][T16669] RIP: 0033:0x7f85c9d85d29 [ 1151.663683][T16669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.683314][T16669] RSP: 002b:00007f85cab98038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1151.691761][T16669] RAX: ffffffffffffffda RBX: 00007f85c9f75fa0 RCX: 00007f85c9d85d29 [ 1151.699740][T16669] RDX: 0000000000000000 RSI: 0000000020003700 RDI: 0000000000000006 [ 1151.707727][T16669] RBP: 00007f85cab98090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.715712][T16669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1151.723697][T16669] R13: 0000000000000000 R14: 00007f85c9f75fa0 R15: 00007fff65d807d8 [ 1151.731700][T16669] [ 1151.849350][ T5899] usb 5-1: USB disconnect, device number 52 [ 1151.861908][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'. [ 1152.851840][T16680] bridge0: port 1(erspan0) entered blocking state [ 1152.858314][T16680] bridge0: port 1(erspan0) entered disabled state [ 1152.864967][T16680] erspan0: entered allmulticast mode [ 1152.870961][T16680] erspan0: entered promiscuous mode [ 1152.876684][T16680] bridge0: port 1(erspan0) entered blocking state [ 1152.883149][T16680] bridge0: port 1(erspan0) entered forwarding state [ 1152.950724][ T29] audit: type=1400 audit(1734581819.153:3092): avc: denied { create } for pid=16674 comm="syz.5.2758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1152.999855][ T29] audit: type=1400 audit(1734581819.213:3093): avc: denied { ioctl } for pid=16674 comm="syz.5.2758" path="socket:[50004]" dev="sockfs" ino=50004 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1153.144895][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2762'. [ 1155.281037][ T29] audit: type=1400 audit(1734581821.503:3094): avc: denied { unlink } for pid=11240 comm="syz-executor" name="file0" dev="tmpfs" ino=1556 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1155.436286][T16704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.907896][T16717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1156.645491][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2768'. [ 1157.730964][T16731] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1157.738733][T16731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.824884][ T29] audit: type=1400 audit(1734581824.033:3095): avc: denied { mount } for pid=16728 comm="syz.2.2771" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1158.220554][ T5900] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1158.341759][ T29] audit: type=1400 audit(1734581824.573:3096): avc: denied { connect } for pid=16710 comm="syz.4.2767" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1158.439331][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 1158.464543][T16742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2773'. [ 1158.464673][ T5900] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1158.502566][ T29] audit: type=1400 audit(1734581824.593:3097): avc: denied { write } for pid=16710 comm="syz.4.2767" laddr=172.20.20.170 lport=255 faddr=172.20.20.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1158.621462][ T5900] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 64, changing to 10 [ 1158.695243][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.712444][ T5900] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1158.726057][ T29] audit: type=1400 audit(1734581824.783:3098): avc: denied { ioctl } for pid=16734 comm="syz.6.2774" path="socket:[51383]" dev="sockfs" ino=51383 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1158.840649][ T5900] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1158.878734][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1158.901943][ T5900] usb 3-1: Product: syz [ 1158.917825][ T5900] usb 3-1: Manufacturer: syz [ 1158.933758][ T5900] usb 3-1: SerialNumber: syz [ 1158.976802][ T5900] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input60 [ 1158.994454][ T29] audit: type=1400 audit(1734581825.223:3099): avc: denied { read } for pid=5177 comm="acpid" name="mouse1" dev="devtmpfs" ino=3411 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1159.026286][ T29] audit: type=1400 audit(1734581825.243:3100): avc: denied { open } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3411 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1159.060929][ T29] audit: type=1400 audit(1734581825.253:3101): avc: denied { ioctl } for pid=5177 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3411 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1159.210255][ T29] audit: type=1400 audit(1734581825.433:3102): avc: denied { read } for pid=16728 comm="syz.2.2771" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1159.247327][ T29] audit: type=1400 audit(1734581825.433:3103): avc: denied { open } for pid=16728 comm="syz.2.2771" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1159.301239][ T5900] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1159.313452][ T2144] usb 3-1: USB disconnect, device number 63 [ 1159.381285][ T2144] appletouch 3-1:1.0: input: appletouch disconnected [ 1159.467282][ T5900] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1159.476084][T16760] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2779'. [ 1159.476864][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.507302][ T5900] usb 7-1: Product: syz [ 1159.511743][ T5900] usb 7-1: Manufacturer: syz [ 1159.516637][ T5900] usb 7-1: SerialNumber: syz [ 1159.516855][T16760] xt_bpf: check failed: parse error [ 1159.525901][ T5900] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1159.542010][ T6358] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1161.567884][ T6358] usb 7-1: Service connection timeout for: 256 [ 1161.574236][ T6358] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1161.738975][ T6358] ath9k_htc: Failed to initialize the device [ 1161.961913][ T3454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1163.279651][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1163.279669][ T29] audit: type=1400 audit(1734581829.493:3105): avc: denied { bind } for pid=16800 comm="syz.4.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1163.378300][ T6358] usb 7-1: ath9k_htc: USB layer deinitialized [ 1163.740109][ T5900] usb 7-1: USB disconnect, device number 33 [ 1164.681896][T16835] FAULT_INJECTION: forcing a failure. [ 1164.681896][T16835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.978078][T16835] CPU: 0 UID: 0 PID: 16835 Comm: syz.2.2800 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1164.988866][T16835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1164.998915][T16835] Call Trace: [ 1165.002177][T16835] [ 1165.005090][T16835] dump_stack_lvl+0x16c/0x1f0 [ 1165.009750][T16835] should_fail_ex+0x497/0x5b0 [ 1165.014411][T16835] _copy_to_user+0x32/0xd0 [ 1165.018829][T16835] simple_read_from_buffer+0xd0/0x160 [ 1165.024209][T16835] proc_fail_nth_read+0x198/0x270 [ 1165.029267][T16835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.034808][T16835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1165.040360][T16835] vfs_read+0x1df/0xbe0 [ 1165.044515][T16835] ? __fget_files+0x1fc/0x3a0 [ 1165.049171][T16835] ? __pfx___mutex_lock+0x10/0x10 [ 1165.054187][T16835] ? __pfx_vfs_read+0x10/0x10 [ 1165.058848][T16835] ? __fget_files+0x206/0x3a0 [ 1165.063510][T16835] ksys_read+0x12b/0x250 [ 1165.067851][T16835] ? __pfx_ksys_read+0x10/0x10 [ 1165.072610][T16835] do_syscall_64+0xcd/0x250 [ 1165.077109][T16835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.082985][T16835] RIP: 0033:0x7f4a1878473c [ 1165.087394][T16835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1165.106983][T16835] RSP: 002b:00007f4a195e8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1165.115376][T16835] RAX: ffffffffffffffda RBX: 00007f4a18975fa0 RCX: 00007f4a1878473c [ 1165.123342][T16835] RDX: 000000000000000f RSI: 00007f4a195e80a0 RDI: 0000000000000003 [ 1165.131305][T16835] RBP: 00007f4a195e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.139282][T16835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.147236][T16835] R13: 0000000000000000 R14: 00007f4a18975fa0 R15: 00007ffcc99fe398 [ 1165.155215][T16835] [ 1165.901719][T16851] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2788'. [ 1165.945483][T16853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2806'. [ 1166.153239][ T29] audit: type=1400 audit(1734581832.383:3106): avc: denied { read } for pid=16844 comm="syz.6.2803" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1166.177604][ T5900] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1166.186545][ T29] audit: type=1400 audit(1734581832.413:3107): avc: denied { open } for pid=16844 comm="syz.6.2803" path="/dev/vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1166.222706][T16861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.333957][ T5900] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1166.343386][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.351755][ T5900] usb 3-1: Product: syz [ 1166.356030][ T5900] usb 3-1: Manufacturer: syz [ 1166.360737][ T5900] usb 3-1: SerialNumber: syz [ 1166.375300][ T5900] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1166.391212][ T2144] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1166.970818][ T5900] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1167.110601][ T6358] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1167.856696][ T2144] usb 3-1: Service connection timeout for: 256 [ 1167.863776][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 1167.869079][ T2144] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1167.879737][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.891306][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.950879][ T6358] usb 7-1: device descriptor read/64, error -71 [ 1167.957475][ T5900] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1167.966837][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.977801][ T5900] usb 5-1: config 0 descriptor?? [ 1168.004297][ T2144] ath9k_htc: Failed to initialize the device [ 1168.014721][ T2144] usb 3-1: ath9k_htc: USB layer deinitialized [ 1168.057826][T16887] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1168.224700][ T29] audit: type=1400 audit(1734581834.453:3108): avc: denied { bind } for pid=16864 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1168.312166][ T5869] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1168.505928][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.562609][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.615290][ T5869] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 1168.664508][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.673902][ T29] audit: type=1400 audit(1734581834.893:3109): avc: denied { create } for pid=16864 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1168.709731][ T29] audit: type=1400 audit(1734581834.903:3110): avc: denied { setopt } for pid=16864 comm="syz.4.2809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1168.712724][ T5900] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0035/input/input61 [ 1168.732372][ T5869] usb 6-1: config 0 descriptor?? [ 1168.741778][ T6358] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1168.814979][ T5900] appleir 0003:05AC:8241.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1168.891817][ T2144] usb 3-1: USB disconnect, device number 64 [ 1168.931418][ T6358] usb 7-1: device descriptor read/64, error -71 [ 1168.946790][ T5867] usb 5-1: USB disconnect, device number 53 [ 1169.042226][ T29] audit: type=1400 audit(1734581835.273:3111): avc: denied { read } for pid=5174 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1169.080664][ T29] audit: type=1400 audit(1734581835.273:3112): avc: denied { search } for pid=5174 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1169.107152][ T6358] usb usb7-port1: attempt power cycle [ 1169.124394][ T29] audit: type=1400 audit(1734581835.273:3113): avc: denied { append } for pid=5174 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1169.147574][ T29] audit: type=1400 audit(1734581835.273:3114): avc: denied { open } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1169.173953][T16887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.176944][ T29] audit: type=1400 audit(1734581835.273:3115): avc: denied { getattr } for pid=5174 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1169.185843][T16887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.207483][ T29] audit: type=1400 audit(1734581835.403:3116): avc: denied { listen } for pid=16886 comm="syz.5.2817" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1169.227643][ T5869] hid-multitouch 0003:0EEF:72D0.0036: unbalanced collection at end of report description [ 1169.237126][T16900] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2820'. [ 1169.244618][ T5869] hid-multitouch 0003:0EEF:72D0.0036: probe with driver hid-multitouch failed with error -22 [ 1169.263565][T16894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1169.460511][ T6358] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1169.469302][ T5869] usb 6-1: USB disconnect, device number 45 [ 1169.482011][ T6358] usb 7-1: device descriptor read/8, error -71 [ 1170.461408][ T6358] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1170.498803][ T6358] usb 7-1: device descriptor read/8, error -71 [ 1170.611668][ T6358] usb usb7-port1: unable to enumerate USB device [ 1171.552856][ T29] audit: type=1400 audit(1734581837.003:3117): avc: denied { map } for pid=16916 comm="syz.7.2827" path="socket:[52429]" dev="sockfs" ino=52429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1172.128857][T16930] trusted_key: syz.2.2828 sent an empty control message without MSG_MORE. [ 1172.421754][ T6358] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1173.171368][ T6358] usb 7-1: Using ep0 maxpacket: 8 [ 1173.181210][ T6358] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1173.229398][ T6358] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1173.283914][ T2144] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1173.358110][ T6358] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1173.453129][ T6358] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.480632][ T2144] usb 3-1: Using ep0 maxpacket: 16 [ 1173.501276][ T2144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1173.520332][ T2144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.530669][ T6358] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1173.541088][ T2144] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1173.550329][ T6358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.559093][ T2144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.559180][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2833'. [ 1173.595051][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1173.602704][ T6358] usb 7-1: can't set config #16, error -32 [ 1173.611452][ T6358] usb 7-1: USB disconnect, device number 38 [ 1173.659286][ T2144] usb 3-1: config 0 descriptor?? [ 1173.757108][T16954] netlink: 'syz.6.2836': attribute type 10 has an invalid length. [ 1173.777124][T16954] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.788211][T16954] bond0: (slave team0): Enslaving as an active interface with an up link [ 1173.924593][ T29] audit: type=1400 audit(1734581840.153:3118): avc: denied { create } for pid=16939 comm="syz.2.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1173.959231][ T29] audit: type=1400 audit(1734581840.153:3119): avc: denied { bind } for pid=16939 comm="syz.2.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1173.980651][ T5867] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1173.994101][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2838'. [ 1174.004149][ T29] audit: type=1400 audit(1734581840.233:3120): avc: denied { read write } for pid=11240 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1174.029469][ T29] audit: type=1400 audit(1734581840.233:3121): avc: denied { open } for pid=11240 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1174.029515][ T29] audit: type=1400 audit(1734581840.233:3122): avc: denied { ioctl } for pid=16951 comm="syz.5.2835" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1174.029553][ T29] audit: type=1400 audit(1734581840.233:3123): avc: denied { ioctl } for pid=11240 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1174.059535][ T29] audit: type=1400 audit(1734581840.263:3124): avc: denied { write } for pid=16960 comm="syz.6.2838" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1174.059578][ T29] audit: type=1400 audit(1734581840.263:3125): avc: denied { open } for pid=16960 comm="syz.6.2838" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1174.096075][T16961] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2838'. [ 1174.126836][ T29] audit: type=1400 audit(1734581840.353:3126): avc: denied { prog_load } for pid=16939 comm="syz.2.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1174.127275][ T29] audit: type=1400 audit(1734581840.353:3127): avc: denied { bpf } for pid=16939 comm="syz.2.2832" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1174.150234][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.174827][ T5867] usb 6-1: Using ep0 maxpacket: 8 [ 1174.187966][ T5867] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1174.251653][ T5867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.259953][ T5867] usb 6-1: Product: syz [ 1174.264175][ T5867] usb 6-1: Manufacturer: syz [ 1174.270551][ T5867] usb 6-1: SerialNumber: syz [ 1174.327145][ T5867] usb 6-1: config 0 descriptor?? [ 1174.344508][ T5867] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1174.349255][ T2144] usbhid 3-1:0.0: can't add hid device: -71 [ 1174.357283][ T2144] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1174.409628][ T2144] usb 3-1: USB disconnect, device number 65 [ 1174.431696][T16971] overlayfs: failed to resolve './file1': -2 [ 1175.041016][T16978] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1175.771804][ T5867] gspca_sonixj: reg_w1 err -110 [ 1175.776754][ T5867] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1178.019356][ T5869] usb 6-1: USB disconnect, device number 46 [ 1178.461009][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.467610][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.595614][T17006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 1178.716755][T17011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2849'. [ 1178.769920][T17011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2849'. [ 1178.779227][T17010] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2852'. [ 1178.812680][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1178.823210][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1178.832501][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1178.845341][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1178.855436][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1178.865605][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1179.096670][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1179.096689][ T29] audit: type=1400 audit(1734581845.323:3176): avc: denied { create } for pid=17019 comm="syz.7.2853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1179.177179][ T29] audit: type=1400 audit(1734581845.403:3177): avc: denied { read write } for pid=17019 comm="syz.7.2853" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.202374][ T29] audit: type=1400 audit(1734581845.433:3178): avc: denied { open } for pid=17019 comm="syz.7.2853" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1179.280805][ T29] audit: type=1400 audit(1734581845.503:3179): avc: denied { setopt } for pid=17005 comm="syz.4.2850" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1179.570629][ T5869] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1179.730464][ T5869] usb 8-1: Using ep0 maxpacket: 16 [ 1179.907740][T17014] chnl_net:caif_netlink_parms(): no params data found [ 1179.911115][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.926294][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.938408][ T5869] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1179.959778][ T5869] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.982036][ T5869] usb 8-1: config 0 descriptor?? [ 1180.044073][ T6359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.256969][ T2144] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1180.451253][ T2144] usb 7-1: Using ep0 maxpacket: 8 [ 1180.472578][ T2144] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1180.598464][ T2144] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1180.609319][ T2144] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1180.619455][ T2144] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1180.632552][ T2144] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1180.633658][ T6359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1180.641719][ T2144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.707879][T17014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.722999][T17014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.730290][T17014] bridge_slave_0: entered allmulticast mode [ 1180.842461][T17014] bridge_slave_0: entered promiscuous mode [ 1180.873296][T17014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.913868][T17014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.929159][ T5869] usbhid 8-1:0.0: can't add hid device: -71 [ 1180.935249][ T5869] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1180.943539][T17014] bridge_slave_1: entered allmulticast mode [ 1180.950633][ T5869] usb 8-1: USB disconnect, device number 21 [ 1180.960585][ T5828] Bluetooth: hci2: command tx timeout [ 1180.966207][ T2144] usb 7-1: GET_CAPABILITIES returned 0 [ 1180.991646][ T2144] usbtmc 7-1:16.0: can't read capabilities [ 1181.005781][T17014] bridge_slave_1: entered promiscuous mode [ 1181.124631][ T6359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.170602][T17014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.187645][T17014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.188611][ T29] audit: type=1400 audit(1734581847.413:3180): avc: denied { read } for pid=17033 comm="syz.6.2856" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1181.230021][ T29] audit: type=1400 audit(1734581847.413:3181): avc: denied { open } for pid=17033 comm="syz.6.2856" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1181.266122][ T29] audit: type=1400 audit(1734581847.433:3182): avc: denied { ioctl } for pid=17033 comm="syz.6.2856" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1181.367027][T17055] devtmpfs: Too few inodes for current use [ 1181.769422][ T29] audit: type=1400 audit(1734581847.573:3183): avc: denied { mounton } for pid=17048 comm="syz.7.2860" path="/309/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1181.795972][ T29] audit: type=1400 audit(1734581847.573:3184): avc: denied { mount } for pid=17048 comm="syz.7.2860" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1181.819927][ T29] audit: type=1400 audit(1734581847.593:3185): avc: denied { remount } for pid=17048 comm="syz.7.2860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1181.927614][ T6359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1181.987262][T17059] FAULT_INJECTION: forcing a failure. [ 1181.987262][T17059] name failslab, interval 1, probability 0, space 0, times 0 [ 1182.003322][T17059] CPU: 0 UID: 0 PID: 17059 Comm: syz.4.2861 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1182.014131][T17059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1182.020504][T17014] team0: Port device team_slave_0 added [ 1182.024180][T17059] Call Trace: [ 1182.024190][T17059] [ 1182.024199][T17059] dump_stack_lvl+0x16c/0x1f0 [ 1182.024232][T17059] should_fail_ex+0x497/0x5b0 [ 1182.045566][T17059] ? fs_reclaim_acquire+0xae/0x150 [ 1182.050708][T17059] should_failslab+0xc2/0x120 [ 1182.055376][T17059] __kmalloc_noprof+0xcb/0x510 [ 1182.060126][T17059] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1182.065746][T17059] tomoyo_realpath_from_path+0xb9/0x720 [ 1182.071302][T17059] ? tomoyo_path_number_perm+0x235/0x590 [ 1182.076916][T17059] ? tomoyo_path_number_perm+0x235/0x590 [ 1182.082548][T17059] tomoyo_path_number_perm+0x248/0x590 [ 1182.087998][T17059] ? tomoyo_path_number_perm+0x235/0x590 [ 1182.093620][T17059] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1182.099687][T17059] ? __pfx_lock_release+0x10/0x10 [ 1182.104697][T17059] ? trace_lock_acquire+0x14e/0x1f0 [ 1182.109906][T17059] ? lock_acquire+0x2f/0xb0 [ 1182.114408][T17059] ? __fget_files+0x40/0x3a0 [ 1182.119034][T17059] ? __fget_files+0x206/0x3a0 [ 1182.123695][T17059] security_file_ioctl+0x9b/0x240 [ 1182.128738][T17059] __x64_sys_ioctl+0xb7/0x200 [ 1182.133415][T17059] do_syscall_64+0xcd/0x250 [ 1182.137912][T17059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.143796][T17059] RIP: 0033:0x7f04f9b85d29 [ 1182.148190][T17059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.167781][T17059] RSP: 002b:00007f04faa1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1182.176183][T17059] RAX: ffffffffffffffda RBX: 00007f04f9d75fa0 RCX: 00007f04f9b85d29 [ 1182.184145][T17059] RDX: 00000000200000c0 RSI: 00000000c0405602 RDI: 0000000000000003 [ 1182.192097][T17059] RBP: 00007f04faa1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.200050][T17059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.208003][T17059] R13: 0000000000000000 R14: 00007f04f9d75fa0 R15: 00007ffe227c23b8 [ 1182.215988][T17059] [ 1182.225975][T17059] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1182.231046][T17014] team0: Port device team_slave_1 added [ 1182.251397][ T5899] usb 7-1: USB disconnect, device number 39 [ 1182.542296][T17014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.582953][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.823704][T17014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.836421][T17014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.843459][T17014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.876926][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 1182.886373][T17014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1183.004147][ T2144] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1183.112916][ T5828] Bluetooth: hci2: command tx timeout [ 1183.211308][T17077] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1183.252126][T17014] hsr_slave_0: entered promiscuous mode [ 1183.264096][T17014] hsr_slave_1: entered promiscuous mode [ 1183.277806][T17014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1183.350609][ T2144] usb 8-1: device descriptor read/64, error -71 [ 1183.518032][T17014] Cannot create hsr debugfs directory [ 1183.607526][ T2144] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1183.781256][ T6359] bridge_slave_1: left allmulticast mode [ 1183.787482][ T6359] bridge_slave_1: left promiscuous mode [ 1183.811166][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.821872][ T6359] bridge_slave_0: left allmulticast mode [ 1183.827539][ T6359] bridge_slave_0: left promiscuous mode [ 1183.850600][ T2144] usb 8-1: device descriptor read/64, error -71 [ 1183.870748][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.962026][ T2144] usb usb8-port1: attempt power cycle [ 1184.321947][ T2144] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1184.352651][ T2144] usb 8-1: device descriptor read/8, error -71 [ 1184.598810][ T2144] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1184.821398][ T2144] usb 8-1: device descriptor read/8, error -71 [ 1184.830139][ T6359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.887782][ T6359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.932238][ T6359] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1184.949050][ T2144] usb usb8-port1: unable to enumerate USB device [ 1185.120988][ T5828] Bluetooth: hci2: command tx timeout [ 1185.188916][ T6359] bond0 (unregistering): Released all slaves [ 1185.471766][ T6359] bond1 (unregistering): Released all slaves [ 1185.564371][T17095] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2871'. [ 1185.931504][ T6359] bond2 (unregistering): Released all slaves [ 1187.214502][ T5828] Bluetooth: hci2: command tx timeout [ 1187.220784][ T5869] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1187.286507][ T6359] hsr_slave_0: left promiscuous mode [ 1187.376835][T17121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.450976][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1187.450996][ T29] audit: type=1400 audit(1734581853.543:3193): avc: denied { read } for pid=17117 comm="syz.4.2879" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1187.495854][ T29] audit: type=1400 audit(1734581853.543:3194): avc: denied { open } for pid=17117 comm="syz.4.2879" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1187.617469][ T6359] hsr_slave_1: left promiscuous mode [ 1187.763045][ T6359] veth1_macvtap: left promiscuous mode [ 1187.831444][ T6359] veth0_macvtap: left promiscuous mode [ 1187.901718][ T6359] veth1_vlan: left promiscuous mode [ 1187.913850][ T6359] veth0_vlan: left promiscuous mode [ 1187.922142][ T29] audit: type=1400 audit(1734581853.603:3195): avc: denied { ioctl } for pid=17117 comm="syz.4.2879" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53319 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1188.018804][ T29] audit: type=1400 audit(1734581853.623:3196): avc: denied { read } for pid=17117 comm="syz.4.2879" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1188.147289][ T29] audit: type=1400 audit(1734581853.623:3197): avc: denied { open } for pid=17117 comm="syz.4.2879" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1188.270481][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 1188.277241][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1188.289067][ T5869] usb 6-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 1188.298569][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.306638][ T5869] usb 6-1: Product: syz [ 1188.310833][ T5869] usb 6-1: Manufacturer: syz [ 1188.315435][ T5869] usb 6-1: SerialNumber: syz [ 1188.472143][ T29] audit: type=1400 audit(1734581853.633:3198): avc: denied { create } for pid=17117 comm="syz.4.2879" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1188.889513][ T29] audit: type=1400 audit(1734581853.633:3199): avc: denied { write } for pid=17117 comm="syz.4.2879" name="file0" dev="tmpfs" ino=2990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1189.124846][ T29] audit: type=1400 audit(1734581853.643:3200): avc: denied { open } for pid=17117 comm="syz.4.2879" path="/565/file0" dev="tmpfs" ino=2990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1189.150310][ T29] audit: type=1400 audit(1734581853.643:3201): avc: denied { ioctl } for pid=17117 comm="syz.4.2879" path="/565/file0" dev="tmpfs" ino=2990 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1189.151092][ T5869] usb 6-1: config 0 descriptor?? [ 1189.176625][ T29] audit: type=1400 audit(1734581854.103:3202): avc: denied { unlink } for pid=5824 comm="syz-executor" name="file0" dev="tmpfs" ino=2990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1189.567439][ T5869] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1189.609687][ T5869] usb 6-1: USB disconnect, device number 47 [ 1190.105365][ T6359] team0 (unregistering): Port device team_slave_1 removed [ 1190.177658][ T6359] team0 (unregistering): Port device team_slave_0 removed [ 1190.862583][T17141] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2885'. [ 1192.027666][ T6359] IPVS: stop unused estimator thread 0... [ 1192.506133][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1192.506174][ T29] audit: type=1400 audit(1734581858.533:3251): avc: denied { ioctl } for pid=17154 comm="syz.5.2888" path="socket:[53488]" dev="sockfs" ino=53488 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1192.986159][ T29] audit: type=1400 audit(1734581859.053:3252): avc: denied { create } for pid=17171 comm="syz.4.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1193.082971][ T29] audit: type=1400 audit(1734581859.063:3253): avc: denied { accept } for pid=17171 comm="syz.4.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1193.148622][ T29] audit: type=1400 audit(1734581859.073:3254): avc: denied { read write } for pid=17171 comm="syz.4.2892" name="video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1193.184719][ T29] audit: type=1400 audit(1734581859.073:3255): avc: denied { open } for pid=17171 comm="syz.4.2892" path="/dev/video1" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1193.216071][ T29] audit: type=1400 audit(1734581859.073:3256): avc: denied { ioctl } for pid=17171 comm="syz.4.2892" path="/dev/video1" dev="devtmpfs" ino=933 ioctlcmd=0x564a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1193.339025][T17175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2893'. [ 1193.355235][ T29] audit: type=1400 audit(1734581859.103:3257): avc: denied { create } for pid=17171 comm="syz.4.2892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1193.440809][ T29] audit: type=1400 audit(1734581859.123:3258): avc: denied { write } for pid=17171 comm="syz.4.2892" name="001" dev="devtmpfs" ino=747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1193.519951][ T29] audit: type=1400 audit(1734581859.403:3259): avc: denied { create } for pid=17174 comm="syz.5.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1193.781267][T17187] FAULT_INJECTION: forcing a failure. [ 1193.781267][T17187] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.052158][ T29] audit: type=1400 audit(1734581860.133:3260): avc: denied { create } for pid=17180 comm="syz.4.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1194.159516][T17187] CPU: 0 UID: 0 PID: 17187 Comm: syz.7.2897 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1194.170331][T17187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1194.180398][T17187] Call Trace: [ 1194.183678][T17187] [ 1194.186609][T17187] dump_stack_lvl+0x16c/0x1f0 [ 1194.191305][T17187] should_fail_ex+0x497/0x5b0 [ 1194.195999][T17187] ? fs_reclaim_acquire+0xae/0x150 [ 1194.201133][T17187] should_failslab+0xc2/0x120 [ 1194.205831][T17187] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1194.211657][T17187] ? __alloc_skb+0x2b1/0x380 [ 1194.216287][T17187] __alloc_skb+0x2b1/0x380 [ 1194.220722][T17187] ? __pfx___alloc_skb+0x10/0x10 [ 1194.225671][T17187] ? selinux_socket_getpeersec_dgram+0x1a5/0x370 [ 1194.232020][T17187] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 1194.238709][T17187] netlink_alloc_large_skb+0x69/0x130 [ 1194.244094][T17187] netlink_sendmsg+0x689/0xd70 [ 1194.248869][T17187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1194.254174][T17187] ____sys_sendmsg+0xaaf/0xc90 [ 1194.258946][T17187] ? copy_msghdr_from_user+0x10b/0x160 [ 1194.264408][T17187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1194.269716][T17187] ___sys_sendmsg+0x135/0x1e0 [ 1194.274404][T17187] ? __pfx____sys_sendmsg+0x10/0x10 [ 1194.279612][T17187] ? __pfx_lock_release+0x10/0x10 [ 1194.284641][T17187] ? trace_lock_acquire+0x14e/0x1f0 [ 1194.289860][T17187] ? __fget_files+0x206/0x3a0 [ 1194.294552][T17187] __sys_sendmsg+0x16e/0x220 [ 1194.299149][T17187] ? __pfx___sys_sendmsg+0x10/0x10 [ 1194.304282][T17187] do_syscall_64+0xcd/0x250 [ 1194.308799][T17187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.314721][T17187] RIP: 0033:0x7ff108d85d29 [ 1194.319137][T17187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.338755][T17187] RSP: 002b:00007ff109c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1194.347176][T17187] RAX: ffffffffffffffda RBX: 00007ff108f76080 RCX: 00007ff108d85d29 [ 1194.355150][T17187] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1194.363123][T17187] RBP: 00007ff109c76090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.371096][T17187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.379068][T17187] R13: 0000000000000001 R14: 00007ff108f76080 R15: 00007ffe06c621f8 [ 1194.387055][T17187] [ 1194.547955][ T344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.628362][T10890] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.730445][ T2939] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.905767][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1194.958776][T17014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1194.989324][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.036353][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.599696][T17014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1195.640961][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.738646][T17014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1195.745476][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.758831][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1195.799956][T17199] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2898'. [ 1195.811509][T17014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1195.855587][ T3454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1196.821379][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1196.947730][ T3454] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1197.034996][T17219] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1197.074106][T17014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1197.102110][T17014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1197.809120][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1197.809140][ T29] audit: type=1400 audit(1734581863.943:3267): avc: denied { bind } for pid=17217 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1197.851226][T17229] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1197.859953][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.867135][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1197.885071][T17229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.133638][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.140783][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.380667][ T29] audit: type=1400 audit(1734581863.943:3268): avc: denied { setopt } for pid=17217 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1198.659349][ T29] audit: type=1400 audit(1734581863.953:3269): avc: denied { write } for pid=17217 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1198.748578][ T29] audit: type=1400 audit(1734581863.953:3270): avc: denied { write } for pid=17217 comm="syz.4.2904" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1198.761624][T17014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1198.860700][ T29] audit: type=1400 audit(1734581864.013:3271): avc: denied { write } for pid=17217 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1199.040764][ T29] audit: type=1400 audit(1734581864.023:3272): avc: denied { create } for pid=17217 comm="syz.4.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1199.193882][ T29] audit: type=1400 audit(1734581864.073:3273): avc: denied { ioctl } for pid=17218 comm="syz.5.2905" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53066 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1199.300504][ T29] audit: type=1400 audit(1734581864.393:3274): avc: denied { read } for pid=17218 comm="syz.5.2905" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1199.320600][ T5867] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1199.360724][ T29] audit: type=1400 audit(1734581864.403:3275): avc: denied { open } for pid=17218 comm="syz.5.2905" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1199.464903][ T29] audit: type=1400 audit(1734581864.413:3276): avc: denied { create } for pid=17218 comm="syz.5.2905" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1199.517423][T17014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.550670][T17014] veth0_vlan: entered promiscuous mode [ 1199.567032][T17014] veth1_vlan: entered promiscuous mode [ 1199.588915][T17014] veth0_macvtap: entered promiscuous mode [ 1199.626655][T17014] veth1_macvtap: entered promiscuous mode [ 1199.657243][ T5867] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1199.668379][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.686448][ T5867] usb 8-1: Product: syz [ 1199.697066][T17014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1199.706513][ T5867] usb 8-1: Manufacturer: syz [ 1199.719856][ T5867] usb 8-1: SerialNumber: syz [ 1199.738465][T17014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1199.771763][T17014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.783529][ T5867] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1199.799364][T17014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.815014][T17014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.772543][T17014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.795946][ T5899] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1201.319262][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.817753][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.842304][ T5899] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1201.872407][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.876887][ T5899] ath9k_htc: Failed to initialize the device [ 1201.880234][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.183513][ T5899] usb 8-1: ath9k_htc: USB layer deinitialized [ 1202.226121][T17272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2918'. [ 1203.057330][ T6358] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1203.224493][T17285] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1203.233264][T17285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1203.357425][T17283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2917'. [ 1203.953074][ T6358] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.973696][ T6358] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.176462][ T6358] usb 7-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1204.374894][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1204.479740][ T6358] usb 7-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 1204.586391][ T6358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.595184][ T2144] usb 8-1: USB disconnect, device number 26 [ 1204.642751][ T6358] usb 7-1: config 0 descriptor?? [ 1205.084389][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1205.084420][ T29] audit: type=1400 audit(1734581871.293:3305): avc: denied { read write } for pid=17294 comm="syz.7.2922" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1205.086246][ T5828] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 1205.092798][ T29] audit: type=1400 audit(1734581871.293:3306): avc: denied { open } for pid=17294 comm="syz.7.2922" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1205.174131][ T29] audit: type=1400 audit(1734581871.313:3307): avc: denied { bind } for pid=17294 comm="syz.7.2922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1205.991033][ T6358] elecom 0003:056E:00FF.0037: report_id 0 is invalid [ 1205.998583][ T6358] elecom 0003:056E:00FF.0037: item 0 0 1 8 parsing failed [ 1206.070622][ T6358] elecom 0003:056E:00FF.0037: probe with driver elecom failed with error -22 [ 1206.116617][ T6358] usb 7-1: USB disconnect, device number 40 [ 1206.202671][T17315] FAULT_INJECTION: forcing a failure. [ 1206.202671][T17315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.228943][T17315] CPU: 0 UID: 0 PID: 17315 Comm: syz.6.2926 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1206.239746][T17315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1206.249816][T17315] Call Trace: [ 1206.253113][T17315] [ 1206.256052][T17315] dump_stack_lvl+0x16c/0x1f0 [ 1206.260749][T17315] should_fail_ex+0x497/0x5b0 [ 1206.265449][T17315] _copy_to_user+0x32/0xd0 [ 1206.269878][T17315] do_pages_stat+0x5a9/0x800 [ 1206.274500][T17315] ? __pfx_do_pages_stat+0x10/0x10 [ 1206.279644][T17315] ? cpuset_mems_allowed+0x1d9/0x480 [ 1206.284963][T17315] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1206.290782][T17315] ? lockdep_hardirqs_on+0x7c/0x110 [ 1206.295993][T17315] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1206.301819][T17315] kernel_move_pages+0x107d/0x1560 [ 1206.306955][T17315] ? __mutex_unlock_slowpath+0x164/0x690 [ 1206.312608][T17315] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1206.318611][T17315] ? __pfx_kernel_move_pages+0x10/0x10 [ 1206.324094][T17315] ? __fget_files+0x206/0x3a0 [ 1206.328787][T17315] ? fput+0x67/0x440 [ 1206.332707][T17315] ? ksys_write+0x1ba/0x250 [ 1206.337223][T17315] ? __pfx_ksys_write+0x10/0x10 [ 1206.342088][T17315] __x64_sys_move_pages+0xe0/0x1c0 [ 1206.347220][T17315] ? do_syscall_64+0x91/0x250 [ 1206.351911][T17315] ? lockdep_hardirqs_on+0x7c/0x110 [ 1206.357122][T17315] do_syscall_64+0xcd/0x250 [ 1206.361646][T17315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.367557][T17315] RIP: 0033:0x7fcd69b85d29 [ 1206.371980][T17315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.391600][T17315] RSP: 002b:00007fcd6aa1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 1206.400031][T17315] RAX: ffffffffffffffda RBX: 00007fcd69d75fa0 RCX: 00007fcd69b85d29 [ 1206.408014][T17315] RDX: 0000000020000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1206.416130][T17315] RBP: 00007fcd6aa1d090 R08: 9999999999999999 R09: 0000000000000000 [ 1206.424123][T17315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.432112][T17315] R13: 0000000000000000 R14: 00007fcd69d75fa0 R15: 00007fffa3b8e7a8 [ 1206.440110][T17315] [ 1207.267755][T17325] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2931'. [ 1208.387804][T17328] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1208.540930][T17328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.780785][ T29] audit: type=1400 audit(1734581875.003:3308): avc: denied { accept } for pid=17333 comm="syz.5.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1208.816672][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1208.832145][ T29] audit: type=1400 audit(1734581875.063:3309): avc: denied { setopt } for pid=17333 comm="syz.5.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1209.431332][T17334] No such timeout policy "syz0" [ 1209.640644][ T29] audit: type=1400 audit(1734581875.783:3310): avc: denied { write } for pid=17333 comm="syz.5.2933" name="unix" dev="proc" ino=4026533961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1209.810501][T17342] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1209.818209][T17342] audit: out of memory in audit_log_start [ 1210.299156][ T29] audit: type=1400 audit(1734581876.523:3311): avc: denied { name_connect } for pid=17340 comm="syz.4.2937" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1210.345368][ T29] audit: type=1400 audit(1734581876.553:3312): avc: denied { listen } for pid=17340 comm="syz.4.2937" lport=38366 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1210.920496][ T29] audit: type=1400 audit(1734581877.133:3313): avc: denied { create } for pid=17348 comm="syz.4.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1210.982605][ T29] audit: type=1400 audit(1734581877.213:3314): avc: denied { connect } for pid=17348 comm="syz.4.2940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1211.070539][ T29] audit: type=1400 audit(1734581877.233:3315): avc: denied { read } for pid=17348 comm="syz.4.2940" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1211.149359][ T29] audit: type=1400 audit(1734581877.233:3316): avc: denied { open } for pid=17348 comm="syz.4.2940" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1211.404901][ T29] audit: type=1400 audit(1734581877.243:3317): avc: denied { ioctl } for pid=17348 comm="syz.4.2940" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1211.432251][ T29] audit: type=1400 audit(1734581877.623:3318): avc: denied { create } for pid=17357 comm="syz.4.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1211.453308][ T29] audit: type=1400 audit(1734581877.633:3319): avc: denied { ioctl } for pid=17357 comm="syz.4.2942" path="socket:[55303]" dev="sockfs" ino=55303 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1211.481768][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 1211.809956][ T29] audit: type=1400 audit(1734581878.033:3320): avc: denied { connect } for pid=17357 comm="syz.4.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1211.978708][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2942'. [ 1212.092461][T17151] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1212.271130][T17151] usb 3-1: Using ep0 maxpacket: 16 [ 1212.280614][T17151] usb 3-1: config 0 has no interfaces? [ 1212.288066][T17151] usb 3-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 1212.297419][T17151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.309204][T17151] usb 3-1: Product: syz [ 1212.317667][T17151] usb 3-1: Manufacturer: syz [ 1212.333394][T17151] usb 3-1: SerialNumber: syz [ 1212.347598][T17151] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 1212.403708][T17375] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2947'. [ 1212.567523][T17151] apple-mfi-fastcharge 3-1: USB disconnect, device number 66 [ 1213.367679][T17383] FAULT_INJECTION: forcing a failure. [ 1213.367679][T17383] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.383645][T17383] CPU: 1 UID: 0 PID: 17383 Comm: syz.2.2949 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1213.394445][T17383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1213.404498][T17383] Call Trace: [ 1213.407767][T17383] [ 1213.410692][T17383] dump_stack_lvl+0x16c/0x1f0 [ 1213.415374][T17383] should_fail_ex+0x497/0x5b0 [ 1213.420051][T17383] ? fs_reclaim_acquire+0xae/0x150 [ 1213.425170][T17383] should_failslab+0xc2/0x120 [ 1213.429844][T17383] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1213.435742][T17383] ? __alloc_skb+0x2b1/0x380 [ 1213.440341][T17383] __alloc_skb+0x2b1/0x380 [ 1213.444762][T17383] ? __pfx___alloc_skb+0x10/0x10 [ 1213.449703][T17383] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1213.455694][T17383] netlink_alloc_large_skb+0x69/0x130 [ 1213.461068][T17383] netlink_sendmsg+0x689/0xd70 [ 1213.465850][T17383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.471172][T17383] ____sys_sendmsg+0xaaf/0xc90 [ 1213.475949][T17383] ? copy_msghdr_from_user+0x10b/0x160 [ 1213.481399][T17383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.486695][T17383] ___sys_sendmsg+0x135/0x1e0 [ 1213.491369][T17383] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.496571][T17383] ? __pfx_lock_release+0x10/0x10 [ 1213.501592][T17383] ? trace_lock_acquire+0x14e/0x1f0 [ 1213.506798][T17383] ? __fget_files+0x206/0x3a0 [ 1213.511474][T17383] __sys_sendmsg+0x16e/0x220 [ 1213.516057][T17383] ? __pfx___sys_sendmsg+0x10/0x10 [ 1213.521176][T17383] do_syscall_64+0xcd/0x250 [ 1213.525680][T17383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.531572][T17383] RIP: 0033:0x7fbdb3b85d29 [ 1213.535982][T17383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.555582][T17383] RSP: 002b:00007fbdb492f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1213.563990][T17383] RAX: ffffffffffffffda RBX: 00007fbdb3d75fa0 RCX: 00007fbdb3b85d29 [ 1213.571955][T17383] RDX: 0000000020000000 RSI: 0000000020000400 RDI: 0000000000000005 [ 1213.579917][T17383] RBP: 00007fbdb492f090 R08: 0000000000000000 R09: 0000000000000000 [ 1213.587881][T17383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1213.595845][T17383] R13: 0000000000000000 R14: 00007fbdb3d75fa0 R15: 00007ffe6c15fc68 [ 1213.603827][T17383] [ 1214.940495][ T5899] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1214.990574][ T5869] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1215.091852][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 1215.173723][ T5899] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1215.201128][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 1215.230888][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.239010][ T5899] usb 5-1: Product: syz [ 1215.250747][ T5869] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1215.259823][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.291751][ T5899] usb 5-1: Manufacturer: syz [ 1215.296635][ T5869] usb 6-1: Product: syz [ 1215.305563][ T5899] usb 5-1: SerialNumber: syz [ 1215.315638][ T5869] usb 6-1: Manufacturer: syz [ 1215.333794][ T5869] usb 6-1: SerialNumber: syz [ 1215.341051][ T5899] usb 5-1: config 0 descriptor?? [ 1215.346952][ T5869] usb 6-1: config 0 descriptor?? [ 1215.362961][ T5899] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1215.374115][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 1215.374131][ T29] audit: type=1400 audit(1734581881.603:3360): avc: denied { create } for pid=17405 comm="syz.6.2957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1215.447079][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1215.855545][ T29] audit: type=1400 audit(1734581882.083:3361): avc: denied { connect } for pid=17408 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1215.893177][ T29] audit: type=1400 audit(1734581882.103:3362): avc: denied { write } for pid=17408 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1216.181464][ T29] audit: type=1400 audit(1734581882.103:3363): avc: denied { read } for pid=17408 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1216.388693][T17395] netlink: 'syz.4.2953': attribute type 1 has an invalid length. [ 1216.397783][ T29] audit: type=1400 audit(1734581882.113:3364): avc: denied { create } for pid=17408 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1216.441905][T17397] netlink: 'syz.5.2952': attribute type 1 has an invalid length. [ 1216.500166][ T29] audit: type=1400 audit(1734581882.113:3365): avc: denied { setopt } for pid=17408 comm="syz.6.2958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1216.833727][ T29] audit: type=1400 audit(1734581882.603:3366): avc: denied { create } for pid=17394 comm="syz.4.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1216.865107][ T29] audit: type=1400 audit(1734581882.943:3367): avc: denied { write } for pid=17394 comm="syz.4.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1217.557358][T17397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1217.836367][ T5899] gspca_sonixj: reg_w1 err -110 [ 1217.841486][ T5899] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 1217.849412][ T5869] gspca_sonixj: reg_w1 err -110 [ 1217.854644][ T5869] sonixj 6-1:0.0: probe with driver sonixj failed with error -110 [ 1217.992613][ T6358] usb 6-1: USB disconnect, device number 48 [ 1218.441962][ T29] audit: type=1400 audit(1734581884.663:3368): avc: denied { create } for pid=17427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1218.469692][ T29] audit: type=1400 audit(1734581884.663:3369): avc: denied { read } for pid=17427 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1218.496114][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1218.506664][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1218.515980][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1218.523911][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1218.534048][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1218.547070][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1220.598468][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1220.598485][ T29] audit: type=1400 audit(1734581886.823:3374): avc: denied { setopt } for pid=17425 comm="syz.6.2960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1220.635590][ T5899] usb 5-1: USB disconnect, device number 54 [ 1220.741968][ T5829] Bluetooth: hci3: command tx timeout [ 1220.923991][ T29] audit: type=1400 audit(1734581887.023:3375): avc: denied { create } for pid=17438 comm="syz.2.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1221.303389][ T29] audit: type=1400 audit(1734581887.023:3376): avc: denied { ioctl } for pid=17438 comm="syz.2.2963" path="socket:[55505]" dev="sockfs" ino=55505 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1221.358997][ T29] audit: type=1400 audit(1734581887.023:3377): avc: denied { bind } for pid=17438 comm="syz.2.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1221.530235][ T29] audit: type=1400 audit(1734581887.753:3378): avc: denied { module_request } for pid=17427 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1221.943557][ T29] audit: type=1400 audit(1734581888.143:3379): avc: denied { create } for pid=17450 comm="syz.2.2967" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1221.970854][ T2144] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1221.975155][ T29] audit: type=1400 audit(1734581888.143:3380): avc: denied { map } for pid=17450 comm="syz.2.2967" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1222.075556][ T29] audit: type=1400 audit(1734581888.143:3381): avc: denied { read write } for pid=17450 comm="syz.2.2967" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1222.075797][T17144] syz_tun (unregistering): left promiscuous mode [ 1222.121891][ T2144] usb 7-1: Using ep0 maxpacket: 32 [ 1222.134760][ T2144] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1222.169616][ T2144] usb 7-1: config 0 has no interface number 0 [ 1222.225689][ T2144] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1222.268876][ T29] audit: type=1400 audit(1734581888.163:3382): avc: denied { connect } for pid=17450 comm="syz.2.2967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1222.304394][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.355361][T17427] chnl_net:caif_netlink_parms(): no params data found [ 1222.406180][ T2144] usb 7-1: Product: syz [ 1222.450938][ T2144] usb 7-1: Manufacturer: syz [ 1222.501141][ T2144] usb 7-1: SerialNumber: syz [ 1222.519139][ T29] audit: type=1400 audit(1734581888.163:3383): avc: denied { name_connect } for pid=17450 comm="syz.2.2967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1222.583659][ T2144] usb 7-1: config 0 descriptor?? [ 1222.612846][ T2144] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1222.678280][ T2144] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1222.791155][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1222.810097][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1222.817942][ T5828] Bluetooth: hci3: command tx timeout [ 1222.823487][ T2144] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1222.848399][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1222.858616][T17017] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1222.868729][T17017] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1222.876320][T17017] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1223.696529][ T2144] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 1223.971369][T10890] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.075760][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.083808][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.091141][T17427] bridge_slave_0: entered allmulticast mode [ 1224.098082][T17427] bridge_slave_0: entered promiscuous mode [ 1224.105817][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.112938][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.120534][T17427] bridge_slave_1: entered allmulticast mode [ 1224.127409][T17427] bridge_slave_1: entered promiscuous mode [ 1224.542846][T10890] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.917087][ T5829] Bluetooth: hci3: command tx timeout [ 1224.952876][T17427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1225.189556][ T5829] Bluetooth: hci0: command tx timeout [ 1225.244985][T17427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1225.337651][T17478] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1225.389377][T10890] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.529013][T17427] team0: Port device team_slave_0 added [ 1225.576979][T10890] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.600341][T17427] team0: Port device team_slave_1 added [ 1225.684443][T17427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1225.696112][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.724775][T17427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1225.863941][T17427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1225.881099][T17427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1225.907544][T17427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1225.983034][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1225.983052][ T29] audit: type=1400 audit(1734581892.183:3391): avc: denied { ioctl } for pid=17488 comm="syz.4.2974" path="socket:[55735]" dev="sockfs" ino=55735 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1226.070716][ T29] audit: type=1400 audit(1734581892.293:3392): avc: denied { sys_module } for pid=17488 comm="syz.4.2974" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1226.078283][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2974'. [ 1226.109122][T10890] erspan0: left allmulticast mode [ 1226.118439][T10890] erspan0: left promiscuous mode [ 1226.124416][T10890] bridge0: port 1(erspan0) entered disabled state [ 1226.129499][ T29] audit: type=1400 audit(1734581892.353:3393): avc: denied { connect } for pid=17488 comm="syz.4.2974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1226.621452][ T5900] usb 7-1: USB disconnect, device number 41 [ 1226.627825][ T5900] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 1226.867855][T10890] bond0 (unregistering): Released all slaves [ 1226.970727][ T5829] Bluetooth: hci3: command tx timeout [ 1227.092272][T10890] bond1 (unregistering): Released all slaves [ 1227.201642][ T5829] Bluetooth: hci0: command tx timeout [ 1227.264674][T10890] bond2 (unregistering): Released all slaves [ 1227.346136][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2974'. [ 1227.405546][T17427] hsr_slave_0: entered promiscuous mode [ 1227.453878][T17427] hsr_slave_1: entered promiscuous mode [ 1227.479007][T17427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.487193][ T29] audit: type=1400 audit(1734581893.693:3394): avc: denied { name_bind } for pid=17502 comm="syz.2.2976" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1227.530305][T17427] Cannot create hsr debugfs directory [ 1227.569324][ T29] audit: type=1400 audit(1734581893.693:3395): avc: denied { node_bind } for pid=17502 comm="syz.2.2976" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1227.759542][ T29] audit: type=1400 audit(1734581893.983:3396): avc: denied { read write } for pid=17506 comm="syz.2.2978" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1227.784306][T17459] chnl_net:caif_netlink_parms(): no params data found [ 1227.787126][ T29] audit: type=1400 audit(1734581893.983:3397): avc: denied { open } for pid=17506 comm="syz.2.2978" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1228.164102][ T29] audit: type=1400 audit(1734581894.023:3398): avc: denied { mounton } for pid=17506 comm="syz.2.2978" path="/20/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1228.401389][ T29] audit: type=1400 audit(1734581894.023:3399): avc: denied { mount } for pid=17506 comm="syz.2.2978" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1228.431326][ T29] audit: type=1400 audit(1734581894.103:3400): avc: denied { bind } for pid=17510 comm="syz.6.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1228.700983][T17459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.721020][T17459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.728468][T17459] bridge_slave_0: entered allmulticast mode [ 1228.761722][T17459] bridge_slave_0: entered promiscuous mode [ 1228.797938][T17459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.825840][T17459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.848481][T17459] bridge_slave_1: entered allmulticast mode [ 1228.969739][T17526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1229.701530][ T5829] Bluetooth: hci0: command tx timeout [ 1229.877707][T17459] bridge_slave_1: entered promiscuous mode [ 1230.652732][T10890] batadv_slave_0: left promiscuous mode [ 1230.692327][T10890] hsr_slave_0: left promiscuous mode [ 1230.698331][T10890] hsr_slave_1: left promiscuous mode [ 1230.729376][T10890] veth1_macvtap: left promiscuous mode [ 1230.735272][T10890] veth0_macvtap: left promiscuous mode [ 1230.756699][T10890] veth1_vlan: left promiscuous mode [ 1230.773019][T10890] veth0_vlan: left promiscuous mode [ 1231.618369][T17542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1231.778910][T17017] Bluetooth: hci0: command tx timeout [ 1232.167883][T17459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.279241][T17542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1232.320845][T17542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.339535][T17542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1232.350126][T17542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.378004][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1232.401529][T17459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.489356][T17459] team0: Port device team_slave_0 added [ 1232.512457][T17459] team0: Port device team_slave_1 added [ 1232.586799][T17459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.600431][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.632926][T17459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.665423][T17459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.680509][T17459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.706588][T17459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.766217][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1232.766233][ T29] audit: type=1400 audit(1734581898.993:3412): avc: denied { prog_load } for pid=17555 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1232.795356][ T29] audit: type=1400 audit(1734581899.013:3413): avc: denied { bpf } for pid=17555 comm="syz.2.2990" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1232.819226][ T29] audit: type=1400 audit(1734581899.013:3414): avc: denied { perfmon } for pid=17555 comm="syz.2.2990" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1232.842634][ T29] audit: type=1400 audit(1734581899.013:3415): avc: denied { prog_run } for pid=17555 comm="syz.2.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1232.878717][T17459] hsr_slave_0: entered promiscuous mode [ 1232.885983][T17459] hsr_slave_1: entered promiscuous mode [ 1232.892675][T17459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.902506][T17459] Cannot create hsr debugfs directory [ 1232.975551][T10890] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.039594][ T29] audit: type=1400 audit(1734581899.263:3416): avc: denied { read write } for pid=17014 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1233.067322][ T29] audit: type=1400 audit(1734581899.263:3417): avc: denied { open } for pid=17014 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1233.093244][ T29] audit: type=1400 audit(1734581899.263:3418): avc: denied { ioctl } for pid=17014 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1233.099216][T17427] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1233.127732][ T29] audit: type=1400 audit(1734581899.323:3419): avc: denied { create } for pid=17427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1233.153033][ T29] audit: type=1400 audit(1734581899.323:3420): avc: denied { write } for pid=17427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1233.174022][ T29] audit: type=1400 audit(1734581899.323:3421): avc: denied { read } for pid=17427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1233.368587][T10890] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.386948][T17427] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1233.398137][T17427] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1233.670723][ T2144] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1233.722311][T17427] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1233.876167][ T2144] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1233.899868][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.916699][T10890] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1233.927765][ T2144] usb 5-1: Product: syz [ 1233.932078][ T2144] usb 5-1: Manufacturer: syz [ 1233.936755][ T2144] usb 5-1: SerialNumber: syz [ 1233.954408][ T2144] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1234.123944][ T25] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1234.613249][T10890] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1234.631656][T17459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1234.647358][T17459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1234.668621][T17459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1234.692461][T17459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1234.769594][T17427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1234.828958][T17427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.889898][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.897048][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1235.214820][T17427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1235.229445][T17427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1235.506117][T17427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.690624][ T25] usb 5-1: Service connection timeout for: 256 [ 1235.700050][ T25] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1235.729935][ T25] ath9k_htc: Failed to initialize the device [ 1235.742669][ T25] usb 5-1: ath9k_htc: USB layer deinitialized [ 1235.877256][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.884421][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1235.975322][T10890] bridge_slave_1: left allmulticast mode [ 1235.981125][T10890] bridge_slave_1: left promiscuous mode [ 1235.986801][T10890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.032239][T10890] bridge_slave_0: left allmulticast mode [ 1236.038105][T10890] bridge_slave_0: left promiscuous mode [ 1236.046778][T10890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.461852][ T5899] usb 5-1: USB disconnect, device number 55 [ 1236.552920][T17595] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1236.561033][T17595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1238.195157][T10890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.211122][T10890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.227573][T10890] bond0 (unregistering): Released all slaves [ 1238.267817][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1238.267834][ T29] audit: type=1400 audit(1734581904.493:3444): avc: denied { create } for pid=17600 comm="syz.2.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1238.295110][ T29] audit: type=1400 audit(1734581904.503:3445): avc: denied { ioctl } for pid=17600 comm="syz.2.2999" path="socket:[55296]" dev="sockfs" ino=55296 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1238.328454][ T29] audit: type=1400 audit(1734581904.503:3446): avc: denied { write } for pid=17600 comm="syz.2.2999" name="sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1238.542591][ T29] audit: type=1400 audit(1734581904.503:3447): avc: denied { open } for pid=17600 comm="syz.2.2999" path="/dev/sg0" dev="devtmpfs" ino=734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1238.610215][ T29] audit: type=1400 audit(1734581904.513:3448): avc: denied { read } for pid=17600 comm="syz.2.2999" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1238.640551][ T29] audit: type=1400 audit(1734581904.513:3449): avc: denied { open } for pid=17600 comm="syz.2.2999" path="net:[4026532904]" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1238.666258][ T29] audit: type=1400 audit(1734581904.513:3450): avc: denied { create } for pid=17600 comm="syz.2.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1238.686424][ T29] audit: type=1400 audit(1734581904.563:3451): avc: denied { ioctl } for pid=17600 comm="syz.2.2999" path="socket:[56326]" dev="sockfs" ino=56326 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1238.712544][ T29] audit: type=1400 audit(1734581904.633:3452): avc: denied { create } for pid=17598 comm="syz.4.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1238.734994][ T29] audit: type=1400 audit(1734581904.633:3453): avc: denied { create } for pid=17598 comm="syz.4.2998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1238.795537][T17605] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1238.820577][T10890] bond1 (unregistering): Released all slaves [ 1238.948643][T10890] bond2 (unregistering): Released all slaves [ 1238.982742][T17459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.001253][T17459] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.084606][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.091752][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.124666][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.131811][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1239.169531][T17427] veth0_vlan: entered promiscuous mode [ 1239.181121][T17427] veth1_vlan: entered promiscuous mode [ 1239.883297][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.889920][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.045125][T17427] veth0_macvtap: entered promiscuous mode [ 1240.053763][T17427] veth1_macvtap: entered promiscuous mode [ 1240.068433][T17427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.078462][T17427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.088142][T17427] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.097330][T17427] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.168706][T17427] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.177643][T17427] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.914995][T17459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.997557][T17630] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3004'. [ 1241.010618][ T6359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.018617][ T6359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1241.048179][T10890] hsr_slave_0: left promiscuous mode [ 1241.060619][T10890] hsr_slave_1: left promiscuous mode [ 1241.093282][T10890] veth1_macvtap: left promiscuous mode [ 1241.099561][T10890] veth0_macvtap: left promiscuous mode [ 1241.106099][T10890] veth1_vlan: left promiscuous mode [ 1241.113108][T10890] veth0_vlan: left promiscuous mode [ 1241.289041][ T5900] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1241.460847][ T5900] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1241.482034][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.499746][ T5900] usb 5-1: Product: syz [ 1241.505080][ T5900] usb 5-1: Manufacturer: syz [ 1241.511113][ T5900] usb 5-1: SerialNumber: syz [ 1241.517715][ T5900] usb 5-1: config 0 descriptor?? [ 1241.590525][ T6358] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1241.773656][ T6358] usb 3-1: config 5 has an invalid interface number: 159 but max is 1 [ 1241.791432][ T6358] usb 3-1: config 5 has no interface number 1 [ 1241.797767][ T6358] usb 3-1: config 5 interface 159 has no altsetting 0 [ 1241.811807][T10890] team0 (unregistering): Port device team_slave_1 removed [ 1241.813009][ T5900] usb 5-1: USB disconnect, device number 56 [ 1241.848514][ T6358] usb 3-1: New USB device found, idVendor=0582, idProduct=0004, bcdDevice=6b.64 [ 1241.866683][ T6358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.879651][T10890] team0 (unregistering): Port device team_slave_0 removed [ 1241.887438][ T6358] usb 3-1: Product: syz [ 1241.900533][ T6358] usb 3-1: Manufacturer: syz [ 1241.905208][ T6358] usb 3-1: SerialNumber: syz [ 1242.191810][ T6358] usb 3-1: USB disconnect, device number 67 [ 1242.644796][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.679883][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.879779][T17459] veth0_vlan: entered promiscuous mode [ 1242.901812][T17459] veth1_vlan: entered promiscuous mode [ 1242.946412][T17657] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2961'. [ 1242.976678][T17459] veth0_macvtap: entered promiscuous mode [ 1243.019577][T17459] veth1_macvtap: entered promiscuous mode [ 1243.082108][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1243.093166][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.105271][T17459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.118128][T17459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1243.178142][T17459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1243.225070][T17459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1243.264555][T17459] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.016416][T17459] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.040856][T17459] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.059558][T17459] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.078775][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 1244.078792][ T29] audit: type=1400 audit(1734581910.133:3525): avc: denied { create } for pid=17661 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.105025][ T29] audit: type=1400 audit(1734581910.133:3526): avc: denied { ioctl } for pid=17661 comm="syz.5.3010" path="socket:[57347]" dev="sockfs" ino=57347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.129894][ T29] audit: type=1400 audit(1734581910.133:3527): avc: denied { bind } for pid=17661 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.149255][ T29] audit: type=1400 audit(1734581910.133:3528): avc: denied { setopt } for pid=17661 comm="syz.5.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1244.172369][ T29] audit: type=1400 audit(1734581910.263:3529): avc: denied { name_bind } for pid=17666 comm="syz.4.3011" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1244.194484][ T29] audit: type=1400 audit(1734581910.263:3530): avc: denied { node_bind } for pid=17666 comm="syz.4.3011" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1244.332635][T17670] mkiss: ax0: crc mode is auto. [ 1244.422452][ T29] audit: type=1400 audit(1734581910.653:3531): avc: denied { read } for pid=17669 comm="syz.5.3012" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1244.435852][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.448335][ T29] audit: type=1400 audit(1734581910.653:3532): avc: denied { open } for pid=17669 comm="syz.5.3012" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1244.477808][ C0] vkms_vblank_simulate: vblank timer overrun [ 1244.492452][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.534545][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.543015][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.718136][T17681] FAULT_INJECTION: forcing a failure. [ 1244.718136][T17681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.736424][T17681] CPU: 0 UID: 0 PID: 17681 Comm: syz.8.2964 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1244.747312][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1244.757374][T17681] Call Trace: [ 1244.760654][T17681] [ 1244.763597][T17681] dump_stack_lvl+0x16c/0x1f0 [ 1244.768289][T17681] should_fail_ex+0x497/0x5b0 [ 1244.772983][T17681] _copy_to_user+0x32/0xd0 [ 1244.777407][T17681] simple_read_from_buffer+0xd0/0x160 [ 1244.782804][T17681] proc_fail_nth_read+0x198/0x270 [ 1244.787845][T17681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1244.793411][T17681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1244.798976][T17681] vfs_read+0x1df/0xbe0 [ 1244.803142][T17681] ? __fget_files+0x1fc/0x3a0 [ 1244.807828][T17681] ? __pfx___mutex_lock+0x10/0x10 [ 1244.812865][T17681] ? __pfx_vfs_read+0x10/0x10 [ 1244.817556][T17681] ? __fget_files+0x206/0x3a0 [ 1244.822250][T17681] ksys_read+0x12b/0x250 [ 1244.826497][T17681] ? __pfx_ksys_read+0x10/0x10 [ 1244.831276][T17681] do_syscall_64+0xcd/0x250 [ 1244.835793][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.841699][T17681] RIP: 0033:0x7f681b98473c [ 1244.846118][T17681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1244.865730][T17681] RSP: 002b:00007f681b7f9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1244.874152][T17681] RAX: ffffffffffffffda RBX: 00007f681bb75fa0 RCX: 00007f681b98473c [ 1244.882126][T17681] RDX: 000000000000000f RSI: 00007f681b7f90a0 RDI: 0000000000000004 [ 1244.890096][T17681] RBP: 00007f681b7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.898069][T17681] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1244.906042][T17681] R13: 0000000000000000 R14: 00007f681bb75fa0 R15: 00007ffe5a63f268 [ 1244.914033][T17681] [ 1244.917128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.104774][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1246.113016][T17693] FAULT_INJECTION: forcing a failure. [ 1246.113016][T17693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.122804][ T29] audit: type=1400 audit(1734581912.293:3533): avc: denied { create } for pid=17691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1246.146195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.153316][ T29] audit: type=1400 audit(1734581912.293:3534): avc: denied { read write } for pid=17691 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1246.159747][T17696] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3019'. [ 1246.177117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.179552][T17693] CPU: 0 UID: 0 PID: 17693 Comm: syz.6.3017 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1246.203221][T17693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1246.213292][T17693] Call Trace: [ 1246.216582][T17693] [ 1246.219525][T17693] dump_stack_lvl+0x16c/0x1f0 [ 1246.224228][T17693] should_fail_ex+0x497/0x5b0 [ 1246.228930][T17693] _copy_from_user+0x2e/0xd0 [ 1246.233545][T17693] move_addr_to_kernel+0x68/0x160 [ 1246.238586][T17693] __copy_msghdr+0x386/0x470 [ 1246.243177][T17693] copy_msghdr_from_user+0xc2/0x160 [ 1246.248380][T17693] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1246.254179][T17693] ? __lock_acquire+0xcc5/0x3c40 [ 1246.259126][T17693] ___sys_sendmsg+0xff/0x1e0 [ 1246.263716][T17693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1246.268916][T17693] ? trace_lock_acquire+0x14e/0x1f0 [ 1246.274136][T17693] __sys_sendmmsg+0x201/0x420 [ 1246.278811][T17693] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1246.284029][T17693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1246.290025][T17693] ? fput+0x67/0x440 [ 1246.293924][T17693] ? ksys_write+0x1ba/0x250 [ 1246.298421][T17693] ? __pfx_ksys_write+0x10/0x10 [ 1246.303270][T17693] __x64_sys_sendmmsg+0x9c/0x100 [ 1246.308205][T17693] ? lockdep_hardirqs_on+0x7c/0x110 [ 1246.313402][T17693] do_syscall_64+0xcd/0x250 [ 1246.317907][T17693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.323804][T17693] RIP: 0033:0x7fcd69b85d29 [ 1246.328213][T17693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.347817][T17693] RSP: 002b:00007fcd6aa1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1246.356225][T17693] RAX: ffffffffffffffda RBX: 00007fcd69d75fa0 RCX: 00007fcd69b85d29 [ 1246.364186][T17693] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000017 [ 1246.372150][T17693] RBP: 00007fcd6aa1d090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.380114][T17693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.388076][T17693] R13: 0000000000000000 R14: 00007fcd69d75fa0 R15: 00007fffa3b8e7a8 [ 1246.396063][T17693] [ 1246.399151][ C0] vkms_vblank_simulate: vblank timer overrun [ 1246.408116][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1246.417240][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1246.425144][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1246.432867][ T5829] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1246.441873][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1247.210550][T17151] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1247.600485][T17151] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1247.610270][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.717967][T17151] usb 3-1: config 0 descriptor?? [ 1247.786341][T17151] cp210x 3-1:0.0: cp210x converter detected [ 1247.799137][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.008209][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.065627][T17691] chnl_net:caif_netlink_parms(): no params data found [ 1248.169879][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.250822][T17151] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1248.341973][ T12] team0: Port device netdevsim0 removed [ 1248.350069][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.372023][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.379384][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.388160][T17691] bridge_slave_0: entered allmulticast mode [ 1248.395584][T17691] bridge_slave_0: entered promiscuous mode [ 1248.432046][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.439175][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.464375][T17151] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1248.468895][T17691] bridge_slave_1: entered allmulticast mode [ 1248.481090][ T5829] Bluetooth: hci5: command tx timeout [ 1248.486838][T17691] bridge_slave_1: entered promiscuous mode [ 1248.552993][T17691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.986657][T17691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.225953][ T12] bridge_slave_1: left allmulticast mode [ 1249.233941][ T12] bridge_slave_1: left promiscuous mode [ 1249.245990][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.269208][ T12] bridge_slave_0: left allmulticast mode [ 1249.284535][ T12] bridge_slave_0: left promiscuous mode [ 1249.297583][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.521891][T17742] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3031'. [ 1250.208530][ T5900] usb 3-1: USB disconnect, device number 68 [ 1250.312239][ T5900] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1250.397339][ T5900] cp210x 3-1:0.0: device disconnected [ 1250.587844][ T5829] Bluetooth: hci5: command tx timeout [ 1250.635037][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1250.635054][ T29] audit: type=1400 audit(1734581916.863:3557): avc: denied { write } for pid=17748 comm="syz.5.3032" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1250.781256][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1250.791951][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.803004][ T12] bond0 (unregistering): Released all slaves [ 1250.812735][ T12] bond1 (unregistering): Released all slaves [ 1250.823634][ T12] bond2 (unregistering): Released all slaves [ 1250.941585][ T12] bond3 (unregistering): Released all slaves [ 1250.958781][T17691] team0: Port device team_slave_0 added [ 1250.989665][T17691] team0: Port device team_slave_1 added [ 1251.165165][T17691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.207697][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.276747][T17691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.291017][T17691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.298093][T17691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.324497][T17691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.161843][T17768] openvswitch: netlink: nsh attribute has 8 unknown bytes. [ 1252.169232][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.038250][ T29] audit: type=1400 audit(1734581918.373:3558): avc: denied { ioctl } for pid=17764 comm="syz.6.3036" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=57784 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1253.065037][ T29] audit: type=1400 audit(1734581918.413:3559): avc: denied { create } for pid=17764 comm="syz.6.3036" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1253.413059][ T29] audit: type=1400 audit(1734581918.413:3560): avc: denied { write } for pid=17764 comm="syz.6.3036" name="file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1253.436100][ T5829] Bluetooth: hci5: command tx timeout [ 1253.700543][ T29] audit: type=1400 audit(1734581918.413:3561): avc: denied { open } for pid=17764 comm="syz.6.3036" path="/479/file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1253.740461][ T29] audit: type=1400 audit(1734581918.423:3562): avc: denied { ioctl } for pid=17764 comm="syz.6.3036" path="/479/file0" dev="tmpfs" ino=2521 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1253.801444][ T29] audit: type=1400 audit(1734581919.413:3563): avc: denied { connect } for pid=17766 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1253.840524][ T29] audit: type=1400 audit(1734581919.493:3564): avc: denied { write } for pid=17766 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1253.880491][ T29] audit: type=1400 audit(1734581919.493:3565): avc: denied { read } for pid=17766 comm="syz.5.3038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1254.105691][ T29] audit: type=1400 audit(1734581920.303:3566): avc: denied { unlink } for pid=8427 comm="syz-executor" name="file0" dev="tmpfs" ino=2521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1255.188237][T17691] hsr_slave_0: entered promiscuous mode [ 1255.195246][T17691] hsr_slave_1: entered promiscuous mode [ 1255.202606][T17691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1255.210182][T17691] Cannot create hsr debugfs directory [ 1255.962518][ T5829] Bluetooth: hci5: command tx timeout [ 1257.729537][ T12] hsr_slave_0: left promiscuous mode [ 1257.740541][ T12] hsr_slave_1: left promiscuous mode [ 1257.780100][ T12] veth1_macvtap: left promiscuous mode [ 1257.786158][ T12] veth0_macvtap: left promiscuous mode [ 1257.792020][ T12] veth1_vlan: left promiscuous mode [ 1257.797353][ T12] veth0_vlan: left promiscuous mode [ 1258.410929][ T5900] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1258.527479][ T29] audit: type=1400 audit(1734581924.753:3567): avc: denied { write } for pid=17821 comm="syz.5.3051" laddr=::1 lport=60 faddr=::1 fport=16385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1258.580656][ T5900] usb 9-1: Using ep0 maxpacket: 8 [ 1258.589058][ T5900] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1258.598436][ T5900] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.616349][ T5900] usb 9-1: Product: syz [ 1258.627874][ T5900] usb 9-1: Manufacturer: syz [ 1258.632750][ T5900] usb 9-1: SerialNumber: syz [ 1258.641734][ T5900] usb 9-1: config 0 descriptor?? [ 1258.650569][ T5900] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1258.983755][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1259.033781][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1259.605094][ T5900] gspca_sonixj: reg_w1 err -110 [ 1259.610051][ T5900] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 1261.934749][T17691] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1262.026960][T17691] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1262.093617][T17691] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1262.103631][T17691] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1262.222282][ T25] usb 9-1: USB disconnect, device number 2 [ 1262.275525][T17691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.282072][T17861] FAULT_INJECTION: forcing a failure. [ 1262.282072][T17861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1262.291887][T17691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.322356][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.329446][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.331607][T17861] CPU: 0 UID: 0 PID: 17861 Comm: syz.5.3062 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1262.347366][T17861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1262.357413][T17861] Call Trace: [ 1262.360678][T17861] [ 1262.363597][T17861] dump_stack_lvl+0x16c/0x1f0 [ 1262.368270][T17861] should_fail_ex+0x497/0x5b0 [ 1262.372943][T17861] _copy_from_user+0x2e/0xd0 [ 1262.377530][T17861] move_addr_to_kernel+0x68/0x160 [ 1262.382559][T17861] __sys_sendto+0x1ba/0x4f0 [ 1262.387059][T17861] ? __pfx___sys_sendto+0x10/0x10 [ 1262.392075][T17861] ? reacquire_held_locks+0x20b/0x4c0 [ 1262.397437][T17861] ? do_user_addr_fault+0xdc7/0x13f0 [ 1262.402750][T17861] __x64_sys_sendto+0xe0/0x1c0 [ 1262.407504][T17861] ? do_syscall_64+0x91/0x250 [ 1262.412262][T17861] ? lockdep_hardirqs_on+0x7c/0x110 [ 1262.417458][T17861] do_syscall_64+0xcd/0x250 [ 1262.421959][T17861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.427846][T17861] RIP: 0033:0x7fe7fb787bbc [ 1262.432256][T17861] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1262.451867][T17861] RSP: 002b:00007fe7fc4d0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1262.460299][T17861] RAX: ffffffffffffffda RBX: 00007fe7fc4d0fc0 RCX: 00007fe7fb787bbc [ 1262.468261][T17861] RDX: 0000000000000020 RSI: 00007fe7fc4d1010 RDI: 0000000000000004 [ 1262.476235][T17861] RBP: 0000000000000000 R08: 00007fe7fc4d0f14 R09: 000000000000000c [ 1262.484231][T17861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1262.492209][T17861] R13: 00007fe7fc4d0f68 R14: 00007fe7fc4d1010 R15: 0000000000000000 [ 1262.500189][T17861] [ 1262.513210][ T2939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.520330][ T2939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.577988][T17691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1262.588648][T17691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1262.762565][T17871] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3065'. [ 1263.394431][T17691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1263.758802][ T29] audit: type=1400 audit(1734581929.973:3568): avc: denied { create } for pid=17886 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1263.812225][T17151] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1264.243746][ T29] audit: type=1400 audit(1734581930.473:3569): avc: denied { create } for pid=17886 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.283730][T17151] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1264.295882][T17151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.305963][T17151] usb 7-1: Product: syz [ 1264.310127][T17151] usb 7-1: Manufacturer: syz [ 1264.329067][ T29] audit: type=1400 audit(1734581930.493:3570): avc: denied { shutdown } for pid=17886 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.349719][T17151] usb 7-1: SerialNumber: syz [ 1264.368325][ T5870] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1264.371683][T17151] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1264.403076][ T5870] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1264.404481][ T29] audit: type=1400 audit(1734581930.493:3571): avc: denied { setopt } for pid=17886 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.436332][T17691] veth0_vlan: entered promiscuous mode [ 1264.454841][ T5869] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1264.476912][T17691] veth1_vlan: entered promiscuous mode [ 1264.490594][ T29] audit: type=1400 audit(1734581930.493:3572): avc: denied { bind } for pid=17886 comm="syz.5.3068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.540607][ T29] audit: type=1400 audit(1734581930.503:3573): avc: denied { name_bind } for pid=17886 comm="syz.5.3068" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1264.568035][T17691] veth0_macvtap: entered promiscuous mode [ 1264.595508][T17691] veth1_macvtap: entered promiscuous mode [ 1264.626293][ T29] audit: type=1400 audit(1734581930.503:3574): avc: denied { node_bind } for pid=17886 comm="syz.5.3068" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1264.654173][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.670943][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.690548][ T29] audit: type=1400 audit(1734581930.503:3575): avc: denied { write } for pid=17886 comm="syz.5.3068" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.722798][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1264.743541][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.760537][ T29] audit: type=1400 audit(1734581930.503:3576): avc: denied { connect } for pid=17886 comm="syz.5.3068" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1264.783976][T17691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1264.809661][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.820566][ T29] audit: type=1400 audit(1734581930.503:3577): avc: denied { name_connect } for pid=17886 comm="syz.5.3068" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1264.854316][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.870455][T17691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1264.890435][T17691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1264.913060][T17691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.957923][T17691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.000537][T17691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.029108][T17691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.048257][T17691] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.207926][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.216219][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.280012][T10890] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.294459][T10890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.403312][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 1265.510755][ T5870] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1265.570097][T17908] FAULT_INJECTION: forcing a failure. [ 1265.570097][T17908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.603529][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.4.3073 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1265.614341][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1265.624422][T17908] Call Trace: [ 1265.627712][T17908] [ 1265.630656][T17908] dump_stack_lvl+0x16c/0x1f0 [ 1265.635359][T17908] should_fail_ex+0x497/0x5b0 [ 1265.640065][T17908] strncpy_from_user+0x3b/0x2d0 [ 1265.644958][T17908] getname_flags.part.0+0x8f/0x550 [ 1265.650097][T17908] getname_flags+0x93/0xf0 [ 1265.654528][T17908] user_path_at+0x24/0x60 [ 1265.658862][T17908] __do_sys_pivot_root+0x175/0x1660 [ 1265.664058][T17908] ? __might_fault+0x13b/0x190 [ 1265.668828][T17908] ? __pfx_lock_release+0x10/0x10 [ 1265.673846][T17908] ? trace_lock_acquire+0x14e/0x1f0 [ 1265.679040][T17908] ? __pfx___do_sys_pivot_root+0x10/0x10 [ 1265.684668][T17908] ? lock_acquire+0x2f/0xb0 [ 1265.689176][T17908] do_syscall_64+0xcd/0x250 [ 1265.693682][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.699573][T17908] RIP: 0033:0x7f9d78385d29 [ 1265.703981][T17908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.723582][T17908] RSP: 002b:00007f9d791af038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 1265.731987][T17908] RAX: ffffffffffffffda RBX: 00007f9d78575fa0 RCX: 00007f9d78385d29 [ 1265.739949][T17908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.747909][T17908] RBP: 00007f9d791af090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.755875][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.763924][T17908] R13: 0000000000000000 R14: 00007f9d78575fa0 R15: 00007ffd8e596818 [ 1265.771900][T17908] [ 1265.781699][ T5869] usb 7-1: Service connection timeout for: 256 [ 1265.787948][ T5869] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1265.800549][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 1265.811825][ T5870] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 1265.820137][ T5870] usb 6-1: config 0 has no interface number 0 [ 1265.825528][ T5869] ath9k_htc: Failed to initialize the device [ 1265.828222][ T5870] usb 6-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1265.837112][T17910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3072'. [ 1265.846213][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.854305][ T5869] usb 7-1: ath9k_htc: USB layer deinitialized [ 1265.870848][ T5870] usb 6-1: Product: syz [ 1265.880875][ T5870] usb 6-1: Manufacturer: syz [ 1265.890070][ T5870] usb 6-1: SerialNumber: syz [ 1265.904219][ T5870] usb 6-1: config 0 descriptor?? [ 1265.912318][ T5870] ums-jumpshot 6-1:0.16: USB Mass Storage device detected [ 1265.929056][ T5870] ums-jumpshot 6-1:0.16: Quirks match for vid 05dc pid 0001: 2 [ 1265.947842][T17914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3074'. [ 1265.985816][ T5870] scsi host1: usb-storage 6-1:0.16 [ 1266.066802][T17918] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1266.221358][T17918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1266.931028][ T25] usb 7-1: USB disconnect, device number 42 [ 1268.083328][ T61] scsi 1:0:0:0: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 1268.112273][ T61] scsi 1:0:0:1: Direct-Access Lexar Jumpshot USB CF 0001 PQ: 0 ANSI: 0 CCS [ 1268.972525][ T61] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1269.047414][ T61] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 1269.094722][T17943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1269.407597][T17949] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3084'. [ 1269.416678][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3084'. [ 1270.069969][T17959] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1270.108941][T17959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1270.451781][ T25] usb 6-1: USB disconnect, device number 49 [ 1270.592312][T10890] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 1270.613892][ T35] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1270.767629][T10890] sd 1:0:0:0: [sdb] Sense not available. [ 1270.824346][ T5900] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1270.836196][ T35] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1270.846340][ T5900] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1270.847877][T10890] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1270.866490][ T35] sd 1:0:0:1: [sdc] Sense not available. [ 1270.890697][ T35] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 1270.897871][T10890] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1270.909471][ T35] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 1270.942695][T10890] sd 1:0:0:0: [sdb] Write Protect is off [ 1270.948562][T10890] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1270.964711][ T35] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 1270.976330][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1270.976346][ T29] audit: type=1400 audit(1734581937.203:3591): avc: denied { bind } for pid=17970 comm="syz.6.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1271.014642][ T35] sd 1:0:0:1: [sdc] Asking for cache data failed [ 1271.034419][T10890] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1271.054566][ T35] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 1271.086318][T10890] [ 1271.088683][T10890] ====================================================== [ 1271.095693][T10890] WARNING: possible circular locking dependency detected [ 1271.102703][T10890] 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 Not tainted [ 1271.109801][T10890] ------------------------------------------------------ [ 1271.116817][T10890] kworker/u8:14/10890 is trying to acquire lock: [ 1271.123146][T10890] ffff888027d81ca8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 1271.132771][T10890] [ 1271.132771][T10890] but task is already holding lock: [ 1271.140126][T10890] ffff888027d81470 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1271.150676][T10890] [ 1271.150676][T10890] which lock already depends on the new lock. [ 1271.150676][T10890] [ 1271.161071][T10890] [ 1271.161071][T10890] the existing dependency chain (in reverse order) is: [ 1271.170076][T10890] [ 1271.170076][T10890] -> #5 (&q->q_usage_counter(queue)#55){++++}-{0:0}: [ 1271.178946][T10890] blk_queue_enter+0x50f/0x640 [ 1271.184259][T10890] blk_mq_alloc_request+0x59b/0x950 [ 1271.189991][T10890] scsi_execute_cmd+0x1eb/0xf40 [ 1271.195408][T10890] read_capacity_10+0x1d4/0x6d0 [ 1271.200803][T10890] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 1271.207135][T10890] sd_probe+0x904/0x1000 [ 1271.211901][T10890] really_probe+0x23e/0xa90 [ 1271.216942][T10890] __driver_probe_device+0x1de/0x440 [ 1271.222751][T10890] driver_probe_device+0x4c/0x1b0 [ 1271.228302][T10890] __device_attach_driver+0x1df/0x310 [ 1271.234195][T10890] bus_for_each_drv+0x157/0x1e0 [ 1271.239561][T10890] __device_attach_async_helper+0x1d3/0x290 [ 1271.245986][T10890] async_run_entry_fn+0x9c/0x530 [ 1271.251483][T10890] process_one_work+0x9c5/0x1ba0 [ 1271.256949][T10890] worker_thread+0x6c8/0xf00 [ 1271.262055][T10890] kthread+0x2c1/0x3a0 [ 1271.266654][T10890] ret_from_fork+0x45/0x80 [ 1271.271592][T10890] ret_from_fork_asm+0x1a/0x30 [ 1271.276905][T10890] [ 1271.276905][T10890] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 1271.284555][T10890] __mutex_lock+0x19b/0xa60 [ 1271.289581][T10890] __nbd_set_size+0x2c0/0x730 [ 1271.294807][T10890] nbd_start_device+0x8fd/0xd70 [ 1271.300186][T10890] nbd_ioctl+0x21a/0xfd0 [ 1271.304946][T10890] blkdev_ioctl+0x276/0x6d0 [ 1271.309973][T10890] __x64_sys_ioctl+0x190/0x200 [ 1271.315259][T10890] do_syscall_64+0xcd/0x250 [ 1271.320282][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.326722][T10890] [ 1271.326722][T10890] -> #3 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1271.335340][T10890] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1271.340973][T10890] __submit_bio+0x384/0x540 [ 1271.345996][T10890] submit_bio_noacct_nocheck+0x698/0xd70 [ 1271.352142][T10890] submit_bio_noacct+0x93a/0x1e20 [ 1271.357680][T10890] block_read_full_folio+0x812/0xa50 [ 1271.363498][T10890] filemap_read_folio+0xc6/0x2a0 [ 1271.368972][T10890] filemap_get_pages+0x155f/0x1be0 [ 1271.374602][T10890] filemap_read+0x3ca/0xd70 [ 1271.379622][T10890] blkdev_read_iter+0x187/0x480 [ 1271.384999][T10890] vfs_read+0x87f/0xbe0 [ 1271.389666][T10890] ksys_read+0x12b/0x250 [ 1271.394426][T10890] do_syscall_64+0xcd/0x250 [ 1271.399449][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.405870][T10890] [ 1271.405870][T10890] -> #2 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1271.414390][T10890] down_read+0x9a/0x330 [ 1271.419069][T10890] filemap_fault+0x62c/0x2820 [ 1271.424267][T10890] __do_fault+0x10a/0x490 [ 1271.429131][T10890] do_pte_missing+0xebd/0x3e00 [ 1271.434416][T10890] __handle_mm_fault+0x103c/0x2a40 [ 1271.440045][T10890] handle_mm_fault+0x3fa/0xaa0 [ 1271.445329][T10890] __get_user_pages+0x8d9/0x3b50 [ 1271.450792][T10890] populate_vma_page_range+0x27f/0x3a0 [ 1271.456767][T10890] __mm_populate+0x1d6/0x380 [ 1271.461880][T10890] do_mlock+0x40a/0x7d0 [ 1271.466552][T10890] __x64_sys_mlock+0x59/0x80 [ 1271.471661][T10890] do_syscall_64+0xcd/0x250 [ 1271.476682][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.483099][T10890] [ 1271.483099][T10890] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 1271.490667][T10890] __might_fault+0x11b/0x190 [ 1271.495784][T10890] _copy_from_user+0x29/0xd0 [ 1271.500905][T10890] __blk_trace_setup+0xa8/0x180 [ 1271.506298][T10890] blk_trace_ioctl+0x163/0x290 [ 1271.511583][T10890] blkdev_ioctl+0x109/0x6d0 [ 1271.516611][T10890] __x64_sys_ioctl+0x190/0x200 [ 1271.521899][T10890] do_syscall_64+0xcd/0x250 [ 1271.526923][T10890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.533342][T10890] [ 1271.533342][T10890] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1271.541165][T10890] __lock_acquire+0x249e/0x3c40 [ 1271.546536][T10890] lock_acquire.part.0+0x11b/0x380 [ 1271.552165][T10890] __mutex_lock+0x19b/0xa60 [ 1271.557187][T10890] blk_mq_init_sched+0x42b/0x640 [ 1271.562648][T10890] elevator_init_mq+0x2cd/0x420 [ 1271.568013][T10890] add_disk_fwnode+0x113/0x1300 [ 1271.573382][T10890] sd_probe+0xa86/0x1000 [ 1271.578149][T10890] really_probe+0x23e/0xa90 [ 1271.583172][T10890] __driver_probe_device+0x1de/0x440 [ 1271.588976][T10890] driver_probe_device+0x4c/0x1b0 [ 1271.594518][T10890] __device_attach_driver+0x1df/0x310 [ 1271.600407][T10890] bus_for_each_drv+0x157/0x1e0 [ 1271.605780][T10890] __device_attach_async_helper+0x1d3/0x290 [ 1271.612189][T10890] async_run_entry_fn+0x9c/0x530 [ 1271.617644][T10890] process_one_work+0x9c5/0x1ba0 [ 1271.623098][T10890] worker_thread+0x6c8/0xf00 [ 1271.628209][T10890] kthread+0x2c1/0x3a0 [ 1271.632806][T10890] ret_from_fork+0x45/0x80 [ 1271.637746][T10890] ret_from_fork_asm+0x1a/0x30 [ 1271.643041][T10890] [ 1271.643041][T10890] other info that might help us debug this: [ 1271.643041][T10890] [ 1271.653263][T10890] Chain exists of: [ 1271.653263][T10890] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#55 [ 1271.653263][T10890] [ 1271.667696][T10890] Possible unsafe locking scenario: [ 1271.667696][T10890] [ 1271.675138][T10890] CPU0 CPU1 [ 1271.680492][T10890] ---- ---- [ 1271.685842][T10890] lock(&q->q_usage_counter(queue)#55); [ 1271.691486][T10890] lock(&q->limits_lock); [ 1271.698421][T10890] lock(&q->q_usage_counter(queue)#55); [ 1271.706572][T10890] lock(&q->debugfs_mutex); [ 1271.711156][T10890] [ 1271.711156][T10890] *** DEADLOCK *** [ 1271.711156][T10890] [ 1271.719290][T10890] 4 locks held by kworker/u8:14/10890: [ 1271.724736][T10890] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1271.735110][T10890] #1: ffffc9000dcefd80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1271.746344][T10890] #2: ffff888025cd2378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 1271.756717][T10890] #3: ffff888027d81470 (&q->q_usage_counter(queue)#55){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1271.767667][T10890] [ 1271.767667][T10890] stack backtrace: [ 1271.773526][T10890] CPU: 0 UID: 0 PID: 10890 Comm: kworker/u8:14 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1271.782181][ T29] audit: type=1400 audit(1734581937.203:3592): avc: denied { connect } for pid=17970 comm="syz.6.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1271.784511][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1271.810014][ T35] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 1271.814556][T10890] Workqueue: async async_run_entry_fn [ 1271.814584][T10890] Call Trace: [ 1271.814591][T10890] [ 1271.832464][T10890] dump_stack_lvl+0x116/0x1f0 [ 1271.837158][T10890] print_circular_bug+0x419/0x5d0 [ 1271.842194][T10890] check_noncircular+0x31a/0x400 [ 1271.847143][T10890] ? __pfx_check_noncircular+0x10/0x10 [ 1271.852618][T10890] ? lockdep_lock+0xc6/0x200 [ 1271.857235][T10890] ? __pfx_lockdep_lock+0x10/0x10 [ 1271.862275][T10890] __lock_acquire+0x249e/0x3c40 [ 1271.867141][T10890] ? __pfx___lock_acquire+0x10/0x10 [ 1271.872352][T10890] lock_acquire.part.0+0x11b/0x380 [ 1271.877475][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.882603][T10890] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1271.888245][T10890] ? rcu_is_watching+0x12/0xc0 [ 1271.893039][T10890] ? trace_lock_acquire+0x14e/0x1f0 [ 1271.898603][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.903733][T10890] ? lock_acquire+0x2f/0xb0 [ 1271.908247][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.913381][T10890] __mutex_lock+0x19b/0xa60 [ 1271.917899][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.923028][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.928159][T10890] ? __pfx___mutex_lock+0x10/0x10 [ 1271.933199][T10890] ? blk_queue_flag_set+0x29/0x40 [ 1271.938239][T10890] ? blk_mq_init_sched+0x42b/0x640 [ 1271.943369][T10890] blk_mq_init_sched+0x42b/0x640 [ 1271.948323][T10890] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 1271.953796][T10890] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 1271.959788][T10890] ? lock_acquire+0x2f/0xb0 [ 1271.964296][T10890] ? add_disk_fwnode+0x113/0x1300 [ 1271.969327][T10890] elevator_init_mq+0x2cd/0x420 [ 1271.974189][T10890] ? add_disk_fwnode+0x113/0x1300 [ 1271.979218][T10890] add_disk_fwnode+0x113/0x1300 [ 1271.984075][T10890] ? _raw_spin_unlock_irq+0x23/0x50 [ 1271.989281][T10890] sd_probe+0xa86/0x1000 [ 1271.993538][T10890] ? __pfx_sd_probe+0x10/0x10 [ 1271.998226][T10890] really_probe+0x23e/0xa90 [ 1272.002740][T10890] __driver_probe_device+0x1de/0x440 [ 1272.008033][T10890] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1272.013845][T10890] driver_probe_device+0x4c/0x1b0 [ 1272.018880][T10890] __device_attach_driver+0x1df/0x310 [ 1272.020582][T17973] tap0: tun_chr_ioctl cmd 1074025675 [ 1272.024263][T10890] ? __pfx___device_attach_driver+0x10/0x10 [ 1272.024290][T10890] bus_for_each_drv+0x157/0x1e0 [ 1272.029652][T17973] tap0: persist disabled [ 1272.035410][T10890] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1272.035433][T10890] ? lockdep_hardirqs_on+0x7c/0x110 [ 1272.055025][T10890] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1272.060818][T10890] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1272.067210][T10890] __device_attach_async_helper+0x1d3/0x290 [ 1272.073085][T10890] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1272.079495][T10890] ? ktime_get+0x206/0x300 [ 1272.083913][T10890] ? read_tsc+0x9/0x20 [ 1272.087979][T10890] ? ktime_get+0x1ac/0x300 [ 1272.092375][T10890] async_run_entry_fn+0x9c/0x530 [ 1272.097299][T10890] process_one_work+0x9c5/0x1ba0 [ 1272.102236][T10890] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1272.107860][T10890] ? __pfx_process_one_work+0x10/0x10 [ 1272.113210][T10890] ? rcu_is_watching+0x12/0xc0 [ 1272.117957][T10890] ? assign_work+0x1a0/0x250 [ 1272.122525][T10890] worker_thread+0x6c8/0xf00 [ 1272.127099][T10890] ? __kthread_parkme+0x148/0x220 [ 1272.132108][T10890] ? __pfx_worker_thread+0x10/0x10 [ 1272.137200][T10890] kthread+0x2c1/0x3a0 [ 1272.141265][T10890] ? __pfx_kthread+0x10/0x10 [ 1272.145848][T10890] ret_from_fork+0x45/0x80 [ 1272.150296][T10890] ? __pfx_kthread+0x10/0x10 [ 1272.154875][T10890] ret_from_fork_asm+0x1a/0x30 [ 1272.159636][T10890] [ 1272.181774][T10890] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1272.305122][ T29] audit: type=1400 audit(1734581938.533:3593): avc: denied { unmount } for pid=17691 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1273.060520][ T25] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1273.223809][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.234006][ T25] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1273.244505][ T25] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1273.253605][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.261632][ T25] usb 6-1: Product: syz [ 1273.265780][ T25] usb 6-1: Manufacturer: syz [ 1273.270730][ T25] usb 6-1: SerialNumber: syz [ 1273.276047][ T25] usb 6-1: config 0 descriptor?? [ 1273.482795][ T29] audit: type=1400 audit(1734581939.713:3594): avc: denied { create } for pid=17966 comm="syz.5.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1273.505758][ T29] audit: type=1400 audit(1734581939.713:3595): avc: denied { bind } for pid=17966 comm="syz.5.3091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1273.526061][ T29] audit: type=1400 audit(1734581939.713:3596): avc: denied { name_bind } for pid=17966 comm="syz.5.3091" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1273.548541][ T29] audit: type=1400 audit(1734581939.713:3597): avc: denied { node_bind } for pid=17966 comm="syz.5.3091" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1273.569639][ T29] audit: type=1400 audit(1734581939.733:3598): avc: denied { listen } for pid=17966 comm="syz.5.3091" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1273.591232][ T29] audit: type=1400 audit(1734581939.733:3599): avc: denied { accept } for pid=17966 comm="syz.5.3091" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1273.867411][ T25] usb 6-1: USB disconnect, device number 50