last executing test programs: 15.800341865s ago: executing program 0 (id=3264): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0xffffffffffffffda) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x108, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xea, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0x9}}, @tim={0x5, 0xc6, {0x3, 0xfe, 0x19, "9cd86478daf4776fdfe8e1d0b7ddc1b618128f1ad297bc704faa03fb9ae127ec4c04ae3d84999885d99b1ae9c8f4bee9402e59ebfa20b36759ad52b20912ecc53604663d2ac626f0d4bdb6c69361361fba333b5d19b247e97980cd93b641416b534f79508666c94044fb33200d4d1c3cd52fa0c0bea8700d5c70ad428d478e0976603b100cfce9440a219e249cfed2fe0ed9dbcf84f06f6fe369bb9988b0f704637731c8289ddfa509c88ff3b62375a56f056d029905b540d0938a6d3b40a7e10c3f05"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x28, 0x3a}}, @supported_rates={0x1, 0x3, [{0x48}, {0x2, 0x1}, {0x8, 0x1}]}, @erp={0x2a, 0x1}, @peer_mgmt={0x75, 0x6, {0x1, 0x1, @void, @val=0x26, @void}}, @challenge={0x10, 0x1, 0xd8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x48880}, 0x20008005) lseek(r2, 0x13, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r3, r7, 0x0, 0x0, 0x0}, 0x30) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000480)=""/8, 0x52, 0x8, 0x1, 0x3, 0x10000, @value}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) getsockopt$bt_hci(r9, 0x11a, 0x3, 0x0, &(0x7f0000000300)) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff9, 0x1, 0xf, 0x10001, 0x56, 0x1c]}, &(0x7f00000000c0)=0x78) 12.08533368s ago: executing program 0 (id=3272): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40505330, &(0x7f0000000940)={{0xee}}) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}], 0x0, 0x0, '\x00', 0x9, 0x2}) 11.012088808s ago: executing program 0 (id=3275): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 10.654178512s ago: executing program 3 (id=3276): userfaultfd(0x801) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000001280), 0x4001, &(0x7f00000012c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) io_setup(0x0, &(0x7f0000000300)=0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pipe(&(0x7f00000001c0)) select(0x40, &(0x7f0000000140), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000002240)=""/65, 0x41}], 0x1, 0x9, 0x1) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = syz_io_uring_setup(0x241d, &(0x7f0000000140)={0x0, 0x0, 0x13090, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000001080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3, 0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000370aee97a992350be00fcfde816c5cd4ded16398eb4c0329fd13bd131315e3071fc9319315"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.569271055s ago: executing program 1 (id=3278): lsm_list_modules(0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffff08, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) 8.952276561s ago: executing program 3 (id=3282): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) read$FUSE(r1, &(0x7f0000002880)={0x2020}, 0xffffffffffffffda) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x108, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xea, 0x80, [@channel_switch={0x25, 0x3, {0x0, 0x9}}, @tim={0x5, 0xc6, {0x3, 0xfe, 0x19, "9cd86478daf4776fdfe8e1d0b7ddc1b618128f1ad297bc704faa03fb9ae127ec4c04ae3d84999885d99b1ae9c8f4bee9402e59ebfa20b36759ad52b20912ecc53604663d2ac626f0d4bdb6c69361361fba333b5d19b247e97980cd93b641416b534f79508666c94044fb33200d4d1c3cd52fa0c0bea8700d5c70ad428d478e0976603b100cfce9440a219e249cfed2fe0ed9dbcf84f06f6fe369bb9988b0f704637731c8289ddfa509c88ff3b62375a56f056d029905b540d0938a6d3b40a7e10c3f05"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x28, 0x3a}}, @supported_rates={0x1, 0x3, [{0x48}, {0x2, 0x1}, {0x8, 0x1}]}, @erp={0x2a, 0x1}, @peer_mgmt={0x75, 0x6, {0x1, 0x1, @void, @val=0x26, @void}}, @challenge={0x10, 0x1, 0xd8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x48880}, 0x20008005) lseek(r2, 0x13, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r3, r7, 0x0, 0x0, 0x0}, 0x30) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1f00, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000480)=""/8, 0x52, 0x8, 0x1, 0x3, 0x10000, @value}, 0x28) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) getsockopt$bt_hci(r9, 0x11a, 0x3, 0x0, &(0x7f0000000300)) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff9, 0x1, 0xf, 0x10001, 0x56, 0x1c]}, &(0x7f00000000c0)=0x78) 8.916993185s ago: executing program 2 (id=3283): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x400002000000803, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f044, 0x6}) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="2fbc0342", 0x4, 0xfffffffffffffffb) keyctl$read(0xb, r5, &(0x7f0000000480)=""/32, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000063c0)={0x0, 0x0, &(0x7f0000006380)={&(0x7f0000000180)={0x14, 0x0, 0x9, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0xc0182103, 0x20000000) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) getsockopt$ax25_int(r7, 0x101, 0xc, &(0x7f0000000000), &(0x7f00000002c0)=0x4) ppoll(&(0x7f0000000080)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 8.671972733s ago: executing program 0 (id=3284): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fanotify_init(0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) getdents64(0xffffffffffffffff, &(0x7f0000000100)=""/4014, 0xfae) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000002000500000007002101220000014d0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x40800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 7.284568058s ago: executing program 2 (id=3285): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz0\x00', {0x7, 0x6, 0x8, 0x6}, 0x4f, [0xe440, 0x1, 0x5, 0x8, 0xfff, 0x80000001, 0x4, 0x3, 0x5, 0x3, 0x8, 0x7, 0x4, 0x101, 0xfffffe01, 0xaf4, 0x601c, 0x6, 0x400, 0xa, 0x4cd, 0x10000, 0x7fffffff, 0x401, 0x6, 0xd8, 0x0, 0x6, 0x0, 0x9, 0x1, 0x2, 0x64, 0xf7, 0x200, 0x1ff, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x40000000, 0x8, 0x9, 0x800, 0x9f, 0xbd6, 0xd, 0x3, 0xffdf, 0xff, 0x1d8, 0x2, 0x400, 0xa055, 0x64e, 0x40006, 0xa, 0x10, 0x0, 0xb, 0x2, 0x1], [0x0, 0x6, 0x806, 0x6, 0xfff, 0x3, 0xb, 0xb300, 0x9, 0x7, 0x2, 0x0, 0xfffffffe, 0xac3, 0x42, 0x20, 0x7, 0xc, 0x45, 0xfff, 0x8, 0x8, 0x3e, 0x4, 0x7ebc, 0x6, 0x8c26, 0x2, 0x7, 0xc9600000, 0x40001, 0x8, 0xc80, 0x4, 0x10000, 0x3ff, 0x3, 0x8, 0x1000, 0x9, 0x278, 0x6, 0x401, 0x8, 0x8, 0x800, 0xf, 0x9de, 0x2, 0x3, 0x1, 0x9, 0xe11, 0xc681, 0x936, 0x5, 0x4, 0x0, 0x1000, 0x5, 0x3, 0xfffffffc, 0xe, 0x5], [0x4, 0x3, 0xce2d9a9, 0x7, 0x3, 0x5, 0x4f, 0x2, 0xcb3e, 0x8, 0x2dd, 0x0, 0x7, 0x5, 0x4000, 0xb8e9, 0x5, 0x7fffffff, 0x5, 0x8, 0x9, 0xf8000000, 0x8, 0x2, 0x0, 0x3, 0x1bec80, 0x4, 0x8, 0x9598, 0x8001, 0x6, 0xd, 0x3, 0x4, 0xa2, 0x4f, 0x0, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0x2, 0x1, 0x6, 0x5, 0x654f, 0x9, 0x0, 0xfffffff8, 0x7, 0x8000, 0x4, 0x800, 0x1, 0x5, 0x4, 0x97c4, 0x9, 0xffffe097, 0xfffffda4, 0x800, 0x8], [0x8001, 0x8001, 0x80, 0x9, 0x7, 0xffff, 0x1, 0x84f2, 0x4, 0x7b00, 0x2, 0xe19, 0x7, 0x4, 0x5, 0x9, 0x28, 0x0, 0x3, 0x2322f956, 0x9, 0x3, 0xc00, 0x10001, 0x7, 0x0, 0xfff, 0x7fff, 0x6, 0xfffff9f2, 0xfffffffb, 0x3, 0xa11, 0xd, 0x2, 0x6, 0x0, 0xfc1d, 0x0, 0x4, 0x2, 0x572a, 0x5, 0xffffffff, 0x5, 0xff, 0xffffff01, 0x0, 0x4, 0x2, 0x400, 0x1, 0x6fa9, 0x7, 0x7, 0x1, 0x8, 0x1b, 0x3, 0xc000000, 0xc, 0x7, 0x5, 0x1]}, 0x45c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000180)="ca", 0x1) openat$sequencer2(0xffffff9c, 0x0, 0x60881, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0x1) timer_create(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) dup(0xffffffffffffffff) connect$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) socket$alg(0x26, 0x5, 0x0) 7.118202132s ago: executing program 0 (id=3286): io_uring_setup(0x3e45, &(0x7f00000001c0)) r0 = socket(0x1, 0x803, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') write(r1, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0100010000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400573e61aaaaaaaaaabb000008", @ANYRES32=r4, @ANYBLOB], 0x58}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0xfefffffe) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000580)={0x9, 0x800, 0x4, {0x3, @sliced={0x8001, [0xaba7, 0x1ff, 0x5, 0x3, 0x0, 0x200, 0x2, 0x5af5, 0x3, 0x80, 0x7, 0x8, 0xc, 0x81, 0x0, 0x7, 0x45, 0x100, 0xfffd, 0x6, 0x7, 0xe8, 0x6, 0x3, 0x5, 0x2, 0x4, 0x9, 0xc, 0xffc0, 0xa787, 0x0, 0x2, 0x9, 0x4, 0x9, 0x9, 0x2, 0xe, 0x1, 0xc77f, 0x4, 0xfff, 0x0, 0x6, 0xff, 0xffff, 0x1f5c], 0x6}}, 0x7f}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 6.865293756s ago: executing program 1 (id=3289): socket(0x1, 0x2, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000000540), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000440)=""/110) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000740)={'macvlan1\x00', {0x2, 0x0, @private}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'tunl0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000019340), 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "901c551265406c7f306003d816e8bd000000001800", [0x8]}}) shmctl$IPC_RMID(0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x40400, 0x0) 5.540321042s ago: executing program 2 (id=3291): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 5.470945206s ago: executing program 0 (id=3292): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x8000) read$alg(r1, &(0x7f0000000300)=""/99, 0x63) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019000200020006002c000364bc24eab556a705251e61826d28166076d50b2c9b2605a2e94b69a385ec430093541c635dd3fd9f91b765", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44004840) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) 5.020676136s ago: executing program 2 (id=3294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0xae2}}, 0x1006) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a00"], 0x40}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001454708b7bff1f8af592e6e91b4bfeb1d1e4128e6183d15de11eb87b77619d13223d24825caefae02f3afdc20f37e5362a7c0e246193abec7d4a66b3404907d61247880d3effd3b37dba923a0c4025998a02ac93370b211e132cadd4771ee9052aec5b133b58a32e4e10254b06a178524c4a7baf064207935f85e8fa08053579eccf7d996191d2cc040d24d2b0bf8c322c96d8f3110e5061114f2bc3d4d993e58cce9662f3620370457422a5caa6257f66c36445fc2989ada31ead79dafcf4f4a09f6996d46bf76084a45a1b32b89c6ff549bbeb5c4a9a751992251cbb34ea48d8a128260418ccce6cd0cf6317537ed80e5c159d29d67a", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18170000", @ANYRES32, @ANYBLOB="0000000000000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000008a12000000b703000000000000850000000c000000b700000000000000185400000b0000000000000000000000e4d34f72e233d741a9b2328640e4b6"], &(0x7f00000000c0)='GPL\x00', 0x31cc65ac, 0x1a, &(0x7f00000013c0)=""/26, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, r4], &(0x7f0000001600)=[{0x3, 0x3, 0x2, 0x1}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x1, @void, @value}, 0x94) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfada, 0x0, 0xfffffffc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0xc, 0x6000, @fd, 0xa, &(0x7f0000001880)=[{&(0x7f0000001700)="2e0d5af90b2369105671b40207709c6a3d2f08e4b85f7c7855854ca278bca0c99a69edf8fa02202aea9e195da9fc2a539333b263f415a8622a2b8d505823b47531f27a253b633bc3ec81af7fc1c9c05d1b4324df417268506a1bec299c63d210212eb2bd633e4af481c51103071f678fab99d61b712e8df8e704f0462650dc59f6ce08360aa4cac5562bbc3d04bb4a75a4eca14896b2c0d321919818f7f115af4d1d346a2e6409c633e031904c794560d5c64e9ec3cdd0a1fb111110088108b8392c941b07b73cc66fc714e34b7431e9252b52706f36aac9e64e1b6a2cb6f0f232f1ee6e9b82000000000000000000005550f20c2b20", 0xf6}, {&(0x7f0000001340)="77217f6466f42ea28595bfb7c6442124eb2b80d0ed0653df0bb9975695a62e64c61058d2adb969f3dcbdece9960b3a121a39dbaf02cc0aaf61389fccc74f6a04dcc2eff953dd55ae6b399dfb3840d6d1116ef0a5561fcb2db9eef81f6c91771e", 0x60}, {&(0x7f0000001800)="48155e629a42a5de84f44b641bc6076776801cb888bdf9007b2607000000000000006e6f86b6d94210114695ad91b5c15ddf28aad364e9ebb73c7cf3a2ec095916ac989269af8a7d0e15d1966e75bb4ef1bc17f527711804011187cd320899b7d4a03444ab378f7228d7d74aedb626", 0x6f}, {&(0x7f0000001580)}], 0x4, 0x1, 0x1}) io_uring_enter(r6, 0x4d1a, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="820100f6", @ANYRES16, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="1c002c80060000000000000008000000000000000800000000000000"], 0x38}}, 0x0) 5.020310095s ago: executing program 3 (id=3295): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.886979533s ago: executing program 3 (id=3297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 4.781882291s ago: executing program 4 (id=3298): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0xfffffffc, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = dup(r0) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x22}, &(0x7f00000001c0)=""/87, 0x57, &(0x7f0000001480)=""/4096, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0xa, {r5}}, 0x58) syz_open_procfs(r6, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r9, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.405714286s ago: executing program 1 (id=3299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x1d06, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000004c0)=[{{}, 0x11, 0xe, 0x9}], 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) socket$packet(0x11, 0x2, 0x300) syz_open_dev$dri(&(0x7f0000000300), 0x102, 0x551a03) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000130001000000000000000000e0000002000000000000000000000000fe80000000000000000000000000800000000000000800000a0060"], 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000025c0)=ANY=[@ANYBLOB="b8dfffff120401000000000000000000e0000002000000000000000000000097030000000000000000000000000000004e200000000000000a0030003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000900"/112], 0xb8}}, 0x0) lseek(0xffffffffffffffff, 0x4, 0x0) 3.928033207s ago: executing program 2 (id=3300): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0xd, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000240)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet(0x2, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="c93cbdbf", @ANYRES16=r8, @ANYBLOB="130326bd7000ffdbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x200c000d}, 0x800) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f00000002c0), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x8c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x60, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0xbc, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1, 0x0, 0x1000}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x401}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x190}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x54}}, 0x20050800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r10, 0x10000000005, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000dacd57153fa88d5f76d6e75d200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000afffffc00"/28], 0x48) 3.847207731s ago: executing program 1 (id=3301): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"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", 0xae2}}, 0x1006) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a00"], 0x40}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000001454708b7bff1f8af592e6e91b4bfeb1d1e4128e6183d15de11eb87b77619d13223d24825caefae02f3afdc20f37e5362a7c0e246193abec7d4a66b3404907d61247880d3effd3b37dba923a0c4025998a02ac93370b211e132cadd4771ee9052aec5b133b58a32e4e10254b06a178524c4a7baf064207935f85e8fa08053579eccf7d996191d2cc040d24d2b0bf8c322c96d8f3110e5061114f2bc3d4d993e58cce9662f3620370457422a5caa6257f66c36445fc2989ada31ead79dafcf4f4a09f6996d46bf76084a45a1b32b89c6ff549bbeb5c4a9a751992251cbb34ea48d8a128260418ccce6cd0cf6317537ed80e5c159d29d67a", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18170000", @ANYRES32, @ANYBLOB="0000000000000000852000000200000018120000", @ANYRES32, @ANYBLOB="0000008a12000000b703000000000000850000000c000000b700000000000000185400000b0000000000000000000000e4d34f72e233d741a9b2328640e4b6"], &(0x7f00000000c0)='GPL\x00', 0x31cc65ac, 0x1a, &(0x7f00000013c0)=""/26, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000015c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r3, r4], &(0x7f0000001600)=[{0x3, 0x3, 0x2, 0x1}, {0x2, 0x4, 0x3, 0xc}], 0x10, 0x1, @void, @value}, 0x94) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfada, 0x0, 0xfffffffc}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0xc, 0x6000, @fd, 0xa, &(0x7f0000001880)=[{&(0x7f0000001700)="2e0d5af90b2369105671b40207709c6a3d2f08e4b85f7c7855854ca278bca0c99a69edf8fa02202aea9e195da9fc2a539333b263f415a8622a2b8d505823b47531f27a253b633bc3ec81af7fc1c9c05d1b4324df417268506a1bec299c63d210212eb2bd633e4af481c51103071f678fab99d61b712e8df8e704f0462650dc59f6ce08360aa4cac5562bbc3d04bb4a75a4eca14896b2c0d321919818f7f115af4d1d346a2e6409c633e031904c794560d5c64e9ec3cdd0a1fb111110088108b8392c941b07b73cc66fc714e34b7431e9252b52706f36aac9e64e1b6a2cb6f0f232f1ee6e9b82000000000000000000005550f20c2b20", 0xf6}, {&(0x7f0000001340)="77217f6466f42ea28595bfb7c6442124eb2b80d0ed0653df0bb9975695a62e64c61058d2adb969f3dcbdece9960b3a121a39dbaf02cc0aaf61389fccc74f6a04dcc2eff953dd55ae6b399dfb3840d6d1116ef0a5561fcb2db9eef81f6c91771e", 0x60}, {&(0x7f0000001800)="48155e629a42a5de84f44b641bc6076776801cb888bdf9007b2607000000000000006e6f86b6d94210114695ad91b5c15ddf28aad364e9ebb73c7cf3a2ec095916ac989269af8a7d0e15d1966e75bb4ef1bc17f527711804011187cd320899b7d4a03444ab378f7228d7d74aedb626", 0x6f}, {&(0x7f0000001580)}], 0x4, 0x1, 0x1}) io_uring_enter(r6, 0x4d1a, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="820100f6", @ANYRES16=r10, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32, @ANYBLOB="1c002c80060000000000000008000000000000000800000000000000"], 0x38}}, 0x0) 3.686417731s ago: executing program 4 (id=3302): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xb, 0x8, 0xfffffff9, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r0 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) eventfd(0x3) r3 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = syz_clone(0x46210000, &(0x7f0000000200)="386222f47ef8f62824fbf13ffc12825638091e28ff079fb53fddb80d05c577a9a4ad68a62e21dc4f7b210df5cfa1e5501ad1ab660925f100183e4d5a7f689ffc4ab5105f3caa5af4fe83c1383f6986d774b14838aa95841c4513a67b254276fb22339cbae28b8d", 0x67, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280)="e0bf2d577a819fcc0b90fdc8ebbb1982f656df801eaed868bb2874d313da505517bc12b211291f90374c882ed5f386aebd36c07465ae5413677eab6ef34051d8a7a83cb12926cf56676270d135f2ff23f34b62ea58a43c77e382b15dcc36eedc1c592813eaf48b74e0d591e027820e4df108fd90809f484e96c4bf4a1f86e6429ab6a41e76d22b03cc0d54e8850600"/160) setpgid(0x0, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x38, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x48010}, 0x4040080) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000008c80)="9d", 0x1}, {&(0x7f0000000840)="f725a3b7fb6d4b99a601e05b7a46382b687ff48e266240a11fa3096d50323f5b3695410a7ac86a06b6a030dbb79f18b7676081bdc8d41871c8bf24e4c3f38c97ec7d5d377b9b15cf28f257b2e749e10668d466a482e5ae29ee0356a241d2b3c18424336be788f64f1392a1453babeeffe279f89001992b06cdffa8b39e2028f3fadf03e85ce352cd4a4084ba90841eb97c84fff2a3513cbcc2ec9aba11e380e4629baba9e7da621f7bb33a37df23852655c12da2320b6b940261917b4936187f833c729d0c35a284bea4a3dfd7c0a5fc30b643f9fc4830f25ab4", 0xda}, {&(0x7f00000007c0)}], 0x4, 0x0, 0x0, 0x4004880}, 0x48000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x8, 0x0, 0x2}, 0x10}, 0x1, 0x7}, 0x0) mmap(&(0x7f00000ed000/0x4000)=nil, 0x4000, 0x3, 0x4c831, 0xffffffffffffffff, 0xe9ad1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.648944251s ago: executing program 1 (id=3303): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0x40505330, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) socket$tipc(0x1e, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}], 0x0, 0x0, '\x00', 0x9, 0x2}) 2.629917772s ago: executing program 4 (id=3304): openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) pselect6(0x40, &(0x7f0000000600)={0x0, 0x3}, 0x0, &(0x7f0000000240)={0x7ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc59}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) unshare(0x22020400) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = timerfd_create(0x8, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000380)={0x0, 0x2e, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x400}}, 0x1c}}, 0x4080) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000010405000000000000000000000080"], 0x1c}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r2, 0x0) bind$isdn_base(r1, 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) 1.718410313s ago: executing program 1 (id=3305): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000040)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @empty}, &(0x7f0000000100)=0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x700, 0x0, 0x0, 0x6, 0x0, @remote, @private=0xa010101}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x4, 0x0, 0xffff, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x33, 0xffff, 0x4}]}}}}}}}, 0x0) getsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000140)=""/175, &(0x7f0000000200)=0xaf) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="f2ff05"], 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000005c0)=""/188, 0xbc) getdents64(r5, &(0x7f0000000140)=""/109, 0x6d) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)}], 0x0, 0x1}, 0x20) 1.233429328s ago: executing program 4 (id=3306): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40640, 0x0) close_range(0xffffffffffffffff, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x400100, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000080)={0xf}) (async) ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000080)={0xf}) fallocate(r0, 0x64, 0xc8, 0x4c0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000540)={@local, @empty, 0x0}, &(0x7f0000000580)=0xc) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000005c0)={@empty, @empty, r3}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000005c0)={@empty, @empty, r3}, 0xc) epoll_create(0xed98) (async) epoll_create(0xed98) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r4, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1ff, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4a0c2) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) mkdir(&(0x7f0000000880)='./file0\x00', 0x21) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/dev/audio\x00'}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, ',)#.&{]&}&[\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x4c084) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), r6) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), r6) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b0, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x194, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5c962cd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58faa337}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x311c9e7a}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33ba2b4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed7f0b2}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b32095a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b1ba93e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32408e19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7cf6a4dc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e112ae7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69a9f899}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fcbe571}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11faf1ff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5400e091}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa6af194}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7086cae4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb8824c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d59912}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d861910}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x635c0842}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2565f230}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70af3437}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48e71556}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f51ba92}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x666c7026}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c4bd88a}]}, {0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008800) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff3000/0xc000)=nil, 0xc000, &(0x7f0000000d00)='wlan0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000d80)={&(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000d80)={&(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, &(0x7f0000000dc0)={0x1ff, 0x0, &(0x7f0000ff8000/0x2000)=nil}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7fffffff}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xe}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f40), r6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x900050c8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r10, 0x8, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffa1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5e}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}]}]}, 0x70}}, 0x4000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x900050c8}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x70, r10, 0x8, 0x10001, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x50, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffffa1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10001}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5e}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}]}]}, 0x70}}, 0x4000) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0xc0) 1.160731096s ago: executing program 3 (id=3307): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) fanotify_init(0x200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000001280)={0x2020}, 0x2020) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d000002000500000007002101220000014d0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x40800) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) 1.13568643s ago: executing program 2 (id=3308): r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000840)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0xc, 0x0, 0x2, [], [], [0x428e050d, 0x0, 0x66af], [0x0, 0x3ff, 0x0, 0x3]}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, 0x0) 533.690233ms ago: executing program 4 (id=3310): fadvise64(0xffffffffffffffff, 0x18, 0x1f00, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400), 0x4) openat(0xffffffffffffff9c, 0x0, 0x181080, 0x10f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init1(0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 51.22179ms ago: executing program 3 (id=3311): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x410e3ff487d63df}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x3, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x1}, &(0x7f0000000240)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="340018001600030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014003500626f6edfaa595dd0519ef31e00000000", @ANYRESDEC=r0, @ANYRES8=r0, @ANYBLOB="a127844256fdc554067af7e09160bf481c3f1a0a9d30e1f61104525ed1c3ebe6f9ff5f21f716dc5c8b86f57d41e5e10d3d977889397e6e3df991c1c88c6eafc2", @ANYRES64=0x0], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000300), 0xd) write$binfmt_elf64(r4, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0x14}}], 0x4b, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f00000000c0)={0x6, 'caif0\x00', {}, 0x5}) syz_extract_tcp_res(&(0x7f0000000000), 0xffffffff, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f00000023c0)={0x0, 'syz_tun\x00', {0x4}, 0x2b1}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r6, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @remote, 0xf}, 0x1c, 0x0, 0x0, 0x0, 0xffffff58}, 0x24000041) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x1261, 0x0) 0s ago: executing program 4 (id=3312): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000000c0)={0x0, 0x1ffffe, 0x10100, 0xfffffffc, 0x0, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x1}) r5 = dup(r0) syz_clone3(&(0x7f0000000240)={0x8000000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x22}, &(0x7f00000001c0)=""/87, 0x57, &(0x7f0000001480)=""/4096, &(0x7f0000000100)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0xa, {r5}}, 0x58) syz_open_procfs(r6, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r10 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r10, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ace_lock_acquire+0x14e/0x1f0 [ 660.123062][ T5695] ? lock_acquire+0x2f/0xb0 [ 660.127550][ T5695] ? __fget_files+0x40/0x3a0 [ 660.132129][ T5695] ? __fget_files+0x206/0x3a0 [ 660.136794][ T5695] security_file_ioctl+0x9b/0x240 [ 660.141812][ T5695] __x64_sys_ioctl+0xb7/0x200 [ 660.146485][ T5695] do_syscall_64+0xcd/0x250 [ 660.150985][ T5695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.156868][ T5695] RIP: 0033:0x7f512117ff19 [ 660.161273][ T5695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.180868][ T5695] RSP: 002b:00007f511eff6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.189276][ T5695] RAX: ffffffffffffffda RBX: 00007f5121345fa0 RCX: 00007f512117ff19 [ 660.197234][ T5695] RDX: 00000000200001c0 RSI: 0000000000004605 RDI: 0000000000000005 [ 660.205190][ T5695] RBP: 00007f511eff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 660.213147][ T5695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.221101][ T5695] R13: 0000000000000000 R14: 00007f5121345fa0 R15: 00007ffef0e8e8e8 [ 660.229083][ T5695] [ 660.238197][ T5695] ERROR: Out of memory at tomoyo_realpath_from_path. [ 660.528436][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 660.537628][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 660.547048][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 660.557370][ T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 660.564537][ T8] [drm] Initialized udl on minor 2 [ 660.580037][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 660.588264][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 660.667806][ T29] audit: type=1326 audit(1733981604.016:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5701 comm="syz.2.2864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x0 [ 660.676186][ T8] usb 4-1: USB disconnect, device number 49 [ 660.701643][ T116] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 660.711212][ T116] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 660.719163][ T116] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 661.550198][ T5720] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2868'. [ 662.406175][ T5741] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 662.580557][ T116] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 662.821063][ T116] usb 5-1: Using ep0 maxpacket: 32 [ 662.834847][ T116] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 662.844078][ T116] usb 5-1: config 0 has no interface number 0 [ 662.850196][ T116] usb 5-1: config 0 interface 12 has no altsetting 0 [ 662.860802][ T116] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 662.883955][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.924120][ T116] usb 5-1: Product: syz [ 662.931043][ T116] usb 5-1: Manufacturer: syz [ 662.936356][ T116] usb 5-1: SerialNumber: syz [ 662.950111][ T116] usb 5-1: config 0 descriptor?? [ 663.584900][ T5745] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 663.591510][ T5745] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 663.600788][ T5745] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 663.629687][ T5745] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 664.128843][ T5762] batman_adv: batadv0: Adding interface: dummy0 [ 664.135250][ T5762] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.160630][ T5762] batman_adv: batadv0: Interface activated: dummy0 [ 664.908915][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 665.001205][ T29] audit: type=1400 audit(1733981608.346:2988): avc: denied { ioctl } for pid=5778 comm="syz.1.2886" path="socket:[42210]" dev="sockfs" ino=42210 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 665.019067][ T116] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 665.700131][ T5818] Bluetooth: hci3: command 0x0406 tx timeout [ 665.707845][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 665.714118][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 665.739348][ T5783] batman_adv: batadv0: Adding interface: dummy0 [ 665.745815][ T5783] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.771077][ T5783] batman_adv: batadv0: Interface activated: dummy0 [ 665.779833][ T116] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 665.781559][ T5783] batadv0: mtu less than device minimum [ 665.787409][ T116] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 665.794315][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.800498][ T116] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 665.812132][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.831311][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.842425][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.853476][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.864511][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.875563][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.886604][ T5783] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 665.912821][ T116] usb 5-1: USB disconnect, device number 60 [ 666.005059][ T5781] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 666.014886][ T5781] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 666.023856][ T5781] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 666.033300][ T5781] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 666.067126][ T29] audit: type=1400 audit(1733981609.356:2989): avc: denied { setopt } for pid=5780 comm="syz.4.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 666.109819][ T5781] geneve3: entered promiscuous mode [ 666.131834][ T5781] geneve3: entered allmulticast mode [ 666.264642][ T5802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2889'. [ 667.210690][ T5823] Cannot find set identified by id 0 to match [ 667.885991][ T5827] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2896'. [ 667.972750][ T29] audit: type=1400 audit(1733981611.296:2990): avc: denied { nlmsg_read } for pid=5812 comm="syz.1.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 668.407603][ T29] audit: type=1326 audit(1733981611.376:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5829 comm="syz.0.2895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa348f7ff19 code=0x0 [ 669.801990][ T8] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 669.845990][ T5884] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2903'. [ 669.961130][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 670.156573][ T8] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 670.281385][ T8] usb 5-1: config 0 has no interface number 0 [ 670.727635][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 670.770301][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.784855][ T8] usb 5-1: Product: syz [ 670.794283][ T8] usb 5-1: Manufacturer: syz [ 670.798918][ T8] usb 5-1: SerialNumber: syz [ 670.836674][ T8] usb 5-1: config 0 descriptor?? [ 670.856728][ T8] smsc95xx v2.0.0 [ 670.889568][ T5896] fuse: Bad value for 'fd' [ 671.015356][ T5896] ptrace attach of "./syz-executor exec"[5815] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 671.393527][ T5904] net_ratelimit: 11 callbacks suppressed [ 671.393547][ T5904] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 672.122233][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 672.138123][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 672.144430][ T5908] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2909'. [ 672.221381][ T5910] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2910'. [ 672.351354][ T51] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 672.569896][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 672.580686][ T51] usb 3-1: Using ep0 maxpacket: 32 [ 672.604465][ T8] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 672.605551][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.664688][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.669768][ T8] usb 5-1: USB disconnect, device number 61 [ 672.752959][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 672.838793][ T51] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 672.850583][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.861880][ T51] usb 3-1: config 0 descriptor?? [ 673.940762][ T29] audit: type=1400 audit(1733981616.576:2992): avc: denied { map } for pid=5921 comm="syz.0.2912" path="socket:[41396]" dev="sockfs" ino=41396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 674.018232][ T29] audit: type=1400 audit(1733981616.576:2993): avc: denied { read } for pid=5921 comm="syz.0.2912" path="socket:[41396]" dev="sockfs" ino=41396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 674.091026][ T29] audit: type=1400 audit(1733981617.436:2994): avc: denied { read } for pid=5929 comm="syz.1.2914" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 674.122649][ T29] audit: type=1400 audit(1733981617.436:2995): avc: denied { open } for pid=5929 comm="syz.1.2914" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 674.151980][ T29] audit: type=1400 audit(1733981617.436:2996): avc: denied { ioctl } for pid=5929 comm="syz.1.2914" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 674.363050][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 674.369082][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 674.397654][ T51] usb 3-1: USB disconnect, device number 47 [ 674.891100][ T8] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 675.079703][ T8] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 675.102614][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 675.109299][ T29] audit: type=1400 audit(1733981618.456:2997): avc: denied { create } for pid=5951 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 675.158199][ T29] audit: type=1400 audit(1733981618.486:2998): avc: denied { prog_load } for pid=5951 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 675.191499][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 675.221760][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.248662][ T29] audit: type=1400 audit(1733981618.486:2999): avc: denied { bpf } for pid=5951 comm="syz.3.2920" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 675.271676][ T8] usb 5-1: Product: syz [ 675.275912][ T8] usb 5-1: Manufacturer: syz [ 675.301420][ T8] usb 5-1: SerialNumber: syz [ 675.343381][ T8] usb 5-1: config 0 descriptor?? [ 675.385045][ T8] usb 5-1: selecting invalid altsetting 0 [ 675.393532][ T29] audit: type=1400 audit(1733981618.486:3000): avc: denied { perfmon } for pid=5951 comm="syz.3.2920" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 675.473952][ T5958] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2922'. [ 675.485403][ T29] audit: type=1400 audit(1733981618.486:3001): avc: denied { execmem } for pid=5951 comm="syz.3.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 678.392157][ T5989] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 678.401048][ T5989] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 679.297645][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 679.307131][ T29] audit: type=1400 audit(1733981622.636:3058): avc: denied { mounton } for pid=5965 comm="syz.0.2924" path="/254/file0" dev="tmpfs" ino=1357 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 679.330056][ T29] audit: type=1400 audit(1733981622.636:3059): avc: denied { mount } for pid=5965 comm="syz.0.2924" name="/" dev="configfs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 679.352767][ T29] audit: type=1400 audit(1733981622.646:3060): avc: denied { read } for pid=5965 comm="syz.0.2924" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 679.377065][ T29] audit: type=1400 audit(1733981622.646:3061): avc: denied { open } for pid=5965 comm="syz.0.2924" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 679.401833][ T29] audit: type=1400 audit(1733981622.666:3062): avc: denied { ioctl } for pid=5965 comm="syz.0.2924" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 679.453607][ T29] audit: type=1400 audit(1733981622.796:3063): avc: denied { create } for pid=5994 comm="syz.2.2930" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 679.486661][ T5999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.636874][ T29] audit: type=1400 audit(1733981622.986:3064): avc: denied { create } for pid=6000 comm="syz.1.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 679.671138][ T6002] batman_adv: batadv0: Adding interface: dummy0 [ 679.677486][ T6002] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.703333][ T6002] batman_adv: batadv0: Interface activated: dummy0 [ 679.777419][ T29] audit: type=1400 audit(1733981623.006:3065): avc: denied { ioctl } for pid=6000 comm="syz.1.2932" path="socket:[42602]" dev="sockfs" ino=42602 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 679.779415][ T6002] batadv0: mtu less than device minimum [ 679.809591][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.821540][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.833305][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.845205][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.856294][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.867359][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.878458][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.889534][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 679.900586][ T6002] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 680.080477][ T8] usb 5-1: USB disconnect, device number 62 [ 680.146043][ T29] audit: type=1400 audit(1733981623.006:3066): avc: denied { write } for pid=6000 comm="syz.1.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 680.190279][ T29] audit: type=1400 audit(1733981623.126:3067): avc: denied { ioctl } for pid=6000 comm="syz.1.2932" path="socket:[41477]" dev="sockfs" ino=41477 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 680.326939][ T6009] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2935'. [ 681.301237][ T6024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2937'. [ 681.588997][ T6031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.606567][ T6031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.141992][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.150586][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.204037][ T6047] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 683.213062][ T6047] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 684.168787][ T6067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2949'. [ 684.353855][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 684.353871][ T29] audit: type=1400 audit(1733981883.699:3100): avc: denied { create } for pid=6068 comm="syz.2.2950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 685.423593][ T6058] syz.4.2947 (6058) used greatest stack depth: 20320 bytes left [ 685.484147][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.653627][ T29] audit: type=1400 audit(1733981885.009:3101): avc: denied { create } for pid=6079 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 685.703437][ T29] audit: type=1400 audit(1733981885.039:3102): avc: denied { connect } for pid=6079 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 685.764677][ T6089] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 685.800015][ T6083] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 685.821530][ T29] audit: type=1400 audit(1733981885.149:3103): avc: denied { setopt } for pid=6082 comm="syz.0.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 685.871136][ T6083] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2952'. [ 685.918382][ T29] audit: type=1400 audit(1733981885.179:3104): avc: denied { read } for pid=6079 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 686.061864][ T29] audit: type=1400 audit(1733981885.409:3105): avc: denied { shutdown } for pid=6079 comm="syz.3.2951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 686.083056][ T29] audit: type=1400 audit(1733981885.409:3106): avc: denied { write } for pid=6079 comm="syz.3.2951" path="socket:[42695]" dev="sockfs" ino=42695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 686.263496][ T6069] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 686.307143][ T29] audit: type=1400 audit(1733981885.649:3107): avc: denied { setopt } for pid=6093 comm="syz.0.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 686.334730][ T29] audit: type=1400 audit(1733981885.679:3108): avc: denied { read } for pid=6093 comm="syz.0.2954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 686.391938][ T29] audit: type=1400 audit(1733981885.739:3109): avc: denied { block_suspend } for pid=6093 comm="syz.0.2954" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 687.788246][ T6108] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 687.800486][ T6108] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 688.445999][ T6123] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2962'. [ 689.202914][ T6133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.224591][ T6133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.246642][ T6135] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 689.384414][ T6135] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 689.599211][ T6141] SELinux: policydb string does not match my string SE Linux [ 689.607421][ T6141] SELinux: failed to load policy [ 689.618193][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 689.618228][ T29] audit: type=1400 audit(1733981888.949:3113): avc: denied { load_policy } for pid=6136 comm="syz.3.2965" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 690.001027][ T8] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 690.281405][ T8] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.291323][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 690.299886][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.309413][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.324801][ T8] usb 5-1: Product: syz [ 690.328993][ T8] usb 5-1: Manufacturer: syz [ 690.334049][ T29] audit: type=1400 audit(1733981889.679:3114): avc: denied { ioctl } for pid=6145 comm="syz.3.2968" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 690.369490][ T8] usb 5-1: SerialNumber: syz [ 690.392489][ T8] usb 5-1: config 0 descriptor?? [ 690.449728][ T8] usb 5-1: selecting invalid altsetting 0 [ 691.294782][ T6157] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2973'. [ 691.310673][ T29] audit: type=1400 audit(1733981890.639:3115): avc: denied { create } for pid=6158 comm="syz.2.2972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.409381][ T29] audit: type=1400 audit(1733981890.689:3116): avc: denied { connect } for pid=6158 comm="syz.2.2972" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 691.497499][ T29] audit: type=1400 audit(1733981890.749:3117): avc: denied { ioctl } for pid=6158 comm="syz.2.2972" path="socket:[41763]" dev="sockfs" ino=41763 ioctlcmd=0x5513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.603201][ T6169] net_ratelimit: 30 callbacks suppressed [ 691.603218][ T6169] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 691.738822][ T29] audit: type=1400 audit(1733981890.749:3118): avc: denied { write } for pid=6158 comm="syz.2.2972" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 692.040132][ T29] audit: type=1400 audit(1733981891.389:3119): avc: denied { create } for pid=6176 comm="syz.0.2976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 692.131155][ T29] audit: type=1400 audit(1733981891.479:3120): avc: denied { ioctl } for pid=6178 comm="syz.2.2977" path="socket:[41804]" dev="sockfs" ino=41804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 693.170690][ T5860] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 693.192211][ T29] audit: type=1400 audit(1733981892.549:3121): avc: denied { read write } for pid=6189 comm="syz.0.2980" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 693.221382][ T29] audit: type=1400 audit(1733981892.569:3122): avc: denied { open } for pid=6189 comm="syz.0.2980" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 693.371014][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 693.377341][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.387671][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 693.396936][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.442465][ T5860] usb 4-1: config 0 descriptor?? [ 693.459984][ T5860] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 693.667036][ T8] usb 5-1: USB disconnect, device number 63 [ 693.731821][ T5860] gspca_vc032x: reg_r err -71 [ 693.743829][ T5860] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 693.772523][ T5860] usb 4-1: USB disconnect, device number 50 [ 694.261070][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 694.293158][ T6192] loop5: detected capacity change from 0 to 7 [ 694.304806][ T6192] Dev loop5: unable to read RDB block 7 [ 694.310395][ T6192] loop5: AHDI p1 p3 [ 694.314361][ T6192] loop5: partition table partially beyond EOD, truncated [ 694.321688][ T6192] loop5: p1 start 2048 is beyond EOD, truncated [ 694.385750][ T6207] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 694.412633][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 694.435467][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 694.459033][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 694.488833][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.532912][ T6201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 694.551319][ T8] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 694.658290][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 694.658305][ T29] audit: type=1400 audit(1733981894.009:3137): avc: denied { create } for pid=6214 comm="syz.3.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.698821][ T29] audit: type=1400 audit(1733981894.049:3138): avc: denied { bind } for pid=6214 comm="syz.3.2990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 694.698845][ T6215] FAULT_INJECTION: forcing a failure. [ 694.698845][ T6215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 694.735810][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.3.2990 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 694.746478][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 694.756510][ T6215] Call Trace: [ 694.759768][ T6215] [ 694.762677][ T6215] dump_stack_lvl+0x16c/0x1f0 [ 694.767334][ T6215] should_fail_ex+0x497/0x5b0 [ 694.771991][ T6215] _copy_from_user+0x2e/0xd0 [ 694.776560][ T6215] move_addr_to_kernel+0x68/0x160 [ 694.781571][ T6215] __sys_bind+0x11c/0x260 [ 694.785890][ T6215] ? __pfx___sys_bind+0x10/0x10 [ 694.790727][ T6215] ? __fget_files+0x206/0x3a0 [ 694.795386][ T6215] ? __pfx_ksys_write+0x10/0x10 [ 694.800224][ T6215] __x64_sys_bind+0x72/0xb0 [ 694.804703][ T6215] ? lockdep_hardirqs_on+0x7c/0x110 [ 694.809878][ T6215] do_syscall_64+0xcd/0x250 [ 694.814360][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.820228][ T6215] RIP: 0033:0x7efc5457ff19 [ 694.824618][ T6215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.844229][ T6215] RSP: 002b:00007efc5532a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 694.852634][ T6215] RAX: ffffffffffffffda RBX: 00007efc54745fa0 RCX: 00007efc5457ff19 [ 694.860583][ T6215] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003 [ 694.868530][ T6215] RBP: 00007efc5532a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 694.876478][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.884434][ T6215] R13: 0000000000000000 R14: 00007efc54745fa0 R15: 00007fffa40c6ff8 [ 694.892390][ T6215] [ 695.077526][ T6218] batadv0: mtu less than device minimum [ 695.084703][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.096431][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.108360][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.120199][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.132091][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.144015][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.155751][ T6218] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 695.185162][ T8] usb 1-1: USB disconnect, device number 34 [ 695.536298][ T29] audit: type=1326 audit(1733981894.889:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6199 comm="syz.0.2985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa348f7ff19 code=0x0 [ 696.051124][ T5860] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 696.212163][ T5860] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 696.224211][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 696.235736][ T5860] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 696.305402][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.325596][ T5860] usb 5-1: Product: syz [ 696.329842][ T5860] usb 5-1: Manufacturer: syz [ 696.342889][ T5860] usb 5-1: SerialNumber: syz [ 696.350435][ T5860] usb 5-1: config 0 descriptor?? [ 696.363247][ T5860] usb 5-1: selecting invalid altsetting 0 [ 696.484618][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 697.531046][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 697.537451][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 697.545234][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 697.557086][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 697.568166][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 697.597485][ T6242] Cannot find add_set index 0 as target [ 697.780037][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 697.787532][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 697.798836][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 697.809871][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 697.821115][ T29] audit: type=1400 audit(1733981896.299:3140): avc: denied { nlmsg_read } for pid=6240 comm="syz.3.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 697.843303][ T29] audit: type=1400 audit(1733981896.539:3141): avc: denied { create } for pid=6240 comm="syz.3.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 697.875943][ T8] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 697.883711][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 697.917890][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 698.047958][ T8] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 698.062134][ T8] usb 3-1: string descriptor 0 read error: -22 [ 698.068360][ T8] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 698.077528][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.090702][ T29] audit: type=1400 audit(1733981896.949:3142): avc: denied { setopt } for pid=6240 comm="syz.3.2999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 698.707155][ T8] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 699.174064][ T6260] veth0_to_team: entered promiscuous mode [ 699.179945][ T6260] veth0_to_team: entered allmulticast mode [ 699.609883][ T29] audit: type=1400 audit(1733981898.959:3143): avc: denied { connect } for pid=6264 comm="syz.0.3003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 700.646484][ T8] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 700.646592][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3003'. [ 700.740462][ T5862] usb 3-1: USB disconnect, device number 48 [ 700.768643][ T116] usb 5-1: USB disconnect, device number 64 [ 700.857050][ T8] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 700.867446][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 700.899967][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 700.908147][ T29] audit: type=1400 audit(1733981900.249:3144): avc: denied { write } for pid=6267 comm="syz.1.3004" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 700.915688][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.951229][ T6274] fuse: Bad value for 'fd' [ 700.955768][ T8] usb 4-1: Product: syz [ 700.989568][ T8] usb 4-1: Manufacturer: syz [ 700.998422][ T8] usb 4-1: SerialNumber: syz [ 701.052050][ T6280] ptrace attach of "./syz-executor exec"[5815] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 701.217591][ T8] usb 4-1: config 0 descriptor?? [ 701.382053][ T8] usb 4-1: selecting invalid altsetting 0 [ 702.163507][ T6288] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3010'. [ 702.190921][ T29] audit: type=1400 audit(1733981901.539:3145): avc: denied { nlmsg_write } for pid=6287 comm="syz.4.3010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 702.198062][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3010'. [ 702.212496][ T6289] mmap: syz.2.3009 (6289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 702.375278][ T29] audit: type=1400 audit(1733981901.719:3146): avc: denied { bind } for pid=6291 comm="syz.1.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 702.391524][ T6294] FAULT_INJECTION: forcing a failure. [ 702.391524][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 702.451078][ T29] audit: type=1400 audit(1733981901.719:3147): avc: denied { write } for pid=6291 comm="syz.1.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 702.453268][ T6294] CPU: 1 UID: 0 PID: 6294 Comm: syz.4.3012 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 702.481037][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 702.481928][ T29] audit: type=1400 audit(1733981901.729:3148): avc: denied { create } for pid=6293 comm="syz.4.3012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 702.491080][ T6294] Call Trace: [ 702.491088][ T6294] [ 702.491096][ T6294] dump_stack_lvl+0x16c/0x1f0 [ 702.491124][ T6294] should_fail_ex+0x497/0x5b0 [ 702.491151][ T6294] _copy_from_user+0x2e/0xd0 [ 702.491177][ T6294] copy_msghdr_from_user+0x99/0x160 [ 702.491203][ T6294] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 702.491242][ T6294] ___sys_sendmsg+0xff/0x1e0 [ 702.491268][ T6294] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.491300][ T6294] ? __pfx_lock_release+0x10/0x10 [ 702.516346][ T29] audit: type=1400 audit(1733981901.729:3149): avc: denied { ioctl } for pid=6293 comm="syz.4.3012" path="socket:[43115]" dev="sockfs" ino=43115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 702.518357][ T6294] ? trace_lock_acquire+0x14e/0x1f0 [ 702.589383][ T6294] ? __fget_files+0x206/0x3a0 [ 702.594149][ T6294] __sys_sendmsg+0x16e/0x220 [ 702.598741][ T6294] ? __pfx___sys_sendmsg+0x10/0x10 [ 702.603862][ T6294] do_syscall_64+0xcd/0x250 [ 702.608356][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.614251][ T6294] RIP: 0033:0x7f141297ff19 [ 702.618650][ T6294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.638336][ T6294] RSP: 002b:00007f14136c4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.646744][ T6294] RAX: ffffffffffffffda RBX: 00007f1412b45fa0 RCX: 00007f141297ff19 [ 702.654699][ T6294] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 702.662660][ T6294] RBP: 00007f14136c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 702.670616][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.678579][ T6294] R13: 0000000000000000 R14: 00007f1412b45fa0 R15: 00007ffc4210b158 [ 702.686541][ T6294] [ 702.689617][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.709852][ T29] audit: type=1400 audit(1733981902.049:3150): avc: denied { read } for pid=6285 comm="syz.2.3009" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 702.741213][ T29] audit: type=1400 audit(1733981902.049:3151): avc: denied { open } for pid=6285 comm="syz.2.3009" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 702.895719][ T29] audit: type=1400 audit(1733981902.249:3152): avc: denied { ioctl } for pid=6285 comm="syz.2.3009" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 702.921270][ C1] vkms_vblank_simulate: vblank timer overrun [ 702.960217][ T29] audit: type=1400 audit(1733981902.279:3153): avc: denied { connect } for pid=6303 comm="syz.4.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 702.964397][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3014'. [ 703.821219][ T5862] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 704.051187][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 704.060750][ T5862] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 704.070973][ T5862] usb 5-1: config 6 has no interface number 0 [ 704.079963][ T5862] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 704.089930][ T5862] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.101647][ T5862] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 704.112975][ T5862] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 704.232575][ T5862] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 704.241734][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.249793][ T5862] usb 5-1: Product: syz [ 704.254009][ T5862] usb 5-1: Manufacturer: syz [ 704.258614][ T5862] usb 5-1: SerialNumber: syz [ 704.494091][ T5862] hso 5-1:6.2: Failed to find BULK IN ep [ 704.503914][ T25] usb 4-1: USB disconnect, device number 51 [ 704.557123][ T6320] can0: slcan on ttyS3. [ 704.618564][ T8] usb 5-1: USB disconnect, device number 65 [ 704.635187][ T6320] can0 (unregistered): slcan off ttyS3. [ 704.641535][ T6320] Falling back ldisc for ttyS3. [ 705.458998][ T6330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3022'. [ 705.478521][ T6332] FAULT_INJECTION: forcing a failure. [ 705.478521][ T6332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.551651][ T6332] CPU: 0 UID: 0 PID: 6332 Comm: syz.1.3023 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 705.562367][ T6332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 705.572433][ T6332] Call Trace: [ 705.575714][ T6332] [ 705.578640][ T6332] dump_stack_lvl+0x16c/0x1f0 [ 705.583316][ T6332] should_fail_ex+0x497/0x5b0 [ 705.587987][ T6332] _copy_from_user+0x2e/0xd0 [ 705.592585][ T6332] copy_msghdr_from_user+0x99/0x160 [ 705.597779][ T6332] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 705.603608][ T6332] ___sys_sendmsg+0xff/0x1e0 [ 705.608193][ T6332] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.613404][ T6332] ? __pfx_lock_release+0x10/0x10 [ 705.618421][ T6332] ? trace_lock_acquire+0x14e/0x1f0 [ 705.623618][ T6332] ? __fget_files+0x206/0x3a0 [ 705.628284][ T6332] __sys_sendmsg+0x16e/0x220 [ 705.632867][ T6332] ? __pfx___sys_sendmsg+0x10/0x10 [ 705.637984][ T6332] do_syscall_64+0xcd/0x250 [ 705.642480][ T6332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.648383][ T6332] RIP: 0033:0x7f0c4497ff19 [ 705.652795][ T6332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.672395][ T6332] RSP: 002b:00007f0c427f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.680815][ T6332] RAX: ffffffffffffffda RBX: 00007f0c44b45fa0 RCX: 00007f0c4497ff19 [ 705.688793][ T6332] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 705.696772][ T6332] RBP: 00007f0c427f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 705.704728][ T6332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.712683][ T6332] R13: 0000000000000000 R14: 00007f0c44b45fa0 R15: 00007fffb86746b8 [ 705.720652][ T6332] [ 705.739542][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.767722][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.772464][ T25] kernel write not supported for file /dsp (pid: 25 comm: kworker/1:0) [ 705.781188][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.784857][ T6337] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3025'. [ 705.792765][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.807855][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.815568][ T5860] hid-generic 0000:0000:0003.0007: unknown main item tag 0x0 [ 705.823189][ T5860] hid-generic 0000:0000:0003.0007: unexpected long global item [ 705.831793][ T5860] hid-generic 0000:0000:0003.0007: probe with driver hid-generic failed with error -22 [ 705.912147][ T8] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 705.948280][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 705.948297][ T29] audit: type=1400 audit(1733981905.299:3164): avc: denied { nlmsg_write } for pid=6336 comm="syz.3.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 706.072334][ T8] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 706.089763][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 706.107742][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 706.165138][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.176512][ T8] usb 5-1: Product: syz [ 706.191998][ T8] usb 5-1: Manufacturer: syz [ 706.227428][ T8] usb 5-1: SerialNumber: syz [ 706.239282][ T6349] tipc: Failed to obtain node identity [ 706.249300][ T8] usb 5-1: config 0 descriptor?? [ 706.257595][ T6349] tipc: Enabling of bearer rejected, failed to enable media [ 706.325232][ T8] usb 5-1: selecting invalid altsetting 0 [ 706.825682][ T6353] fuse: Bad value for 'fd' [ 707.464691][ T6365] net_ratelimit: 12 callbacks suppressed [ 707.464709][ T6365] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 707.851159][ T8] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 708.061263][ T8] usb 1-1: device descriptor read/64, error -71 [ 708.169789][ T6367] FAULT_INJECTION: forcing a failure. [ 708.169789][ T6367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.238707][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.1.3035 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 708.249425][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 708.259480][ T6367] Call Trace: [ 708.262760][ T6367] [ 708.265694][ T6367] dump_stack_lvl+0x16c/0x1f0 [ 708.270380][ T6367] should_fail_ex+0x497/0x5b0 [ 708.275069][ T6367] _copy_from_user+0x2e/0xd0 [ 708.279684][ T6367] copy_msghdr_from_user+0x99/0x160 [ 708.284904][ T6367] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 708.290746][ T6367] ___sys_sendmsg+0xff/0x1e0 [ 708.295385][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.300616][ T6367] ? __pfx_lock_release+0x10/0x10 [ 708.305656][ T6367] ? trace_lock_acquire+0x14e/0x1f0 [ 708.310881][ T6367] ? __fget_files+0x206/0x3a0 [ 708.315573][ T6367] __sys_sendmsg+0x16e/0x220 [ 708.320213][ T6367] ? __pfx___sys_sendmsg+0x10/0x10 [ 708.325361][ T6367] do_syscall_64+0xcd/0x250 [ 708.329881][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.335787][ T6367] RIP: 0033:0x7f0c4497ff19 [ 708.340203][ T6367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 708.359835][ T6367] RSP: 002b:00007f0c427f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.368270][ T6367] RAX: ffffffffffffffda RBX: 00007f0c44b45fa0 RCX: 00007f0c4497ff19 [ 708.376256][ T6367] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 708.384235][ T6367] RBP: 00007f0c427f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 708.392642][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.400600][ T6367] R13: 0000000000000000 R14: 00007f0c44b45fa0 R15: 00007fffb86746b8 [ 708.408569][ T6367] [ 708.486555][ T6358] loop5: detected capacity change from 0 to 7 [ 708.493055][ T8] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 708.494789][ T6358] Dev loop5: unable to read RDB block 7 [ 708.506412][ T6358] loop5: AHDI p1 p3 [ 708.510341][ T6358] loop5: partition table partially beyond EOD, truncated [ 708.517433][ T6358] loop5: p1 start 2048 is beyond EOD, truncated [ 708.663213][ T29] audit: type=1400 audit(1733981908.019:3165): avc: denied { relabelfrom } for pid=6370 comm="syz.1.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 708.676327][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 708.683806][ T8] usb 1-1: device descriptor read/64, error -71 [ 708.697645][ T6374] batadv0: mtu less than device minimum [ 708.697834][ T29] audit: type=1400 audit(1733981908.019:3166): avc: denied { relabelto } for pid=6370 comm="syz.1.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 708.734196][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.745333][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.756452][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.767539][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.778643][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.789770][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.800922][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.812053][ T6374] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 708.918351][ T6374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 708.951177][ T8] usb usb1-port1: attempt power cycle [ 709.291331][ T8] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 709.335534][ T8] usb 1-1: device descriptor read/8, error -71 [ 709.339020][ T5862] usb 5-1: USB disconnect, device number 66 [ 709.559395][ T29] audit: type=1400 audit(1733981908.909:3167): avc: denied { create } for pid=6392 comm="syz.4.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 709.559992][ T6394] FAULT_INJECTION: forcing a failure. [ 709.559992][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.601074][ T8] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 709.634733][ T6394] CPU: 0 UID: 0 PID: 6394 Comm: syz.4.3043 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 709.645454][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 709.655522][ T6394] Call Trace: [ 709.658803][ T6394] [ 709.661734][ T6394] dump_stack_lvl+0x16c/0x1f0 [ 709.666421][ T6394] should_fail_ex+0x497/0x5b0 [ 709.671110][ T6394] _copy_from_user+0x2e/0xd0 [ 709.675714][ T6394] copy_msghdr_from_user+0x99/0x160 [ 709.680925][ T6394] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 709.686748][ T6394] ___sys_sendmsg+0xff/0x1e0 [ 709.691356][ T6394] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.696578][ T6394] ? __pfx_lock_release+0x10/0x10 [ 709.701608][ T6394] ? trace_lock_acquire+0x14e/0x1f0 [ 709.706813][ T6394] ? __fget_files+0x206/0x3a0 [ 709.711485][ T6394] __sys_sendmsg+0x16e/0x220 [ 709.716060][ T6394] ? __pfx___sys_sendmsg+0x10/0x10 [ 709.721158][ T6394] do_syscall_64+0xcd/0x250 [ 709.725641][ T6394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.731524][ T6394] RIP: 0033:0x7f141297ff19 [ 709.735929][ T6394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.755519][ T6394] RSP: 002b:00007f14136c4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.763909][ T6394] RAX: ffffffffffffffda RBX: 00007f1412b45fa0 RCX: 00007f141297ff19 [ 709.771855][ T6394] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 709.779809][ T6394] RBP: 00007f14136c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 709.787756][ T6394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.795703][ T6394] R13: 0000000000000000 R14: 00007f1412b45fa0 R15: 00007ffc4210b158 [ 709.803669][ T6394] [ 710.772312][ T8] usb 1-1: device descriptor read/8, error -71 [ 710.914546][ T8] usb usb1-port1: unable to enumerate USB device [ 711.972395][ T6415] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3050'. [ 712.655689][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.665071][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.930273][ T29] audit: type=1400 audit(1733981912.089:3168): avc: denied { accept } for pid=6410 comm="syz.1.3049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 713.285823][ T29] audit: type=1400 audit(1733981912.639:3169): avc: denied { unlink } for pid=6427 comm="syz.3.3054" name="#14" dev="tmpfs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 713.301034][ T8] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 713.316108][ T29] audit: type=1400 audit(1733981912.659:3170): avc: denied { mount } for pid=6427 comm="syz.3.3054" name="/" dev="overlay" ino=2647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 713.678821][ T29] audit: type=1400 audit(1733981913.029:3171): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 713.679019][ T8] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 713.739084][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 713.807252][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 713.830168][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.856318][ T8] usb 1-1: Product: syz [ 713.864717][ T8] usb 1-1: Manufacturer: syz [ 713.877180][ T8] usb 1-1: SerialNumber: syz [ 713.896473][ T8] usb 1-1: config 0 descriptor?? [ 713.930508][ T8] usb 1-1: selecting invalid altsetting 0 [ 714.271794][ T6439] Cannot find add_set index 0 as target [ 714.908412][ T6444] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 714.917961][ T6444] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 715.545524][ T6449] net_ratelimit: 12 callbacks suppressed [ 715.545542][ T6449] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 715.867262][ T6452] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 716.200740][ T29] audit: type=1400 audit(1733981915.549:3172): avc: denied { read } for pid=6453 comm="syz.2.3062" path="socket:[44471]" dev="sockfs" ino=44471 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 716.246871][ T29] audit: type=1400 audit(1733981915.579:3173): avc: denied { read } for pid=6453 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 716.397765][ T29] audit: type=1400 audit(1733981915.629:3174): avc: denied { write } for pid=6453 comm="syz.2.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 716.455941][ T25] usb 1-1: USB disconnect, device number 39 [ 716.647550][ T6463] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 717.036624][ T6470] binder: 6464:6470 ioctl 4018620d 0 returned -22 [ 717.043205][ T29] audit: type=1400 audit(1733981916.389:3175): avc: denied { read } for pid=6464 comm="syz.1.3065" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 717.075461][ T29] audit: type=1400 audit(1733981916.389:3176): avc: denied { open } for pid=6464 comm="syz.1.3065" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 717.099554][ T29] audit: type=1400 audit(1733981916.389:3177): avc: denied { ioctl } for pid=6464 comm="syz.1.3065" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 717.386713][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 717.401558][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 717.931029][ T116] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 718.046977][ T6490] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 718.359997][ T6492] FAULT_INJECTION: forcing a failure. [ 718.359997][ T6492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.381083][ T51] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 718.395314][ T6492] CPU: 1 UID: 0 PID: 6492 Comm: syz.1.3074 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 718.406018][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 718.416076][ T6492] Call Trace: [ 718.419345][ T6492] [ 718.422271][ T6492] dump_stack_lvl+0x16c/0x1f0 [ 718.426944][ T6492] should_fail_ex+0x497/0x5b0 [ 718.431625][ T6492] _copy_to_user+0x32/0xd0 [ 718.436036][ T6492] simple_read_from_buffer+0xd0/0x160 [ 718.441420][ T6492] proc_fail_nth_read+0x198/0x270 [ 718.446449][ T6492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.451990][ T6492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 718.457512][ T6492] vfs_read+0x1df/0xbe0 [ 718.461641][ T6492] ? __fget_files+0x1fc/0x3a0 [ 718.466306][ T6492] ? __pfx___mutex_lock+0x10/0x10 [ 718.471327][ T6492] ? __pfx_vfs_read+0x10/0x10 [ 718.475992][ T6492] ? __fget_files+0x206/0x3a0 [ 718.480695][ T6492] ksys_read+0x12b/0x250 [ 718.484960][ T6492] ? __pfx_ksys_read+0x10/0x10 [ 718.489741][ T6492] do_syscall_64+0xcd/0x250 [ 718.494258][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.500148][ T6492] RIP: 0033:0x7f0c4497e92c [ 718.504555][ T6492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 718.524147][ T6492] RSP: 002b:00007f0c427f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.532572][ T6492] RAX: ffffffffffffffda RBX: 00007f0c44b45fa0 RCX: 00007f0c4497e92c [ 718.540539][ T6492] RDX: 000000000000000f RSI: 00007f0c427f60b0 RDI: 0000000000000004 [ 718.548497][ T6492] RBP: 00007f0c427f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 718.556457][ T6492] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 718.564415][ T6492] R13: 0000000000000000 R14: 00007f0c44b45fa0 R15: 00007fffb86746b8 [ 718.572382][ T6492] [ 718.597981][ T116] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 718.608311][ T116] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.659323][ T116] usb 3-1: config 0 descriptor?? [ 718.675416][ T51] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 718.736011][ T51] usb 4-1: config 0 interface 0 has no altsetting 0 [ 718.881304][ T51] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 718.891773][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.900576][ T51] usb 4-1: Product: syz [ 718.904838][ T51] usb 4-1: Manufacturer: syz [ 718.909449][ T51] usb 4-1: SerialNumber: syz [ 718.941165][ T116] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 718.951670][ T51] usb 4-1: config 0 descriptor?? [ 718.980504][ T116] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 718.999461][ T116] [drm:udl_init] *ERROR* Selecting channel failed [ 719.034905][ T51] usb 4-1: selecting invalid altsetting 0 [ 719.037634][ T116] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 719.049387][ T116] [drm] Initialized udl on minor 2 [ 719.320288][ T116] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 719.330271][ T116] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 719.379591][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 719.388080][ T5860] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 719.394916][ T116] usb 3-1: USB disconnect, device number 49 [ 719.755786][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 719.755820][ T29] audit: type=1400 audit(1733981919.109:3180): avc: denied { read } for pid=6501 comm="syz.1.3077" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 720.088444][ T29] audit: type=1400 audit(1733981919.179:3181): avc: denied { open } for pid=6501 comm="syz.1.3077" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 720.399359][ T6508] binder: 6507:6508 unknown command 0 [ 720.405208][ T6508] binder: 6507:6508 ioctl c0306201 200001c0 returned -22 [ 720.421042][ T5860] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 720.434694][ T6508] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 720.459871][ T6508] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 720.531993][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3080'. [ 720.574668][ T5860] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 720.584345][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.592877][ T5860] usb 5-1: Product: syz [ 720.597287][ T5860] usb 5-1: Manufacturer: syz [ 720.602371][ T5860] usb 5-1: SerialNumber: syz [ 720.608878][ T5860] usb 5-1: config 0 descriptor?? [ 720.616535][ T5860] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 067 [ 721.107501][ T5862] usb 4-1: USB disconnect, device number 52 [ 721.911210][ T6521] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 721.920012][ T6521] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 722.201916][ T6529] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 722.351639][ T6530] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 722.700446][ T5860] (null): failure setting delay to 10us [ 722.797721][ T6533] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 723.087271][ T5860] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 723.248154][ T5860] usb 5-1: USB disconnect, device number 67 [ 723.258992][ T29] audit: type=1400 audit(1733981922.609:3182): avc: denied { read } for pid=6540 comm="syz.0.3089" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 723.858727][ T29] audit: type=1400 audit(1733981922.609:3183): avc: denied { open } for pid=6540 comm="syz.0.3089" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 723.958835][ T29] audit: type=1400 audit(1733981923.209:3184): avc: denied { getopt } for pid=6540 comm="syz.0.3089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 724.097525][ T6541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 724.134577][ T6541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 724.140752][ T6541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 724.149753][ T6541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 725.035236][ T6550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.076959][ T6550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.414774][ T6563] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 725.931540][ T6571] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 725.975484][ T5128] Bluetooth: hci1: command 0x0406 tx timeout [ 726.047186][ T6572] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 726.301791][ T5128] Bluetooth: hci4: command 0x0406 tx timeout [ 726.307892][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 726.314099][ T5128] Bluetooth: hci2: command 0x0406 tx timeout [ 726.549435][ T29] audit: type=1400 audit(1733981925.819:3185): avc: denied { nlmsg_read } for pid=6579 comm="syz.0.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 726.811088][ T29] audit: type=1400 audit(1733981926.009:3186): avc: denied { create } for pid=6577 comm="syz.1.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.224514][ T29] audit: type=1400 audit(1733981926.009:3187): avc: denied { connect } for pid=6577 comm="syz.1.3101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 727.820893][ T29] audit: type=1400 audit(1733981927.169:3188): avc: denied { create } for pid=6579 comm="syz.0.3102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 727.884943][ T29] audit: type=1400 audit(1733981927.199:3189): avc: denied { write } for pid=6592 comm="syz.1.3104" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 727.940776][ T29] audit: type=1400 audit(1733981927.209:3190): avc: denied { ioctl } for pid=6579 comm="syz.0.3102" path="socket:[43635]" dev="sockfs" ino=43635 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 727.965494][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.972760][ T6584] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 727.978861][ T6584] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 727.994800][ T6584] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 728.015286][ T6584] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 728.907890][ T29] audit: type=1400 audit(1733981928.259:3191): avc: denied { read } for pid=5171 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 729.563284][ T29] audit: type=1400 audit(1733981928.259:3192): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 729.662882][ T29] audit: type=1400 audit(1733981928.259:3193): avc: denied { append } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.700029][ T6602] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 729.709356][ T6602] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 729.739820][ T6602] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 729.788285][ T6602] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 729.795284][ T29] audit: type=1400 audit(1733981928.259:3194): avc: denied { open } for pid=5171 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 729.872874][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.881533][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.695815][ T6633] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 731.697374][ T51] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 731.839410][ T6630] veth0_to_team: entered promiscuous mode [ 731.845212][ T6630] veth0_to_team: entered allmulticast mode [ 731.867760][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 731.874146][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 732.699107][ T5128] Bluetooth: hci4: command 0x0406 tx timeout [ 732.705356][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 733.073737][ T51] usb 3-1: device descriptor read/all, error -71 [ 734.322796][ T5862] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 734.491243][ T5862] usb 4-1: device descriptor read/64, error -71 [ 734.771082][ T5862] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 734.814389][ T51] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 734.898052][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 734.898067][ T29] audit: type=1400 audit(1733981934.239:3196): avc: denied { map } for pid=6657 comm="syz.1.3124" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 734.939951][ T29] audit: type=1400 audit(1733981934.239:3197): avc: denied { execute } for pid=6657 comm="syz.1.3124" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 734.979876][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.989766][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.999065][ T6670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3127'. [ 735.071914][ T5862] usb 4-1: device descriptor read/64, error -71 [ 735.091023][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 735.098938][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 735.106534][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.137248][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 735.181184][ T5862] usb usb4-port1: attempt power cycle [ 735.181534][ T29] audit: type=1400 audit(1733981934.519:3198): avc: denied { setattr } for pid=6672 comm="syz.0.3129" name="media9" dev="devtmpfs" ino=1027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.187279][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 735.750254][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 735.757859][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.769123][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 735.782390][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 735.793407][ T51] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 735.803115][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 735.814442][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 735.829289][ T51] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 735.855232][ T51] usb 5-1: string descriptor 0 read error: -22 [ 735.862603][ T51] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 735.872042][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.966424][ T51] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 736.041661][ T5862] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 736.083433][ T5862] usb 4-1: device descriptor read/8, error -71 [ 736.331753][ T5862] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 736.475859][ T5862] usb 4-1: device descriptor read/8, error -71 [ 737.372582][ T6692] veth0_to_team: entered promiscuous mode [ 737.378373][ T6692] veth0_to_team: entered allmulticast mode [ 737.404904][ T29] audit: type=1400 audit(1733981936.759:3199): avc: denied { getopt } for pid=6687 comm="syz.2.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 737.706632][ T5862] usb usb4-port1: unable to enumerate USB device [ 737.818162][ T29] audit: type=1400 audit(1733981937.169:3200): avc: denied { write } for pid=6702 comm="syz.0.3139" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 738.194032][ T29] audit: type=1400 audit(1733981937.549:3201): avc: denied { ioctl } for pid=6702 comm="syz.0.3139" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 738.284328][ T29] audit: type=1326 audit(1733981937.639:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6702 comm="syz.0.3139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa348f7ff19 code=0x0 [ 738.491555][ T116] usb 5-1: USB disconnect, device number 68 [ 738.843022][ T6729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 738.852101][ T29] audit: type=1400 audit(1733981938.199:3204): avc: denied { setopt } for pid=6728 comm="syz.0.3144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 738.882517][ T6731] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 738.907460][ T29] audit: type=1400 audit(1733981938.189:3203): avc: denied { relabelfrom } for pid=6730 comm="syz.2.3145" name="SCTP" dev="sockfs" ino=43940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 738.944931][ T6731] ucma_write: process 1733 (syz.2.3145) changed security contexts after opening file descriptor, this is not allowed. [ 738.967680][ T29] audit: type=1400 audit(1733981938.289:3205): avc: denied { relabelto } for pid=6730 comm="syz.2.3145" name="SCTP" dev="sockfs" ino=43940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 739.198719][ T6724] loop5: detected capacity change from 0 to 7 [ 739.213078][ T6724] Dev loop5: unable to read RDB block 7 [ 739.219070][ T6724] loop5: AHDI p1 p3 [ 739.224909][ T6724] loop5: partition table partially beyond EOD, truncated [ 739.233404][ T6724] loop5: p1 start 2048 is beyond EOD, truncated [ 740.928259][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 741.078368][ T29] audit: type=1400 audit(1733981939.939:3211): avc: denied { mount } for pid=6750 comm="syz.1.3153" name="/" dev="autofs" ino=43985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 741.101373][ T29] audit: type=1400 audit(1733981939.939:3212): avc: denied { mounton } for pid=6750 comm="syz.1.3153" path="/592/file1" dev="autofs" ino=43985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 741.124646][ T29] audit: type=1400 audit(1733981939.939:3213): avc: denied { mount } for pid=6750 comm="syz.1.3153" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 741.693294][ T29] audit: type=1400 audit(1733981941.049:3214): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 743.321456][ T29] audit: type=1400 audit(1733981942.649:3215): avc: denied { bind } for pid=6783 comm="syz.1.3162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 743.407409][ T29] audit: type=1400 audit(1733981942.649:3216): avc: denied { write } for pid=6783 comm="syz.1.3162" path="socket:[46173]" dev="sockfs" ino=46173 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 743.774128][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3164'. [ 745.959911][ T6794] loop5: detected capacity change from 0 to 7 [ 746.022923][ T6794] Dev loop5: unable to read RDB block 7 [ 746.028644][ T6794] loop5: AHDI p1 p3 [ 746.032899][ T6794] loop5: partition table partially beyond EOD, truncated [ 746.040497][ T6794] loop5: p1 start 2048 is beyond EOD, truncated [ 746.047026][ T116] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 746.794425][ T116] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 746.813776][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.833087][ T116] usb 5-1: config 0 descriptor?? [ 746.861071][ T5860] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 747.040569][ T8] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 747.081256][ T116] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 747.089909][ T116] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 747.730297][ T116] [drm:udl_init] *ERROR* Selecting channel failed [ 747.741165][ T116] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 747.747907][ T116] [drm] Initialized udl on minor 2 [ 747.774001][ T5860] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 747.831085][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.882126][ T5860] usb 3-1: config 0 descriptor?? [ 747.925771][ T116] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 747.979472][ T116] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 747.995295][ T8] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 748.004641][ T5890] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 748.015525][ T5890] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 748.022100][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.051074][ T8] usb 1-1: config 0 descriptor?? [ 748.057100][ T116] usb 5-1: USB disconnect, device number 69 [ 748.100296][ T5860] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 748.118626][ T5860] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 748.157145][ T5860] [drm:udl_init] *ERROR* Selecting channel failed [ 748.164580][ T29] audit: type=1400 audit(1733981947.519:3217): avc: denied { create } for pid=6847 comm="syz.3.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 748.175651][ T5860] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3 [ 748.211559][ T5860] [drm] Initialized udl on minor 3 [ 748.215550][ T29] audit: type=1400 audit(1733981947.549:3218): avc: denied { mount } for pid=6850 comm="syz.1.3176" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 748.221416][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 748.255594][ T5860] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 748.263039][ T5890] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 748.281488][ T5890] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 748.290492][ T5860] usb 3-1: USB disconnect, device number 52 [ 748.321654][ T29] audit: type=1400 audit(1733981947.599:3219): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 748.360710][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 748.421212][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 748.459504][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 748.493930][ T8] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 4 [ 748.521113][ T8] [drm] Initialized udl on minor 4 [ 748.541011][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 748.559726][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 748.619970][ T8] usb 1-1: USB disconnect, device number 40 [ 748.626177][ T5860] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 748.651397][ T5860] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 748.654002][ T29] audit: type=1400 audit(1733981948.009:3220): avc: denied { mounton } for pid=6847 comm="syz.3.3177" path="/526/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 749.364444][ T4095] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 749.380282][ T4095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 749.395626][ T4095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 749.407081][ T4095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 749.417497][ T4095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 749.418528][ T8] usb 2-1: USB disconnect, device number 58 [ 749.430731][ T4095] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 749.451552][ T29] audit: type=1400 audit(1733981948.799:3221): avc: denied { mounton } for pid=6864 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 749.514800][ T6871] xt_hashlimit: max too large, truncated to 1048576 [ 749.525128][ T29] audit: type=1400 audit(1733981948.869:3222): avc: denied { bind } for pid=6870 comm="syz.2.3181" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 749.568990][ T29] audit: type=1400 audit(1733981948.869:3223): avc: denied { node_bind } for pid=6870 comm="syz.2.3181" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 749.602735][ T6874] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3182'. [ 749.844872][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 750.331465][ T6891] ptrace attach of "./syz-executor exec"[5815] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 750.357555][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.448547][ C0] vkms_vblank_simulate: vblank timer overrun [ 750.608220][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.635180][ T6864] bridge_slave_0: entered allmulticast mode [ 750.662097][ T6864] bridge_slave_0: entered promiscuous mode [ 750.686821][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.716762][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.741305][ T6864] bridge_slave_1: entered allmulticast mode [ 750.763189][ T6864] bridge_slave_1: entered promiscuous mode [ 750.851984][ T6902] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 751.158989][ T6893] 8021q: adding VLAN 0 to HW filter on device bond15 [ 751.418881][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.441715][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.461135][ T4095] Bluetooth: hci2: command tx timeout [ 751.599884][ T6896] loop5: detected capacity change from 0 to 7 [ 751.679581][ T6864] team0: Port device team_slave_0 added [ 751.700095][ T6896] Dev loop5: unable to read RDB block 7 [ 751.736256][ T6896] loop5: AHDI p1 p3 [ 751.740811][ T6896] loop5: partition table partially beyond EOD, truncated [ 751.749228][ T6896] loop5: p1 start 2048 is beyond EOD, truncated [ 751.763879][ T6864] team0: Port device team_slave_1 added [ 751.979168][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.989868][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.015755][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.060367][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.169160][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.220847][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.247842][ C0] vkms_vblank_simulate: vblank timer overrun [ 752.668207][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.851103][ T8] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 752.897792][ T6864] hsr_slave_0: entered promiscuous mode [ 752.994885][ T6864] hsr_slave_1: entered promiscuous mode [ 753.024419][ T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 753.064990][ T6864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 753.081002][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.106882][ T6864] Cannot create hsr debugfs directory [ 753.164276][ T8] usb 3-1: config 0 descriptor?? [ 753.523163][ T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 753.554926][ T4095] Bluetooth: hci2: command tx timeout [ 754.105766][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 754.131137][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 754.152462][ T8] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 754.159604][ T8] [drm] Initialized udl on minor 2 [ 754.201427][ T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 754.209464][ T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 754.252809][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 754.260900][ T8] usb 3-1: USB disconnect, device number 53 [ 754.267579][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 754.275678][ T5860] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 754.340141][ T6932] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3194'. [ 754.340784][ T6864] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.798517][ T6864] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.817833][ T6941] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3196'. [ 755.080269][ T6864] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.088946][ T5860] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 755.401050][ T29] audit: type=1400 audit(1733981954.599:3224): avc: denied { setopt } for pid=6942 comm="syz.3.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 755.633729][ T4095] Bluetooth: hci2: command tx timeout [ 755.671005][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 755.677499][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 755.698281][ T6864] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.711003][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 755.725954][ T6955] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 755.729308][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 755.732476][ T6955] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 755.732738][ T6955] vhci_hcd vhci_hcd.0: Device attached [ 755.825688][ T6956] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 755.851035][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 755.868635][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 755.877241][ T1823] vhci_hcd: stop threads [ 755.881601][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 755.926528][ T1823] vhci_hcd: release socket [ 755.943779][ T1823] vhci_hcd: disconnect device [ 755.954073][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 755.999478][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 756.781050][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 756.788839][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 756.800233][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 757.781157][ T4095] Bluetooth: hci2: command tx timeout [ 758.785638][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 758.790903][ T6864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 758.839031][ T6864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 759.263478][ T6864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 759.291663][ T5860] usb 1-1: string descriptor 0 read error: -71 [ 759.298297][ T5860] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 759.321397][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.341560][ T6864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 759.464066][ T5860] usb 1-1: can't set config #168, error -71 [ 760.353232][ T5860] usb 1-1: USB disconnect, device number 41 [ 760.420299][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.445018][ T29] audit: type=1326 audit(1733981959.799:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.325454][ T29] audit: type=1326 audit(1733981960.679:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.353386][ T29] audit: type=1326 audit(1733981960.679:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.472380][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.483986][ T29] audit: type=1326 audit(1733981960.679:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.517275][ T6988] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3207'. [ 761.528563][ T3166] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.535672][ T3166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.546993][ T29] audit: type=1326 audit(1733981960.679:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.553785][ T3166] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.577521][ T3166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.589564][ T29] audit: type=1326 audit(1733981960.709:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.625419][ T29] audit: type=1326 audit(1733981960.709:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.659546][ T29] audit: type=1326 audit(1733981960.709:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.670801][ T6864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 761.752189][ T29] audit: type=1326 audit(1733981960.709:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.757751][ T6864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 761.786679][ T25] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 761.798676][ T29] audit: type=1326 audit(1733981960.709:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.3203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x7ffc0000 [ 761.841213][ T5860] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 761.945173][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 761.973494][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.989424][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.998925][ T5860] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 762.008203][ T25] usb 3-1: config 0 descriptor?? [ 762.195431][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.407901][ T25] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 762.413090][ T6864] veth0_vlan: entered promiscuous mode [ 762.424229][ T5860] usb 1-1: config 0 descriptor?? [ 762.428862][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 762.437819][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 762.449200][ T25] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 762.455547][ T6864] veth1_vlan: entered promiscuous mode [ 762.456027][ T25] [drm] Initialized udl on minor 2 [ 762.474995][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 762.487145][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 762.501752][ T7009] binder: 7008:7009 ioctl c0306201 0 returned -14 [ 762.504192][ T6864] veth0_macvtap: entered promiscuous mode [ 762.537676][ T6864] veth1_macvtap: entered promiscuous mode [ 762.538021][ T51] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 762.566712][ T25] usb 3-1: USB disconnect, device number 54 [ 762.578377][ T5860] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 762.607861][ T51] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 762.616768][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.651008][ T5860] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 762.664615][ T5860] [drm:udl_init] *ERROR* Selecting channel failed [ 762.673825][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.698261][ T5860] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3 [ 762.709428][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.719572][ T5860] [drm] Initialized udl on minor 3 [ 762.724937][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.737404][ T5860] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 762.745649][ T5860] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 762.753214][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.764103][ T116] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 762.765943][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.772043][ T116] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 762.773240][ T5860] usb 1-1: USB disconnect, device number 42 [ 762.785314][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.805789][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.816394][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.826758][ T6864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.837266][ T6864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.849824][ T6864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.868501][ T6864] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.878275][ T6864] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.894534][ T6864] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.909021][ T6864] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.102728][ T5860] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 763.265304][ T1823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.292832][ T2573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.313337][ T1823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.323626][ T2573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.323635][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 763.324921][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.343754][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.355221][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 763.366447][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.408283][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.416146][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.434797][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 763.449346][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 763.556668][ T5860] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 763.564578][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 763.741641][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 763.752931][ T5860] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 766.018630][ T5860] usb 1-1: string descriptor 0 read error: -71 [ 766.025338][ T5860] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 766.034516][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.044444][ T5860] usb 1-1: can't set config #168, error -71 [ 766.053617][ T5860] usb 1-1: USB disconnect, device number 43 [ 766.071360][ T51] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 766.875280][ T51] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 766.889423][ T51] usb 5-1: config 0 interface 0 has no altsetting 0 [ 767.335516][ T51] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 767.344780][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.352862][ T51] usb 5-1: Product: syz [ 767.357113][ T51] usb 5-1: Manufacturer: syz [ 767.361838][ T51] usb 5-1: SerialNumber: syz [ 767.415081][ T51] usb 5-1: config 0 descriptor?? [ 767.434663][ T51] usb 5-1: selecting invalid altsetting 0 [ 767.439600][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3225'. [ 768.367370][ T5860] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 768.587832][ T5860] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 768.597134][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.610968][ T5860] usb 1-1: config 0 descriptor?? [ 768.852496][ T5859] kernel write not supported for file [eventfd] (pid: 5859 comm: kworker/1:4) [ 768.873020][ T5860] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 768.881793][ T5860] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 769.118675][ T5860] [drm:udl_init] *ERROR* Selecting channel failed [ 769.547689][ T116] usb 5-1: USB disconnect, device number 70 [ 769.562506][ T5860] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 769.569222][ T5860] [drm] Initialized udl on minor 2 [ 769.667566][ T5860] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 769.677639][ T5860] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 769.700626][ T7080] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 769.708093][ T7080] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 769.716269][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 769.724503][ T5860] usb 1-1: USB disconnect, device number 44 [ 769.741331][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 769.749305][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 770.231027][ T116] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 770.309430][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 770.309446][ T29] audit: type=1400 audit(1733981969.659:3302): avc: denied { write } for pid=7072 comm="syz.1.3229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 770.354238][ T29] audit: type=1326 audit(1733981969.709:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.1.3229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f519e17ff19 code=0x0 [ 770.391155][ T116] usb 5-1: Using ep0 maxpacket: 8 [ 770.397532][ T116] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 770.405125][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.421402][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 770.442761][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.460780][ T116] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 770.468369][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.482368][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 770.502551][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.544453][ T116] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 770.552152][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 770.566278][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 770.579164][ T116] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 770.619607][ T116] usb 5-1: string descriptor 0 read error: -22 [ 770.629350][ T116] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 770.653754][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.674908][ T116] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 772.784861][ T7130] Cannot find add_set index 0 as target [ 773.130856][ T116] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 773.164109][ T29] audit: type=1400 audit(1733981971.569:3304): avc: denied { write } for pid=7114 comm="syz.2.3240" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 773.189683][ T29] audit: type=1400 audit(1733981971.569:3305): avc: denied { name_bind } for pid=7114 comm="syz.2.3240" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 773.211463][ T29] audit: type=1326 audit(1733981972.509:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.235285][ T29] audit: type=1326 audit(1733981972.509:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.258996][ T29] audit: type=1326 audit(1733981972.509:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.282882][ T29] audit: type=1326 audit(1733981972.509:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.306643][ T29] audit: type=1326 audit(1733981972.509:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.330513][ T29] audit: type=1326 audit(1733981972.509:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7133 comm="syz.4.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f141297ff19 code=0x7ffc0000 [ 773.358128][ T51] usb 5-1: USB disconnect, device number 71 [ 773.566612][ T116] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 773.577008][ T116] usb 4-1: config 0 interface 0 has no altsetting 0 [ 773.658867][ T116] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 773.674112][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.688245][ T116] usb 4-1: Product: syz [ 773.693894][ T116] usb 4-1: Manufacturer: syz [ 773.698563][ T116] usb 4-1: SerialNumber: syz [ 773.975248][ T51] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 774.237458][ T116] usb 4-1: config 0 descriptor?? [ 774.247246][ T116] usb 4-1: selecting invalid altsetting 0 [ 774.260646][ T51] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 774.269188][ T51] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.279008][ T51] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 774.292117][ T51] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 774.301222][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.309535][ T7141] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 774.315705][ T7141] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 774.327301][ T7141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 774.333598][ T7141] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 774.339537][ T7141] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 774.364193][ T7141] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 774.600116][ T51] usb 5-1: usb_control_msg returned -32 [ 774.605784][ T51] usbtmc 5-1:16.0: can't read capabilities [ 774.711137][ T116] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 775.413576][ T116] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 775.428043][ T116] usb 1-1: config 0 interface 0 has no altsetting 0 [ 775.486388][ T116] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 775.512111][ T116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.591122][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 775.591164][ T29] audit: type=1400 audit(1733981974.919:3368): avc: denied { write } for pid=7163 comm="syz.2.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 775.592643][ T116] usb 1-1: Product: syz [ 775.746276][ T4095] Bluetooth: hci1: command 0x0406 tx timeout [ 775.760701][ T116] usb 1-1: Manufacturer: syz [ 775.769279][ T116] usb 1-1: SerialNumber: syz [ 775.778200][ T116] usb 1-1: config 0 descriptor?? [ 775.790047][ T116] usb 1-1: selecting invalid altsetting 0 [ 776.265959][ T116] usb 4-1: USB disconnect, device number 57 [ 776.342736][ T4095] Bluetooth: hci2: command 0x0c1a tx timeout [ 776.348845][ T4095] Bluetooth: hci4: command 0x0406 tx timeout [ 776.356722][ T4095] Bluetooth: hci3: command 0x0406 tx timeout [ 776.390984][ T5890] usb 5-1: USB disconnect, device number 72 [ 777.255188][ T7184] fuse: Bad value for 'fd' [ 778.072283][ T29] audit: type=1326 audit(1733981977.409:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7171 comm="syz.1.3253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f519e17ff19 code=0x0 [ 778.172202][ T7184] ptrace attach of "./syz-executor exec"[5811] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 778.314779][ T25] usb 1-1: USB disconnect, device number 45 [ 778.324548][ T29] audit: type=1400 audit(1733981977.669:3370): avc: denied { read } for pid=7193 comm="syz.2.3259" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 778.436556][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 778.443079][ T29] audit: type=1400 audit(1733981977.669:3371): avc: denied { open } for pid=7193 comm="syz.2.3259" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 779.347387][ T29] audit: type=1326 audit(1733981978.699:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7200 comm="syz.0.3261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa348f7ff19 code=0x0 [ 779.734876][ T29] audit: type=1400 audit(1733981978.839:3373): avc: denied { getopt } for pid=7200 comm="syz.0.3261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 779.970251][ T7217] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3263'. [ 780.415345][ T5890] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 780.749411][ T5818] Bluetooth: hci2: command 0x0c1a tx timeout [ 780.911186][ T25] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 780.914318][ T5890] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 780.938265][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.951918][ T5890] usb 4-1: Product: syz [ 780.956112][ T5890] usb 4-1: Manufacturer: syz [ 780.960845][ T5890] usb 4-1: SerialNumber: syz [ 780.976560][ T5890] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 780.995860][ T29] audit: type=1400 audit(1733981980.349:3374): avc: denied { watch watch_reads } for pid=7222 comm="syz.4.3266" path="/586" dev="tmpfs" ino=3059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 781.138358][ T25] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 781.185153][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 781.249173][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 781.297831][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.342932][ T25] usb 1-1: Product: syz [ 781.347737][ T25] usb 1-1: Manufacturer: syz [ 781.349604][ T5860] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 781.352765][ T25] usb 1-1: SerialNumber: syz [ 781.413232][ T25] usb 1-1: config 0 descriptor?? [ 781.434186][ T25] usb 1-1: selecting invalid altsetting 0 [ 782.561912][ T5860] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 782.575030][ T5860] ath9k_htc: Failed to initialize the device [ 782.788724][ T5860] usb 4-1: ath9k_htc: USB layer deinitialized [ 782.873872][ T25] usb 4-1: USB disconnect, device number 58 [ 783.658844][ T5860] usb 1-1: USB disconnect, device number 46 [ 784.843605][ T7259] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 785.217202][ T29] audit: type=1400 audit(1733981984.539:3375): avc: denied { set_context_mgr } for pid=7263 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 785.353807][ T29] audit: type=1400 audit(1733981984.709:3376): avc: denied { open } for pid=7262 comm="syz.3.3276" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=47409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 785.378410][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.590035][ T29] audit: type=1400 audit(1733981984.939:3377): avc: denied { map } for pid=7263 comm="syz.2.3277" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 785.668019][ T29] audit: type=1400 audit(1733981984.999:3378): avc: denied { call } for pid=7263 comm="syz.2.3277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 786.693441][ T5890] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 786.872649][ T5890] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.899571][ T5890] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.930296][ T5890] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.950514][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.978117][ T7272] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 786.999025][ T5890] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.620213][ T29] audit: type=1326 audit(1733981986.959:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7286 comm="syz.2.3283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f512117ff19 code=0x0 [ 788.191033][ T116] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 788.204523][ T5890] usb 2-1: USB disconnect, device number 59 [ 788.476915][ T7291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 788.523768][ T116] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 788.545039][ T116] usb 4-1: config 0 interface 0 has no altsetting 0 [ 788.566633][ T116] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.579036][ T29] audit: type=1400 audit(1733981987.929:3380): avc: denied { create } for pid=7280 comm="syz.4.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.598648][ T116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.609151][ T116] usb 4-1: Product: syz [ 788.668054][ T29] audit: type=1400 audit(1733981988.019:3381): avc: denied { setopt } for pid=7280 comm="syz.4.3281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 788.744891][ T116] usb 4-1: Manufacturer: syz [ 788.761029][ T116] usb 4-1: SerialNumber: syz [ 788.769173][ T116] usb 4-1: config 0 descriptor?? [ 788.779901][ T116] usb 4-1: selecting invalid altsetting 0 [ 789.868282][ T7315] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3290'. [ 790.289864][ T7324] fuse: Bad value for 'fd' [ 790.319249][ T29] audit: type=1400 audit(1733981989.669:3382): avc: denied { bind } for pid=7323 comm="syz.2.3291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 790.408265][ T7313] loop5: detected capacity change from 0 to 7 [ 790.559383][ T7313] Dev loop5: unable to read RDB block 7 [ 790.674181][ T7313] loop5: AHDI p1 p3 [ 790.736499][ T7313] loop5: partition table partially beyond EOD, truncated [ 790.744146][ T5862] usb 4-1: USB disconnect, device number 59 [ 790.780617][ T7313] loop5: p1 start 2048 is beyond EOD, truncated [ 791.587334][ T7353] batman_adv: batadv0: Adding interface: dummy0 [ 791.593785][ T7353] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.619061][ T7353] batman_adv: batadv0: Interface activated: dummy0 [ 792.858308][ T29] audit: type=1400 audit(1733981991.549:3383): avc: denied { setopt } for pid=7356 comm="syz.2.3300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 793.226977][ T29] audit: type=1400 audit(1733981992.569:3384): avc: denied { read } for pid=7371 comm="syz.4.3304" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 793.250584][ T29] audit: type=1400 audit(1733981992.569:3385): avc: denied { open } for pid=7371 comm="syz.4.3304" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 794.181406][ T29] audit: type=1400 audit(1733981993.529:3386): avc: denied { create } for pid=7371 comm="syz.4.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 794.184089][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3304'. [ 794.327406][ T29] audit: type=1400 audit(1733981993.539:3387): avc: denied { wake_alarm } for pid=7371 comm="syz.4.3304" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.417606][ T29] audit: type=1400 audit(1733981993.579:3388): avc: denied { bind } for pid=7371 comm="syz.4.3304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 794.525530][ T29] audit: type=1400 audit(1733981993.879:3389): avc: denied { setopt } for pid=7382 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 794.556992][ T7383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.604768][ T29] audit: type=1400 audit(1733981993.879:3390): avc: denied { setopt } for pid=7382 comm="syz.4.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 794.631336][ T7384] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 794.731035][ T5890] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 794.892135][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 794.929662][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.946885][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.016062][ T4095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 795.025812][ T4095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 795.041188][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 795.051208][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.079696][ T5890] usb 2-1: config 0 descriptor?? [ 795.087709][ T4095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 795.166894][ T4095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 795.174352][ T4095] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 795.181799][ T4095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 795.232815][ T7394] fuse: Bad value for 'fd' [ 795.318929][ T7395] ptrace attach of "./syz-executor exec"[5824] was attempted by " \x0c !OR\x1b#\x098S2K\x078K\x093Mr$\x0d[g~RxpR<\x1b\x1b]P\x0d0\x09\x096;x\x0da\x09/X\x07\x22r'gi¨t*\x0c1\x0d;`3Jbo0e[\x0aᓗ75m[\x1bc 0]?Fc^ձݩ-t;#Pui\x09 3Xu'\x1b(c)iBx}n$D[13OÛ:.Ͱo\x0d8D IAcp\x5cUC*T#nvbIkݻBk/\x0aV\x1b1bBk~}$Qd[\x0cav pޘv\x0dGo*K_obؠq9&ƵK\x07^4\x09pw~3Iu4/x*xiXde&C`W\x22R$IFlc+5p$?8ea\x0c !SR  y\x09PpA`B\x0cVdy!Mۈ2Э{\x0dl( _`Πw |Ԫ /(8J [ 795.523136][ T5890] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 795.751138][ T29] audit: type=1400 audit(1733981995.079:3391): avc: denied { mount } for pid=7379 comm="syz.1.3305" name="/" dev="rpc_pipefs" ino=47723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 795.779497][ T5890] logitech 0003:046D:C50C.0008: unknown main item tag 0x0 [ 900.820876][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 900.827843][ C0] rcu: 1-...!: (0 ticks this GP) idle=6664/1/0x4000000000000000 softirq=63657/63657 fqs=0 [ 900.838986][ C0] rcu: (detected by 0, t=10502 jiffies, g=62565, q=366 ncpus=2) [ 900.846718][ C0] Sending NMI from CPU 0 to CPUs 1: [ 900.846743][ C1] NMI backtrace for cpu 1 [ 900.846752][ C1] CPU: 1 UID: 0 PID: 7399 Comm: syz.4.3312 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 900.846769][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 900.846777][ C1] RIP: 0010:__lock_acquire+0xb8a/0x3c40 [ 900.846797][ C1] Code: 89 c7 89 44 24 60 01 d8 c1 c7 04 89 44 24 58 89 7c 24 68 48 b8 00 00 00 00 00 fc ff df 48 8b 54 24 38 48 c1 ea 03 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e 33 27 00 00 41 0f b7 47 20 66 25 ff 1f 66 [ 900.846809][ C1] RSP: 0018:ffffc90000a18b38 EFLAGS: 00000806 [ 900.846821][ C1] RAX: 0000000000000000 RBX: ffffffffffffffff RCX: ffffffff81767752 [ 900.846830][ C1] RDX: 1ffff11005f37160 RSI: 0000000000000008 RDI: 00000000ffffffff [ 900.846839][ C1] RBP: 000000000000004e R08: 0000000000000000 R09: fffffbfff2dc99d2 [ 900.846847][ C1] R10: ffffffff96e4ce97 R11: 0000000000000001 R12: 0000000000000002 [ 900.846855][ C1] R13: ffff88802f9b8000 R14: 0000000000000003 R15: ffff88802f9b8ae0 [ 900.846864][ C1] FS: 0000555589726500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 900.846878][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 900.846888][ C1] CR2: 0000555589739588 CR3: 00000000678f4000 CR4: 00000000003526f0 [ 900.846897][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 900.846905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 900.846914][ C1] Call Trace: [ 900.846922][ C1] [ 900.846928][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 900.846951][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 900.846964][ C1] ? nmi_handle+0x1ac/0x5d0 [ 900.846979][ C1] ? __lock_acquire+0xb8a/0x3c40 [ 900.846993][ C1] ? default_do_nmi+0x6a/0x160 [ 900.847011][ C1] ? exc_nmi+0x170/0x1e0 [ 900.847028][ C1] ? end_repeat_nmi+0xf/0x53 [ 900.847047][ C1] ? __lock_acquire+0xf32/0x3c40 [ 900.847060][ C1] ? __lock_acquire+0xb8a/0x3c40 [ 900.847073][ C1] ? __lock_acquire+0xb8a/0x3c40 [ 900.847087][ C1] ? __lock_acquire+0xb8a/0x3c40 [ 900.847101][ C1] [ 900.847105][ C1] [ 900.847113][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 900.847128][ C1] ? lock_acquire.part.0+0x11b/0x380 [ 900.847144][ C1] lock_acquire.part.0+0x11b/0x380 [ 900.847158][ C1] ? advance_sched+0xd8/0xc60 [ 900.847172][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 900.847186][ C1] ? rcu_is_watching+0x12/0xc0 [ 900.847204][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 900.847223][ C1] ? advance_sched+0xd8/0xc60 [ 900.847234][ C1] ? lock_acquire+0x2f/0xb0 [ 900.847247][ C1] ? advance_sched+0xd8/0xc60 [ 900.847259][ C1] ? __pfx_advance_sched+0x10/0x10 [ 900.847271][ C1] _raw_spin_lock+0x2e/0x40 [ 900.847283][ C1] ? advance_sched+0xd8/0xc60 [ 900.847294][ C1] advance_sched+0xd8/0xc60 [ 900.847307][ C1] ? timerqueue_del+0x83/0x150 [ 900.847324][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 900.847341][ C1] ? __pfx_advance_sched+0x10/0x10 [ 900.847352][ C1] __hrtimer_run_queues+0x20a/0xae0 [ 900.847372][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 900.847388][ C1] ? read_tsc+0x9/0x20 [ 900.847407][ C1] hrtimer_interrupt+0x392/0x8e0 [ 900.847428][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 900.847444][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 900.847458][ C1] [ 900.847463][ C1] [ 900.847467][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 900.847484][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x20 [ 900.847502][ C1] Code: 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 48 89 f2 48 89 fe bf 07 00 00 00 e9 f8 fd [ 900.847519][ C1] RSP: 0018:ffffc900034b7648 EFLAGS: 00000246 [ 900.847530][ C1] RAX: 1ffff110477c6057 RBX: adacafaea9a8abaa RCX: ffffffff81fd1563 [ 900.847540][ C1] RDX: ffff88802f9b8000 RSI: 00000000000002c0 RDI: 0000000000000fff [ 900.847548][ C1] RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000fff [ 900.847556][ C1] R10: 00000000000002b8 R11: ffffffff8b28831d R12: ffff88823be2fff8 [ 900.847565][ C1] R13: ffff88823be30000 R14: ffff88823be302b8 R15: 00000000000002c0 [ 900.847576][ C1] ? do_syscall_64+0xcd/0x250 [ 900.847591][ C1] ? __kfence_alloc+0x1033/0x15f0 [ 900.847609][ C1] __kfence_alloc+0x1033/0x15f0 [ 900.847626][ C1] ? __pfx___kfence_alloc+0x10/0x10 [ 900.847640][ C1] ? __kfence_alloc+0x1b4/0x15f0 [ 900.847654][ C1] ? __kmalloc_noprof+0x29f/0x510 [ 900.847669][ C1] ? lsm_blob_alloc+0x68/0x90 [ 900.847687][ C1] ? security_task_alloc+0x2d/0x260 [ 900.847704][ C1] ? copy_process+0x24cc/0x8df0 [ 900.847720][ C1] ? kernel_clone+0xfd/0x960 [ 900.847736][ C1] ? __do_sys_clone3+0x1f9/0x270 [ 900.847751][ C1] ? do_syscall_64+0xcd/0x250 [ 900.847765][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.847793][ C1] ? lsm_blob_alloc+0x68/0x90 [ 900.847811][ C1] ? __pfx___might_resched+0x10/0x10 [ 900.847827][ C1] ? fs_reclaim_acquire+0xae/0x150 [ 900.847847][ C1] ? lsm_blob_alloc+0x68/0x90 [ 900.847864][ C1] __kmalloc_noprof+0x29f/0x510 [ 900.847878][ C1] ? __pfx_perf_event_init_task+0x10/0x10 [ 900.847896][ C1] ? audit_alloc+0xa0/0x7b0 [ 900.847913][ C1] ? __pfx_audit_alloc+0x10/0x10 [ 900.847930][ C1] lsm_blob_alloc+0x68/0x90 [ 900.847948][ C1] security_task_alloc+0x2d/0x260 [ 900.847964][ C1] copy_process+0x24cc/0x8df0 [ 900.847982][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 900.847995][ C1] ? find_held_lock+0x2d/0x110 [ 900.848013][ C1] ? mark_lock+0xb5/0xc60 [ 900.848028][ C1] ? __pfx_copy_process+0x10/0x10 [ 900.848044][ C1] ? __might_fault+0x13b/0x190 [ 900.848061][ C1] ? __pfx_lock_release+0x10/0x10 [ 900.848074][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 900.848093][ C1] ? lock_acquire+0x2f/0xb0 [ 900.848106][ C1] ? __might_fault+0xe3/0x190 [ 900.848122][ C1] ? __might_fault+0xe3/0x190 [ 900.848140][ C1] ? _copy_from_user+0x59/0xd0 [ 900.848160][ C1] kernel_clone+0xfd/0x960 [ 900.848176][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 900.848195][ C1] ? find_held_lock+0x2d/0x110 [ 900.848214][ C1] __do_sys_clone3+0x1f9/0x270 [ 900.848230][ C1] ? __pfx___do_sys_clone3+0x10/0x10 [ 900.848258][ C1] do_syscall_64+0xcd/0x250 [ 900.848274][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.848289][ C1] RIP: 0033:0x7f14129b4769 [ 900.848301][ C1] Code: 70 07 00 48 8d 3d dc 70 07 00 e8 22 29 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 900.848312][ C1] RSP: 002b:00007ffc4210b028 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 900.848324][ C1] RAX: ffffffffffffffda RBX: 00007f1412936b90 RCX: 00007f14129b4769 [ 900.848332][ C1] RDX: 00007f1412936b90 RSI: 0000000000000058 RDI: 00007ffc4210b070 [ 900.848341][ C1] RBP: 00007f14136c46c0 R08: 00007f14136c46c0 R09: 00007ffc4210b157 [ 900.848349][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 900.848358][ C1] R13: 000000000000000b R14: 00007ffc4210b070 R15: 00007ffc4210b158 [ 900.848370][ C1] [ 900.848739][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g62565 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 901.544233][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 901.554209][ C0] rcu: RCU grace-period kthread stack dump: [ 901.560084][ C0] task:rcu_preempt state:R running task stack:27600 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 901.571834][ C0] Call Trace: [ 901.575105][ C0] [ 901.578036][ C0] __schedule+0xe58/0x5ad0 [ 901.582452][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 901.587659][ C0] ? __pfx___schedule+0x10/0x10 [ 901.592506][ C0] ? schedule+0x298/0x350 [ 901.596831][ C0] ? __pfx_lock_release+0x10/0x10 [ 901.601854][ C0] ? lock_acquire+0x2f/0xb0 [ 901.606361][ C0] ? schedule+0x1fd/0x350 [ 901.610688][ C0] schedule+0xe7/0x350 [ 901.614756][ C0] schedule_timeout+0x124/0x280 [ 901.619609][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 901.624983][ C0] ? __pfx_process_timeout+0x10/0x10 [ 901.630275][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 901.636075][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 901.641535][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 901.646299][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 901.651580][ C0] ? rcu_gp_init+0xc82/0x1630 [ 901.656253][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 901.661452][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 901.667256][ C0] rcu_gp_kthread+0x271/0x380 [ 901.671934][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.677131][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 901.682328][ C0] ? __kthread_parkme+0x148/0x220 [ 901.687354][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 901.692549][ C0] kthread+0x2c1/0x3a0 [ 901.696614][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 901.701808][ C0] ? __pfx_kthread+0x10/0x10 [ 901.706398][ C0] ret_from_fork+0x45/0x80 [ 901.710808][ C0] ? __pfx_kthread+0x10/0x10 [ 901.715398][ C0] ret_from_fork_asm+0x1a/0x30 [ 901.720174][ C0] [ 901.723187][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 901.729498][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 901.740161][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 901.750208][ C0] Workqueue: events_unbound toggle_allocation_gate [ 901.756709][ C0] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 901.763390][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 aa 0d 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a7 0c 00 00 8b 43 08 31 [ 901.782991][ C0] RSP: 0018:ffffc90000117998 EFLAGS: 00000293 [ 901.789053][ C0] RAX: 0000000000000000 RBX: ffff8880b8744a40 RCX: ffffffff818df5fc [ 901.797015][ C0] RDX: ffff88801d6bc880 RSI: ffffffff818df5d6 RDI: 0000000000000005 [ 901.804977][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 901.812942][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8949 [ 901.820904][ C0] R13: 0000000000000001 R14: ffff8880b8744a48 R15: ffff8880b863fe40 [ 901.828955][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 901.837888][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 901.844469][ C0] CR2: 000000110c28aa43 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 901.852433][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 901.860396][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 901.868372][ C0] Call Trace: [ 901.871667][ C0] [ 901.874516][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 901.880855][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 901.886056][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 901.891526][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 901.897161][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 901.903252][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 901.909692][ C0] ? hrtimer_run_queues+0x97/0x500 [ 901.914810][ C0] ? rcu_read_lock_sched_held+0x3e/0x70 [ 901.920354][ C0] ? update_process_times+0x178/0x2d0 [ 901.925727][ C0] ? __pfx_update_process_times+0x10/0x10 [ 901.931444][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 901.936909][ C0] ? update_wall_time+0x1c/0x40 [ 901.941755][ C0] ? tick_nohz_handler+0x376/0x530 [ 901.946868][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 901.952328][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 901.957709][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 901.963426][ C0] ? read_tsc+0x9/0x20 [ 901.967508][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 901.972634][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 901.978785][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 901.984588][ C0] [ 901.987512][ C0] [ 901.990436][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 901.996622][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 902.002708][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 902.008787][ C0] ? smp_call_function_many_cond+0x458/0x1300 [ 902.014859][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 902.020925][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 902.025955][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 902.030975][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 902.036086][ C0] text_poke_bp_batch+0x22b/0x760 [ 902.041115][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 902.046661][ C0] ? __jump_label_patch+0x1db/0x400 [ 902.051864][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 902.058112][ C0] text_poke_finish+0x30/0x40 [ 902.062787][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 902.068786][ C0] jump_label_update+0x1d7/0x400 [ 902.073727][ C0] static_key_disable_cpuslocked+0x158/0x1c0 [ 902.079711][ C0] static_key_disable+0x1a/0x20 [ 902.084572][ C0] toggle_allocation_gate+0x147/0x260 [ 902.089947][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 902.095834][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 902.101032][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 902.107096][ C0] ? lock_acquire+0x2f/0xb0 [ 902.111598][ C0] ? process_one_work+0x921/0x1ba0 [ 902.116709][ C0] process_one_work+0x9c5/0x1ba0 [ 902.121655][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 902.127810][ C0] ? __pfx_process_one_work+0x10/0x10 [ 902.133173][ C0] ? rcu_is_watching+0x12/0xc0 [ 902.137940][ C0] ? assign_work+0x1a0/0x250 [ 902.142535][ C0] worker_thread+0x6c8/0xf00 [ 902.147129][ C0] ? __pfx_worker_thread+0x10/0x10 [ 902.152236][ C0] kthread+0x2c1/0x3a0 [ 902.156303][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 902.161495][ C0] ? __pfx_kthread+0x10/0x10 [ 902.166091][ C0] ret_from_fork+0x45/0x80 [ 902.170507][ C0] ? __pfx_kthread+0x10/0x10 [ 902.175096][ C0] ret_from_fork_asm+0x1a/0x30 [ 902.179872][ C0]