last executing test programs: 9.960167488s ago: executing program 0 (id=68): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x8, 0x4, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @broadcast, {[@ssrr={0x89, 0x7, 0xe, [@local]}, @generic={0x44, 0x8, "7709e6f73243"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x36, 0xfffffff5, 0x8, @remote, @empty, 0x10, 0x7, 0xd2cb, 0xd1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000280)={@local, 0x0}, &(0x7f0000000300)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @broadcast, 0x0}, &(0x7f0000000380)=0xc) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000e80)={0x7e0, r1, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x61, 0x5, "566bb9a3c94500028a70152c71e1a482f11231197c2e80cf831f278ec3e82ac396278809fa4795ecfd3b60077713c4901baef0e1b165edc279816a2a1823bffc3d12cc92aaffdbaefa7cf95127560b9d81965e72c8b55c38af0d14b5a9"}, @ETHTOOL_A_BITSET_MASK={0xde, 0x5, "f80e19bb062bc15a8a3f551f810c8dafe775cfd6cbba60d2a961d96090e26e6d29dfe756a8101e53ff1ebdee56366def1ff5e70ab9200e3f1de8d23d5e50710a9b340c64c0a9ea0b5b0eb89f6dab1731723546aa36c48cc8156dc7ed56c133e7e1d985cbecc1f676ae74a686f5eb672b7965789382afe21ab887d261a30178fe0f74771c83d60611ed8db21963a797d4fb1f16e6d295809f9f0d40f526e672d75d9464ee6b63f3a10942e0f3703848e47218593888798947afe12b26a66aef405ba26b7beda712694e84b7b5eb1aa508573b4c0f3c2d96f8ee04"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x45d3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/-,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'pedit\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'pedit\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x555}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb2}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x224, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/[\'\xa4\'@,!,\x82\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'pedit\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'pedit\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'pedit\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xcf, 0x5, "71f9d15036cb4eca8d6fa3799d60a7b3d5546b0b400f9f9162140cf108f0ffe3592cae41c6946d99e1b4e88d24f12e27d63ffb5ab0089d4af315e4734c5e60278969ebdff5b7ab325729704b36959235e6ee1f5b7e3dbb92244aea6f6f444f7fcff4150dc7c1f551d97cc3ed14be4a86111b7b1267af7f32e9a76e52f66ac7a90dadc46b05c0c714a51183fc62fa680125dd9a1aa52bf1f245dc8b677a0b92b7c8ec598d2ef6375f2d51cfe4e83ab6244073081170d5155a1139a7eb8c4beaf55832228383244729c91aab"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xaa, 0x5, "b8e7c0cff93864112614ad9da9e0ee273418b9fd33fb6beb3de3680fc9ee0fa7945ef6cd1699adae712ea9e404c31e43d1493a4382a6fd61af62fc0e2109f516224dfde8e89c530873f471665b727d3b8bfdce5a922a8d0da09743d0d9517afd237bb60441a73ae13a74befc627db1bc50ed3086a64b85badc0bffbd768d2358a04454bb164c350206951412cad183e37c07ec9dd9944e21c92e37bc68ecdff329e9c113e642"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\&t\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&-.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '{<\'#;&\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x703d}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}}/\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd33e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x825}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff800}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x26, 0x5, "96ad0a95d4dc35a11b8135520c53325b7f3267a1fb3cd53a2ca7bddd0898abb005c5"}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'{,)!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "8bddbfe035990da628ecb38afd6bae875b1ffe1d17715468050bfda699e3dc37e94cae8ccf081df00c497fe34b6662b409e27e7624f8e01c2383980ceadf677dd17a30f39c32704c92e9f0124432cee8bfa35c8f4d49a7c6e76cd6632003ceb38f8c6dc96c2dd3ba77af126f02d1fa2e4ec576a290dedf88e9a4b34f67876bad269bf5d390d609762832c1f390008fc61157d468438d"}, @ETHTOOL_A_BITSET_VALUE={0x2f, 0x4, "eb24227f9efd0b75da68e3c1869c7e9332d482d65511eb36e442e7f474f1abee70409dce20c874798f76d4"}, @ETHTOOL_A_BITSET_VALUE={0xfc, 0x4, "54a05b923295c308a83668f2c778165d430f63daf35b55a4207dd389d7cda974976f03ef8b5995fa8cab8dcf64b2a5a5e9373dda613893aa67a213fd67a17fab91974433a9fb00d9e2a65d3bf3a29123147e35a35de9b3fb279c9d1c37532bd66f95989397e3c242022d616228cd0d6377626782ded7ae5c8987e63b352fd4bf80adceae8f5829bdee9f46b3e8e3542cb77b231558d750dcc9b1d92f3fe3f012202fb2743c694cfd9b2636f7cee46241346348a569eecb5c84a660169821359be8319b1a37d4dac7f451b494464e95dbbb6b4dad231dcbeb68de1bc95ba5ef03f1c51c934556bcf9bf37ddb60c132c92e173e7a24a5bc500"}]}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0xfffffffd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x3}, [{}, {0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xb}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000}, {}, {0x80000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x7f}, {}, {}, {0x0, 0x0, 0x78b, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x10000000}, {0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x8}, {}, {}, {}, {0x6}, {0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1bc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0x8001}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x5}, {}, {0x2}, {0x1}, {}, {0x4}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xe6c}}, 0x0) 9.865659128s ago: executing program 0 (id=69): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x0, 0x25dfdbfe, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20060800}, 0x4004882) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r3 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getgroups(0x0, 0x0) setresgid(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000480)=[{0x20, 0xfc, 0xff, 0xfffff00c}, {0xb1, 0xf0, 0xee, 0x7ffff020}, {0x6, 0xfc, 0x2, 0x4}]}, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r8, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r9, 0x1, 0x1f, &(0x7f0000000100)=""/172, &(0x7f00000001c0)=0xac) read$FUSE(0xffffffffffffffff, &(0x7f0000000f40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x2f, r10, {0x7, 0x29, 0x2, 0x8, 0x0, 0x1, 0x80000001, 0x1000, 0x0, 0x0, 0x1, 0x401}}, 0x50) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000100)={&(0x7f00000004c0)=[0xfffffff9, 0x3f87, 0x7, 0x2, 0xff, 0x6, 0x1, 0x40, 0x3, 0xfff, 0x3, 0xff, 0x40, 0xffff0001, 0x7fff, 0x1000, 0x8000000, 0x9, 0x3, 0x2, 0x4, 0x80000000, 0x8, 0x9, 0x7f, 0x3, 0xd, 0x8, 0x3, 0x3, 0x7, 0xb, 0x6, 0x7, 0xa, 0x6, 0x0, 0x6, 0x9, 0x5, 0x200, 0x3, 0x0, 0x257, 0x40, 0x0, 0x2, 0xc0, 0xffffffff, 0x7b, 0x80, 0xfffff800, 0x7, 0x1, 0x2, 0x3, 0x400, 0x446, 0x3, 0x1, 0x1a, 0x5, 0x9, 0x6, 0x0, 0x6, 0x9, 0x74, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x16, 0x4, 0x0, 0x6, 0x2, 0xff, 0x3503, 0x0, 0x1ff, 0xe, 0xa925fca, 0xfffeffff, 0xc4e, 0x8000, 0x7611, 0x3ff, 0x8b0b, 0x7, 0x401, 0x2, 0x0, 0x5, 0x3eab6ba1, 0xa203, 0x10000, 0xfffff8f0, 0x80, 0x7fff, 0x3, 0x1, 0x8, 0x8, 0xfffff9a3, 0x1, 0x5, 0x8000, 0x3, 0x7, 0x0, 0x64, 0x7, 0x278, 0x4, 0xf8ca, 0x0, 0x312, 0x81, 0x9, 0x4, 0x3ff, 0x47e3, 0x5, 0x4, 0x6, 0xea980d71, 0x9, 0x0, 0x7, 0x6ef, 0xfffffbff, 0x8, 0x1c, 0x1ff, 0x8, 0x800, 0x1, 0x9, 0x0, 0x5, 0xc, 0x6, 0xffff, 0xff, 0x5, 0x80000001, 0x8, 0x901, 0x2, 0x7, 0x7, 0x6, 0x6, 0xb, 0xfffffffe, 0x1bd, 0x9, 0x9, 0x7, 0x5, 0x7, 0x2ad, 0x0, 0xfff, 0x9, 0xbc, 0x4b, 0x5, 0x5, 0x6, 0x83, 0x8, 0x7, 0x0, 0xefcb, 0x40, 0x80000000, 0xff, 0x4, 0x5, 0x6, 0x6, 0xc, 0x4, 0xffffff02, 0x10000, 0x80000000, 0x7862, 0x80000001, 0x100, 0x5, 0x7fff, 0x21, 0x0, 0x800, 0x70c, 0xc, 0x6, 0x7fffffff, 0x7fffffff, 0x7, 0x7, 0x40, 0x3, 0x7, 0x40, 0x9, 0x80, 0x5, 0xffffffd8, 0x7, 0x6, 0x0, 0x8, 0x8, 0xdc8, 0x7, 0x1, 0xc, 0x7ff, 0x6, 0x1, 0x0, 0x9, 0x1, 0xffff7d92, 0x2, 0xb, 0x5, 0x101, 0x9, 0x4, 0x5, 0x8, 0x9, 0x1, 0x8, 0x2, 0x1, 0x1, 0x400, 0x1e3, 0x5, 0x7, 0xd0, 0x6, 0xfffffffc, 0xad, 0x3, 0x67, 0xffffff00, 0x2, 0x2, 0x0, 0x4, 0x3, 0x7, 0x7ff, 0xc, 0xf, 0xd, 0x8b, 0x9, 0xffff8001, 0x8000, 0x8, 0x0, 0x19e06000, 0x6, 0x3, 0x7, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x6800000, 0x4, 0xf0, 0x7, 0x4, 0x200, 0x80000001, 0x2, 0x9, 0x2800, 0x2, 0x8001, 0x8b9, 0x2736, 0x42a, 0x2, 0x44c2, 0x5, 0x80, 0x80000000, 0x4, 0x4, 0x4, 0x506f, 0x4, 0x8, 0x0, 0x2, 0xfffffff7, 0x422, 0xfffffffa, 0x9a58, 0x9, 0x7ff, 0x40, 0xb, 0x9, 0x650, 0x1f8, 0x9, 0x7b6, 0x4, 0x3ff, 0x39ef, 0x4, 0x2, 0x4, 0x5, 0x7, 0xfffffffa, 0x478a, 0x4, 0x8, 0x5, 0x10, 0x5e06, 0xfffffe01, 0x5, 0x2, 0xf59e, 0x7f, 0x7, 0x9, 0x9, 0x1, 0x5, 0x5, 0xffff7fff, 0x1ff, 0xff, 0xfff, 0x2, 0x69, 0xffffff8c, 0x0, 0xfffffff7, 0x1, 0x5, 0x80000000, 0xffffffff, 0xfffffffd, 0x0, 0x8, 0x7fffffff, 0xd, 0x6, 0xfffffff7, 0x9, 0x8000, 0x793, 0x94f, 0x5, 0x2, 0x9, 0x5, 0x87fb, 0x101, 0x0, 0x7, 0x1, 0x4, 0x1, 0x4, 0x9, 0x1e77, 0x20d, 0x3, 0x5, 0x6, 0x0, 0x3, 0x6, 0x81, 0x10000, 0x9, 0x3a, 0x5, 0x6, 0x0, 0xbd, 0x400, 0x7, 0xf5eaed3, 0x5, 0x4, 0x730, 0x9, 0x0, 0x8, 0x4, 0x80000000, 0x9, 0x5, 0xe, 0x1, 0xffffffff, 0x6, 0x8159, 0x8, 0x7, 0x5, 0xae9, 0x5, 0x4, 0x5, 0x339, 0x2, 0x1, 0x9, 0x1ff, 0xfffffe00, 0x18ce, 0x0, 0x8, 0xc, 0xd9, 0x2a2, 0x7, 0x35fe, 0x0, 0xff, 0x1, 0x40, 0x5, 0x3, 0x6, 0x9, 0x9, 0x4, 0x400, 0x7, 0x1400000, 0x2e6, 0xbf61, 0x4, 0xc0, 0x7, 0x8001, 0x282, 0x4, 0x80, 0x3ff, 0x0, 0x9, 0x4, 0x6, 0xfff, 0x10, 0x57f8, 0x3, 0x1, 0x989, 0x4, 0x8000, 0x3c5, 0x10, 0x8, 0xfff, 0x7, 0x9, 0x6829, 0x0, 0x3f62, 0xb2e, 0xc5, 0x5, 0x4, 0x5, 0x85, 0x0, 0x1, 0x9, 0x8001, 0x6, 0x4, 0x80000000, 0x6, 0xffffffff, 0x5, 0x401, 0x9, 0x80000001, 0x1, 0x200, 0x8, 0x9, 0x1, 0x4, 0x10000, 0x201, 0xb, 0x0, 0x4, 0x9, 0x0, 0x2, 0xff, 0x6, 0x100, 0x7, 0x4, 0x3, 0x235, 0x4c, 0x1df, 0x2, 0x4, 0x2, 0x0, 0x2, 0xbc9, 0x9, 0x78d, 0x4, 0xe, 0x0, 0xfffffffd, 0x507968b7, 0x1, 0x6, 0x5, 0x2, 0x3, 0x3, 0x9, 0x1, 0x64efe3c0, 0xb, 0x7, 0x5, 0x4, 0x8, 0x6, 0x8, 0x6, 0x7f, 0x6, 0x3, 0x54c, 0xffffffff, 0x0, 0x8d7, 0x0, 0x8, 0x0, 0x1, 0x4, 0x8, 0x0, 0x3, 0x7, 0x68030340, 0x7, 0x3, 0x3, 0x81c5, 0x0, 0x1, 0x5908, 0x5, 0x2, 0x1, 0x2, 0xf, 0x5a8, 0x3, 0x0, 0xfffffffa, 0x1ff, 0x101, 0x2, 0x4, 0x8, 0x81, 0x4, 0x0, 0x5, 0x4b3, 0x4, 0x701e99ca, 0xc, 0x3, 0x97b, 0x2, 0x4, 0x10000, 0x4, 0x7fffffff, 0xfffffbff, 0x80000001, 0x481b5b8d, 0x7, 0x4, 0x0, 0x0, 0xb9a, 0x1fe00000, 0xffff, 0xb0, 0x5, 0x4, 0x7, 0x1, 0xfffff473, 0x2bb4ec32, 0x6, 0x1000, 0x7ff, 0xffff, 0x8000, 0x4, 0x2, 0x80000001, 0xa, 0x8, 0x4, 0x3, 0xfffffff8, 0x8, 0x10000, 0xf2, 0x9d, 0x42, 0x7, 0x80000001, 0x0, 0x3, 0x4, 0x79, 0x3, 0x9305, 0x4, 0xc2, 0x2, 0x0, 0x7, 0x1, 0x5, 0x0, 0x9, 0x0, 0x3, 0x8, 0x5, 0xfb, 0xffff, 0x3, 0x80000000, 0x8001, 0x585, 0x10000, 0x0, 0x9, 0x80000000, 0x101, 0x3, 0x1, 0x7, 0xc, 0xfff, 0x0, 0xb8d, 0x8001, 0x3a7a2611, 0x523f, 0x403, 0x80000000, 0x3, 0xfff, 0x6, 0x5, 0x10000, 0x7, 0xfffffff9, 0xe, 0x0, 0x4, 0xdac, 0x80000000, 0x21bc, 0x1, 0xfffffff9, 0x5b, 0x9, 0xffffffff, 0x1ff, 0xf5, 0x6, 0x3, 0xf3, 0x405, 0x100, 0x4, 0x6, 0x7fff, 0xb6b, 0x3, 0xe, 0x10000, 0x100, 0x401, 0x7, 0x5, 0x5, 0x4, 0x8, 0xfffffffc, 0x2, 0x101, 0x7, 0x1, 0x8, 0xd, 0xa90, 0x1ff, 0x401, 0x20ccdc7f, 0x1, 0x8, 0x10000, 0xfffffffc, 0x101, 0x2, 0x3d44, 0x774, 0x6, 0x5, 0x51c5, 0x6, 0xa, 0x1, 0x40, 0x8, 0xb, 0x5, 0x1, 0x502, 0x5, 0x80000000, 0x1, 0x9, 0xb9, 0x2, 0x9, 0x5, 0x0, 0xffffffff, 0x0, 0xffff, 0xf, 0xfff, 0xf7e, 0x30, 0x80000000, 0xde, 0x4, 0x80000001, 0x8, 0xfffff28f, 0x35, 0x7, 0x90, 0x1, 0xca62, 0x9, 0x5, 0x3, 0x9, 0x1, 0x1, 0x2, 0x9, 0xffffffff, 0x0, 0x8, 0x3, 0xa40, 0x3, 0x3, 0x6, 0x9, 0x7b1, 0x9, 0x200, 0x8, 0x1ff, 0x7, 0x0, 0x4, 0x4, 0x2, 0xb36, 0x94, 0x4, 0x8, 0x1000, 0x6c15, 0x9, 0xaf, 0x4, 0x4, 0xffffffff, 0x10, 0xffff, 0xb433, 0x4, 0xa42, 0x7, 0x0, 0x4, 0x3ff, 0x1, 0x2, 0x9c1, 0x7ff, 0x5aa, 0xffffff42, 0x9, 0xfffffffc, 0x7fffffff, 0x112c, 0xfffffffa, 0x0, 0x2, 0x1, 0x0, 0x6, 0x800, 0x596, 0x5, 0x4, 0xff, 0x0, 0x9, 0xfffffe01, 0x0, 0x3, 0xdb, 0x3fe, 0xbd4, 0x8, 0x0, 0x8, 0x0, 0xfffff272, 0x2, 0x2, 0x0, 0x101, 0x1ff, 0x6, 0x8ec, 0xb2d, 0x1, 0x5, 0x40, 0xd, 0x8, 0x0, 0x8, 0x4, 0x8ed4, 0x2, 0x81, 0x5, 0xa, 0x583, 0x8, 0xffc000, 0x0, 0xffffffff, 0x1, 0xffffffff, 0x9, 0x2, 0x0, 0xfffffb93, 0x7, 0x7, 0xfffffff9, 0x0, 0x40, 0x17, 0xa9, 0x4, 0x3, 0x7, 0xf, 0xc3, 0x6, 0x8c1, 0x3, 0x80000000, 0xd3, 0x95, 0xb, 0xa, 0x7, 0xffff8000, 0x4bba, 0xfffffffe, 0xd, 0x6d59, 0xfffffffa, 0xfffffffe, 0x4, 0x9, 0x4, 0x7, 0xfffffffa, 0x7, 0x7fff, 0x10000000, 0x0, 0xfffffff8, 0xc, 0x3, 0x6, 0x9, 0x0, 0x2, 0x4de, 0x5, 0x0, 0x7, 0x3, 0x71e, 0x1, 0xfffffffb, 0x4, 0x1, 0x8, 0xe, 0x8000, 0x4, 0x5, 0x8001, 0x5, 0xff, 0xfffffffc, 0x6, 0x5, 0xfff, 0x6, 0x101, 0x7, 0xfffffffb, 0x5, 0xfffffffa, 0x8, 0x637f76e4, 0x7, 0x6, 0x7, 0x9664, 0x3, 0x3, 0xc000000, 0x0, 0x8, 0x0, 0x2e, 0x613, 0x3, 0x5, 0x5, 0xfffffffb, 0x5, 0x3, 0x3, 0x5, 0x1, 0x21, 0xa, 0x9, 0x50a, 0x7, 0x2, 0x6, 0x7, 0x1, 0x7, 0xd, 0x5, 0x200, 0x79c, 0xfc16, 0x9, 0x0, 0x65f, 0x4, 0xfffff25c, 0x1000, 0x8, 0x10000, 0x2, 0x4, 0x5045, 0xa70, 0x2, 0x800, 0x401, 0xc, 0x8891, 0x7ff, 0x80000000], 0x6, 0x400, 0x5}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x4c, 0x0, 0x0, 0x3, &(0x7f0000000000)={0x77359400}}) io_uring_enter(r0, 0x3516, 0x3fffe, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 9.747693874s ago: executing program 3 (id=72): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000a00)=""/102384, 0x18ff0) syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) lseek(0xffffffffffffffff, 0x7fff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4005deb7b6a2586d) 8.649603698s ago: executing program 3 (id=74): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) msgget$private(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0x541b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x68060200) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) write$binfmt_elf32(r2, &(0x7f0000001680)={{0x7f, 0x45, 0x4c, 0x46, 0xb, 0xb2, 0xa, 0x4c, 0xfffffffffffffff9, 0x2, 0x6, 0xc0000000, 0xeb, 0x38, 0x283, 0x101, 0x101, 0x20, 0x0, 0x4, 0xfff, 0x1ff}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x938) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) writev(r3, &(0x7f0000001640), 0x0) 8.580595102s ago: executing program 0 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000440)={'nat\x00', 0x0, 0x4, 0x0, [0x4040, 0x83, 0x805a, 0x1bb, 0xfffffffffffff801, 0x5], 0x0, &(0x7f00000000c0), 0x0}, &(0x7f0000000100)=0x78) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=0x1, 0x4, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0}, 0x40) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') statx(r3, 0x0, 0x1000, 0x1, &(0x7f0000000100)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="060000000020000000000000", @ANYRES32, @ANYBLOB="9b0f483d4ff3433c904f0fb65e4640256e5eb189346274c92b7fa075a42073", @ANYRES64=r2], 0x20) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r7, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0xfddbdf25}, 0xc) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0x80}}, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x8e, 0x1, 0x3, 0xd59f80, 0x5, 0x2800, 0x9, 0x3, 0x2, 0x2800, 0xf20, 0x1, 0x400, 0x9, 0x0, {0x401, 0x3}, 0xce, 0x9}}) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x3) syz_open_dev$loop(&(0x7f0000000540), 0x300000000, 0x40000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000032680)=""/102400, 0x19000) r11 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_pages(r11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.028465731s ago: executing program 0 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x40890}, 0x80) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xad3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x1, 0x1, 0x0, 0x1, 0x8, 0x0, 0x9, 0x7, 0x7, 0x52, 0x2, 0x0, 0x29e0, 0xc, 0x6, 0x1, 0x9, 0x4, '\x00', 0x7, 0x5}) 7.437251115s ago: executing program 4 (id=78): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102384, 0x18ff0) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$sequencer(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9) ioctl$SNDCTL_SEQ_SYNC(r3, 0x5101) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = memfd_create(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4) lseek(r5, 0x7fff, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) readv(r4, &(0x7f0000000240)=[{&(0x7f0000000300)=""/168, 0xa8}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4005deb7b6a2586d) 6.818714488s ago: executing program 0 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone3(&(0x7f00000000c0)={0x100, 0x0, 0x0, 0x0, {0x200001a}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-asm\x00'}, 0x58) prctl$PR_MCE_KILL_GET(0x22) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) accept4$netrom(r3, &(0x7f0000000200)={{0x3, @default}, [@remote, @netrom, @netrom, @rose, @null, @bcast, @remote, @rose]}, &(0x7f0000000340)=0x48, 0x800) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r8, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r8, r4) fdatasync(r8) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) 6.272398049s ago: executing program 4 (id=80): socket$inet(0x2, 0x1, 0x400) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000100)=0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x10c008000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) 6.259573588s ago: executing program 3 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000003000000ffff030000004c00018038000400200001000ae74e20fffffffffc000000000000000000000000000000ff0700001400020002000000e000000200000000000000000d0001007564703a73797a3200000000d9a0fb19b0873ff934cae62e5783e59cce9972e7bb654150f1cada146e37295734a2198127"], 0x60}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYRESHEX=r3], 0x44}}, 0x40) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000100)="26c2", 0xfffff, 0xffffffffffffffff) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}, 0x1, 0x100000000000000}, 0x0) 5.492394236s ago: executing program 3 (id=83): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = syz_io_uring_setup(0x5a36, &(0x7f0000000140)={0x0, 0xfad2}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0xf0f045, 0x800}) poll(&(0x7f0000000140)=[{r0, 0x19f23}], 0x1, 0x3000000) 4.569430405s ago: executing program 4 (id=86): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) set_mempolicy(0x3, 0x0, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x28200, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000240)={0x4, "4726898acc3ccd515dce0ed11f0cd0024ff3345d45a80efc09d3c90bb524e8d4", 0x1, 0x9d5, 0x2, 0x3200e0, 0x101, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x11, 0x800000003, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) sendto$netrom(r1, 0x0, 0x2, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) 4.555137132s ago: executing program 3 (id=87): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r8}, 0x10) (async) r9 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r9, &(0x7f0000000380)=[{&(0x7f0000000200)="e6", 0x1}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x0, &(0x7f0000006680)) mknodat$loop(r7, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) 3.838643341s ago: executing program 2 (id=89): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x40890}, 0x80) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xad3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x1, 0x1, 0x0, 0x1, 0x8, 0x0, 0x9, 0x7, 0x7, 0x52, 0x2, 0x0, 0x29e0, 0xc, 0x6, 0x1, 0x9, 0x4, '\x00', 0x7, 0x5}) 3.81302083s ago: executing program 1 (id=90): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) lsm_set_self_attr(0x66, 0x0, 0x1020, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x18000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) r6 = getpgrp(0xffffffffffffffff) setpriority(0x1, r6, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad548d62a3b45bb98872fb1900"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000140)=0x1ffffe, 0x4, 0x2) 3.630747778s ago: executing program 0 (id=91): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) (fail_nth: 3) 3.528493509s ago: executing program 2 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x5, 0x8, 0x4, 0x35303553, [0x9, 0x4], [0x1, 0xce5], 0x108}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f00000000c0)={0x0, "9048d8d5d59be87d48b421df09030b734bbd3767161ed499223689aa39646fd5"}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = io_uring_setup(0xaab, &(0x7f00000002c0)={0x0, 0x40000001, 0x400, 0x0, 0xfffffffe}) r5 = openat$proc_mixer(0xffffff9c, &(0x7f0000000340)='/proc/asound/card2/oss_mixer\x00', 0x6001, 0x0) write$proc_mixer(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000100)=0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.480435859s ago: executing program 1 (id=93): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() tkill(r2, 0xb) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=r2) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@getae={0x11c, 0x1f, 0x8, 0x70bd29, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4d6, 0x2, 0xff}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x3504}, [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x1c}, 0xa, 0xfe, 0x2}}, @lifetime_val={0x24, 0x9, {0xffffffffffff0a4b, 0xaf4, 0x2, 0x3}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in6=@mcast1, 0x0, 0xa}}, @replay_thresh={0x8, 0xb, 0x3}, @replay_thresh={0x8, 0xb, 0x9}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2b, 0x70bd26, 0x70bd27, 0x70bd2a, 0x7, [0x4, 0x7, 0x6, 0x3]}}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd2c, 0x70bd2c, 0x70bd28, 0x70bd2a, 0x6, [0x7, 0x5, 0x4]}}]}, 0x11c}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, 0x0, 0x0) getpeername$packet(r0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, &(0x7f0000000040)) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x2c, 0x100000000, 0x8, 0x1}) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newsa={0x194, 0x10, 0x1, 0x0, 0x200000, {{@in=@rand_addr=0x64010102, @in=@multicast1, 0x4005, 0x6, 0x5, 0x3, 0x0, 0x0, 0x80, 0x2f, 0x0, 0xee01}, {@in=@private=0xa010100, 0x20, 0x33}, @in6=@empty, {0x0, 0x7, 0x0, 0x200, 0x0, 0x1000000000, 0xffff, 0xfffffffffffffffc}, {0x3, 0xfffffffffffffffe, 0x0, 0x6}, {0x5, 0x9, 0xa88}, 0x70bd2a, 0x3503, 0xa, 0x1}, [@algo_auth={0xa1, 0x1, {{'hmac(sha1-ce)\x00'}, 0x2c8, "fab923a14b23735e3f910fd1357286c8b14ec3c3b137e33200edc45625d311f42c5b3caf7d939976cf4b8139cc53ccaa13b3e3228c8b63198c074cb30eea9037562553677bb8517a76a7f982f68e70edf5939c0c08150c7356"}}]}, 0x194}, 0x1, 0x0, 0x0, 0x84}, 0x40) 2.376516039s ago: executing program 1 (id=94): gettid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r1, 0xc8036ab6d6cbef07, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000000)) 2.352798757s ago: executing program 2 (id=95): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0x0, 0x1}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001b00390000000a0001000000000095da0000"], 0x48}, 0x1, 0x0, 0x0, 0x20044985}, 0x0) 2.319929092s ago: executing program 1 (id=96): socket$inet(0x2, 0x1, 0x400) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000100)=0xc) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x10c008000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) read$alg(r1, &(0x7f0000000240)=""/4096, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0) 2.242636895s ago: executing program 2 (id=97): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000010009040000014b34ef0009056d"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2712, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x15) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) (async, rerun: 64) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x3) (async, rerun: 32) pread64(r1, &(0x7f0000032500)=""/102400, 0x19000, 0x4001) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r3, 0xc0189436, &(0x7f0000000140)) (async) syz_usb_connect(0x2, 0x38e, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0xeb, 0x4e, 0x11, 0x40, 0x1199, 0x907b, 0x9753, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37c, 0x2, 0xe, 0x5, 0x10, 0x0, [{{0x9, 0x4, 0x95, 0x8, 0x8, 0x3f, 0xc1, 0xea, 0xa, [], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x0, 0x1, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x9, 0x0, 0x6, [@generic={0x7f, 0x7, "ca0160efeffe160b46ea974ad165b4037194f63cfccb83b54395183d50d30d80bae1dc02f15ce36ad1d2c5dd978fca80e002bffb89f9e16165d91a9b6353432bf60d050c52f8468137304799e83f85e90c0d440a942813d265ba4f9184520e9aab225362c81522773ee3e05ad9cbb2e38b78f1361c4ee1b85325b0c8f5"}, @generic={0xf, 0x30, "d21f6d64918775fd95ed599f46"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xe, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xc83}]}}, {{0x9, 0x5, 0x8e, 0x0, 0x20, 0xe5, 0x9, 0x5, [@generic={0xaa, 0x23, "d35a2169433aa1f17b526c84e953cb02e12c9957ff85e8c049dcf139396a1156ae6ed94b341fdd8ac86063e002d0e26bf1d82581f9084a8aa354a2a516c106d32a778c6c0878a3340770acd26c745b8d903fba4c5199f23b4f4d4087e4de33e0b85fbad0ae65f90e88d708ad53bd9d40bc83ebcce556bad3e3d1420d5345efd4952e6d1f889a568d68de682abea39d2d52dc78bd1fd1d80c8340f8013b456339112a9183a22f5c90"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0xfd, 0x7, 0x6, [@generic={0xb3, 0xf, "edd468979e37fa2cba97c99d58c9a853ede7105151fa3bc025cb95b72cc66d136f0074132d6883287877074f91af48de231540b32ee06ddbc75589d47e4d71581aed4e6dd121a1fe0952ced16c148a221e6fca2ef1b0f9dd16c52c0f675c19500d3a2231361dcd4de8b28f34299e509d7afa4dc20c542a70467e6d716c3adbe5a436ee2d753593b3396a89464c2477231bcf9d6dd54b7d8f55c5923c303c0db40243f979d470dc83e27013447d365f5ce4"}, @generic={0x40, 0x9, "559db81c986a729bc2ee5604eb5e8e0fcf8461b4f1f1bc229421cba9a97f4a22faf44f1871f4c2c5e10d48896ecd393d64e85c7fee15a06dbb831fa7a3fb"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0xa, 0x5}}, {{0x9, 0x5, 0xf, 0x4, 0x8, 0x3, 0x8, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x5, 0x60, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x81}]}}]}}, {{0x9, 0x4, 0xdc, 0x8, 0x4, 0x69, 0x93, 0x8e, 0xe8, [], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x40, 0x13, 0x0, [@generic={0xb5, 0xa, "156a3c4990b41c7ca52a37c877e3a804226970b67816e7554a7afc7919feed3bae0bcf83deb6ce1690f0ce4697c23ce6594aa08b78569a605ee843c0ec0c17b284f4292e63ebfa18472796bb629d8f8e097d593ae839977493e68b67bf354aaabf412942cd8809ebc9e26b07c51d4dc07821606427e6a9d143d564777c0067c65484d0d84548f192cb88cc53f93402715c00588d949a8a6cf8d366a70ebe3e7b8ceb91300a01408c01f67a48050990d252e969"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x21, 0xe7, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x4, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x9}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x4, 0xfd, 0x5}}]}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x81, 0x81, 0xe, 0x8, 0x10}, 0x4b, &(0x7f0000000440)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x81, 0xc, 0x40}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x91, 0x0, 0xfff}, @ssp_cap={0x18, 0x10, 0xa, 0x2, 0x3, 0x7ffff69, 0xf000, 0x0, [0x30, 0xc030, 0x0]}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x6, 0x0, 0x2, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x2, 0x9}]}}) 1.756467619s ago: executing program 2 (id=98): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', r3, 0x720, 0x8000, 0x7f, 0x4, {{0x8, 0x4, 0x1, 0x3, 0x20, 0x64, 0x0, 0x74, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@timestamp_addr={0x44, 0xc, 0xd0, 0x1, 0x0, [{@local, 0x7}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x7, 0x3, 0x7, 0x0, r4, 0x7, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x8, @void, @value, @void, @value}, 0x50) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x7, 0xfffe, 0x7, 0x8, 0x8, 0x2, 0x8}, 0xc) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e1e}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)='\x00\f', 0x2}], 0x1}, 0x0) 1.756013169s ago: executing program 4 (id=99): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() timer_create(0x9, 0x0, &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r6, r5, 0x0, 0x80008) 820.795712ms ago: executing program 4 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)="0317", 0x2}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400"], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0)=""/243, 0xf3}, 0x1ff}], 0x1, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x280488c1}, 0x0) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2a0000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) shmctl$SHM_LOCK(0x0, 0xb) pipe2$watch_queue(0x0, 0x80) timerfd_gettime(r3, &(0x7f00000000c0)) mmap(&(0x7f0000ee8000/0x10000)=nil, 0x10000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 723.39149ms ago: executing program 2 (id=101): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f00000014c0)=ANY=[], 0x46b) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x17b4d03f52773d8c, 0x4048841) socket$unix(0x1, 0x5, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1d, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x7fffffff, 0x35315842, 0x7, 0x8, [{0x1000000, 0x40}, {0x8, 0x8}, {0xf, 0xf}, {0x0, 0xfffffff0}, {0x9, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x7, 0x10001}], 0x3, 0x7a, 0x2, 0x2, 0x4}}) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='memory.numa_stat\x00', 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x14) sendfile(r8, r7, 0x0, 0x17) 609.621593ms ago: executing program 1 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x40890}, 0x80) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xad3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') mount$nfs(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x2000, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x1, 0x1, 0x0, 0x1, 0x8, 0x0, 0x9, 0x7, 0x7, 0x52, 0x2, 0x0, 0x29e0, 0xc, 0x6, 0x1, 0x9, 0x4, '\x00', 0x7, 0x5}) 340.293873ms ago: executing program 4 (id=103): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) lsm_set_self_attr(0x66, 0x0, 0x1020, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x18000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) msgctl$IPC_RMID(0x0, 0x0) r6 = getpgrp(0xffffffffffffffff) setpriority(0x1, r6, 0x9) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad548d62a3b45bb98872fb1900"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080), 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000040)={'wg2\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000140)=0x1ffffe, 0x4, 0x2) 279.053719ms ago: executing program 3 (id=104): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() timer_create(0x9, 0x0, &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, &(0x7f0000000b40)=ANY=[]) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r6, r5, 0x0, 0x80008) 0s ago: executing program 1 (id=105): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() timer_create(0x9, 0x0, &(0x7f0000000300)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1026864, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r6, r5, 0x0, 0x80008) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 47.710311][ T29] audit: type=1400 audit(1738227467.156:88): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 47.713610][ T5802] cgroup: Unknown subsys name 'net' [ 47.733128][ T29] audit: type=1400 audit(1738227467.156:89): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.760752][ T29] audit: type=1400 audit(1738227467.186:90): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 47.940777][ T5802] cgroup: Unknown subsys name 'cpuset' [ 47.948421][ T5802] cgroup: Unknown subsys name 'rlimit' [ 48.052733][ T29] audit: type=1400 audit(1738227467.496:91): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.092380][ T29] audit: type=1400 audit(1738227467.496:92): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.113275][ T29] audit: type=1400 audit(1738227467.496:93): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.133733][ T29] audit: type=1400 audit(1738227467.496:94): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.154245][ T29] audit: type=1400 audit(1738227467.496:95): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.179228][ T29] audit: type=1400 audit(1738227467.496:96): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 48.185087][ T5805] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 48.202775][ T29] audit: type=1400 audit(1738227467.526:97): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.050194][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.994286][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.004468][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.012739][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.028765][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.038250][ T5814] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.045553][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.130627][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.152466][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.186420][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.201866][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.209927][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.210272][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.218893][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.233579][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.238715][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.242250][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.248748][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.255946][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.269085][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.269751][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.278787][ T5819] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.291341][ T5819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.291994][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.298856][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.307097][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.321335][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.321485][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.335782][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 51.343432][ T5819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.350973][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.488504][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 51.597277][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.605140][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.613111][ T5812] bridge_slave_0: entered allmulticast mode [ 51.619997][ T5812] bridge_slave_0: entered promiscuous mode [ 51.638706][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.646368][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.653746][ T5812] bridge_slave_1: entered allmulticast mode [ 51.660657][ T5812] bridge_slave_1: entered promiscuous mode [ 51.697110][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.714809][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 51.731496][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.757876][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 51.784204][ T5812] team0: Port device team_slave_0 added [ 51.800502][ T5812] team0: Port device team_slave_1 added [ 51.850601][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.857566][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.883841][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.912158][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.919168][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.945254][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.967076][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 51.988569][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.995648][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.003268][ T5817] bridge_slave_0: entered allmulticast mode [ 52.010014][ T5817] bridge_slave_0: entered promiscuous mode [ 52.040917][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.048681][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.055820][ T5817] bridge_slave_1: entered allmulticast mode [ 52.065686][ T5817] bridge_slave_1: entered promiscuous mode [ 52.081459][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.089508][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.096600][ T5815] bridge_slave_0: entered allmulticast mode [ 52.103447][ T5815] bridge_slave_0: entered promiscuous mode [ 52.123226][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 52.134886][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.142063][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.149445][ T5815] bridge_slave_1: entered allmulticast mode [ 52.155858][ T5815] bridge_slave_1: entered promiscuous mode [ 52.164646][ T5812] hsr_slave_0: entered promiscuous mode [ 52.171186][ T5812] hsr_slave_1: entered promiscuous mode [ 52.201447][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.212182][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.235102][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.246227][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.310920][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.318355][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.325487][ T5823] bridge_slave_0: entered allmulticast mode [ 52.332077][ T5823] bridge_slave_0: entered promiscuous mode [ 52.346480][ T5817] team0: Port device team_slave_0 added [ 52.361733][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.370685][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.377811][ T5823] bridge_slave_1: entered allmulticast mode [ 52.384666][ T5823] bridge_slave_1: entered promiscuous mode [ 52.399515][ T5815] team0: Port device team_slave_0 added [ 52.406240][ T5817] team0: Port device team_slave_1 added [ 52.423697][ T5815] team0: Port device team_slave_1 added [ 52.450077][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.471558][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.480627][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.487736][ T5821] bridge_slave_0: entered allmulticast mode [ 52.494467][ T5821] bridge_slave_0: entered promiscuous mode [ 52.501882][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.508998][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.516113][ T5821] bridge_slave_1: entered allmulticast mode [ 52.522949][ T5821] bridge_slave_1: entered promiscuous mode [ 52.545582][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.566876][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.573875][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.600472][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.611856][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.619124][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.645116][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.671473][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.680339][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.706350][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.717581][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.725786][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.751905][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.773147][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.784417][ T5823] team0: Port device team_slave_0 added [ 52.792211][ T5823] team0: Port device team_slave_1 added [ 52.805790][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.827881][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.834925][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.860931][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.874402][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.884708][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.912845][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.949165][ T5821] team0: Port device team_slave_0 added [ 52.969345][ T5815] hsr_slave_0: entered promiscuous mode [ 52.975315][ T5815] hsr_slave_1: entered promiscuous mode [ 52.981837][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.990469][ T5815] Cannot create hsr debugfs directory [ 53.011076][ T5821] team0: Port device team_slave_1 added [ 53.028644][ T5817] hsr_slave_0: entered promiscuous mode [ 53.034555][ T5817] hsr_slave_1: entered promiscuous mode [ 53.042572][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.050185][ T5817] Cannot create hsr debugfs directory [ 53.074678][ T5823] hsr_slave_0: entered promiscuous mode [ 53.079227][ T5827] Bluetooth: hci0: command tx timeout [ 53.081479][ T5823] hsr_slave_1: entered promiscuous mode [ 53.093787][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.101375][ T5823] Cannot create hsr debugfs directory [ 53.132118][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.147721][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.156888][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.185234][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.204672][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.216196][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.225316][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.251444][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.283762][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.302982][ T5821] hsr_slave_0: entered promiscuous mode [ 53.309173][ T5821] hsr_slave_1: entered promiscuous mode [ 53.314939][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.318464][ T5827] Bluetooth: hci1: command tx timeout [ 53.323439][ T5821] Cannot create hsr debugfs directory [ 53.338013][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.398170][ T5827] Bluetooth: hci3: command tx timeout [ 53.398450][ T54] Bluetooth: hci4: command tx timeout [ 53.403744][ T5819] Bluetooth: hci2: command tx timeout [ 53.541379][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.552764][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.571983][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.581191][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.596957][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.637970][ T5823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.649374][ T5823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.670065][ T5823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.687129][ T5823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.696992][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.740052][ T5821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.750233][ T5821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.760178][ T5821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.775108][ T5821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.787328][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.794600][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.819953][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.827053][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.844543][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.853162][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.865379][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.883336][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.939356][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.987842][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.002975][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.020745][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.027838][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.045174][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 54.045189][ T29] audit: type=1400 audit(1738227473.486:111): avc: denied { sys_module } for pid=5812 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.055412][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.093266][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.100420][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.126348][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.151725][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.174858][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.197684][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.204826][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.219148][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.240264][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.247338][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.256862][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.264063][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.295871][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.303050][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.337585][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.370110][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.446573][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.465534][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.481589][ T5812] veth0_vlan: entered promiscuous mode [ 54.515264][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.529866][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.536999][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.565328][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.572443][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.594148][ T5812] veth1_vlan: entered promiscuous mode [ 54.662609][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.710299][ T5812] veth0_macvtap: entered promiscuous mode [ 54.741503][ T5812] veth1_macvtap: entered promiscuous mode [ 54.752311][ T5817] veth0_vlan: entered promiscuous mode [ 54.775846][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.787560][ T5817] veth1_vlan: entered promiscuous mode [ 54.869031][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.883585][ T5817] veth0_macvtap: entered promiscuous mode [ 54.896431][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.914949][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.924432][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.933424][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.942600][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.957479][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.969563][ T5817] veth1_macvtap: entered promiscuous mode [ 54.986622][ T5821] veth0_vlan: entered promiscuous mode [ 55.024094][ T5821] veth1_vlan: entered promiscuous mode [ 55.062204][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.074428][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.087484][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.097842][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.109168][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.120726][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.130710][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.139957][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.148669][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.157322][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.166010][ T5819] Bluetooth: hci0: command tx timeout [ 55.186242][ T5821] veth0_macvtap: entered promiscuous mode [ 55.207853][ T5823] veth0_vlan: entered promiscuous mode [ 55.226679][ T5815] veth0_vlan: entered promiscuous mode [ 55.245644][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.248779][ T5821] veth1_macvtap: entered promiscuous mode [ 55.253852][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.276454][ T5823] veth1_vlan: entered promiscuous mode [ 55.284098][ T5815] veth1_vlan: entered promiscuous mode [ 55.332523][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.347386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.360294][ T5815] veth0_macvtap: entered promiscuous mode [ 55.368274][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.379551][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.391479][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.399793][ T5819] Bluetooth: hci1: command tx timeout [ 55.403770][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.419003][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.435265][ T5815] veth1_macvtap: entered promiscuous mode [ 55.441300][ T29] audit: type=1400 audit(1738227474.876:112): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.s3I1TS/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 55.478703][ T5819] Bluetooth: hci2: command tx timeout [ 55.479069][ T5827] Bluetooth: hci3: command tx timeout [ 55.484121][ T5819] Bluetooth: hci4: command tx timeout [ 55.507852][ T29] audit: type=1400 audit(1738227474.876:113): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.516407][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.546238][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.548645][ T29] audit: type=1400 audit(1738227474.876:114): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.s3I1TS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 55.557257][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.584157][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.597453][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.617358][ T29] audit: type=1400 audit(1738227474.916:115): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 55.639781][ T29] audit: type=1400 audit(1738227474.916:116): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.s3I1TS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 55.668871][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.671906][ T29] audit: type=1400 audit(1738227474.916:117): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/root/syzkaller.s3I1TS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.679814][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.707677][ T29] audit: type=1400 audit(1738227474.916:118): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.738284][ T29] audit: type=1400 audit(1738227474.936:119): avc: denied { mounton } for pid=5812 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.762388][ T29] audit: type=1400 audit(1738227474.936:120): avc: denied { mount } for pid=5812 comm="syz-executor" name="/" dev="gadgetfs" ino=7213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 55.786132][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.794101][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.806050][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.817975][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.828658][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.839371][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.855385][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.866478][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.877519][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.888357][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.900827][ T5815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.912844][ T5815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.933594][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.945351][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.955297][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.965884][ T5821] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.975496][ T5821] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.984472][ T5821] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.993237][ T5821] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.010652][ T5823] veth0_macvtap: entered promiscuous mode [ 56.123705][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.132775][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.141779][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.150623][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.217023][ T5896] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.736550][ T5823] veth1_macvtap: entered promiscuous mode [ 56.765667][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.776375][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.875082][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.894502][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.905314][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.916030][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.926232][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.937378][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.947323][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.957834][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.969845][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.006390][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.032887][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.043634][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.054596][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.065078][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.076244][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.090720][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.101394][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.127233][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 57.135852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.234487][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.238211][ T5819] Bluetooth: hci0: command tx timeout [ 57.257450][ T5823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.266339][ T5823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.275222][ T5823] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.332577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.400471][ T5904] ======================================================= [ 57.400471][ T5904] WARNING: The mand mount option has been deprecated and [ 57.400471][ T5904] and is ignored by this kernel. Remove the mand [ 57.400471][ T5904] option from the mount to silence this warning. [ 57.400471][ T5904] ======================================================= [ 57.537060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.795342][ T5819] Bluetooth: hci1: command tx timeout [ 57.795423][ T5827] Bluetooth: hci4: command tx timeout [ 57.802025][ T5819] Bluetooth: hci3: command tx timeout [ 57.813056][ T54] Bluetooth: hci2: command tx timeout [ 57.821664][ T5823] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858959][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.867332][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.015149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.062409][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.127222][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.149344][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.168890][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.176744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.241764][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 58.292623][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.322071][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.331246][ T5917] fuse: Unknown parameter '0x00000000000000030xffffffffffffffff' [ 58.370850][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9'. [ 58.386463][ T5920] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 58.389667][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.404628][ T5917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 58.419578][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.432606][ T5920] syz_tun: entered promiscuous mode [ 58.490192][ T5920] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 58.560915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.765720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.908223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 58.918346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.078549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.188672][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 59.188690][ T29] audit: type=1400 audit(1738227478.626:172): avc: denied { ioctl } for pid=5919 comm="syz.1.2" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.764072][ T5827] Bluetooth: hci0: command tx timeout [ 59.766685][ T29] audit: type=1400 audit(1738227478.636:173): avc: denied { write } for pid=5926 comm="syz.0.10" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.794762][ T29] audit: type=1400 audit(1738227478.636:174): avc: denied { ioctl } for pid=5926 comm="syz.0.10" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.823562][ T29] audit: type=1400 audit(1738227479.266:175): avc: denied { create } for pid=5933 comm="syz.3.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.914457][ T5827] Bluetooth: hci3: command tx timeout [ 59.915443][ T54] Bluetooth: hci1: command tx timeout [ 59.920121][ T5822] Bluetooth: hci4: command tx timeout [ 59.925302][ T54] Bluetooth: hci2: command tx timeout [ 59.947977][ T29] audit: type=1400 audit(1738227479.386:176): avc: denied { map } for pid=5933 comm="syz.3.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.095407][ T29] audit: type=1400 audit(1738227479.386:177): avc: denied { read write } for pid=5933 comm="syz.3.12" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7618 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 60.653778][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.712064][ T29] audit: type=1400 audit(1738227480.146:178): avc: denied { map_create } for pid=5938 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.802073][ T29] audit: type=1400 audit(1738227480.156:179): avc: denied { map_read map_write } for pid=5938 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.863276][ T29] audit: type=1400 audit(1738227480.156:180): avc: denied { create } for pid=5938 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.888325][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 60.900608][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.908129][ T29] audit: type=1400 audit(1738227480.156:181): avc: denied { bind } for pid=5938 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 60.978221][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 60.987181][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 61.062608][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 61.082807][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 61.097067][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.152351][ T9] usb 1-1: Product: syz [ 61.157803][ T9] usb 1-1: Manufacturer: syz [ 61.163628][ T9] usb 1-1: SerialNumber: syz [ 61.268189][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 61.453916][ T5905] usb 2-1: too many configurations: 15, using maximum allowed: 8 [ 61.489291][ T5905] usb 2-1: config index 0 descriptor too short (expected 64853, got 72) [ 61.511865][ T9] usb 1-1: 0:2 : does not exist [ 61.527098][ T5905] usb 2-1: config index 1 descriptor too short (expected 64853, got 72) [ 61.562463][ T5905] usb 2-1: config index 2 descriptor too short (expected 64853, got 72) [ 61.586550][ T5905] usb 2-1: config index 3 descriptor too short (expected 64853, got 72) [ 61.603837][ T5905] usb 2-1: config index 4 descriptor too short (expected 64853, got 72) [ 61.625783][ T5905] usb 2-1: config index 5 descriptor too short (expected 64853, got 72) [ 61.629624][ T9] usb 1-1: USB disconnect, device number 2 [ 61.658969][ T5905] usb 2-1: config index 6 descriptor too short (expected 64853, got 72) [ 61.680208][ T5905] usb 2-1: config index 7 descriptor too short (expected 64853, got 72) [ 61.691129][ T5905] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.701047][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.721211][ T5905] usb 2-1: Product: syz [ 61.729089][ T5905] usb 2-1: Manufacturer: syz [ 61.733735][ T5905] usb 2-1: SerialNumber: syz [ 61.772138][ T5905] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 61.825153][ T46] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 61.920607][ T5806] udevd[5806]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 61.936684][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.023974][ T5964] Zero length message leads to an empty skb [ 62.050200][ T5818] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.118001][ T5964] binder: BINDER_SET_CONTEXT_MGR already set [ 62.124507][ T5964] binder: 5962:5964 ioctl 4018620d 20000100 returned -16 [ 62.149547][ T5964] binder: 5962:5964 ioctl c018620c 20001080 returned -1 [ 62.313013][ T5912] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.319357][ T9] usb 2-1: USB disconnect, device number 2 [ 62.352382][ T5912] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.372254][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.449488][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 62.477279][ T5818] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 62.478824][ T5912] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 62.492779][ T5818] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 62.515531][ T5912] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.527046][ T5818] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 62.628888][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.886789][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 62.899021][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 62.913965][ T5912] usb 4-1: Product: syz [ 62.919278][ T46] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 62.926646][ T46] ath9k_htc: Failed to initialize the device [ 62.929269][ T5818] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.960482][ T5912] usb 4-1: Manufacturer: syz [ 62.962343][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.967182][ T5969] FAULT_INJECTION: forcing a failure. [ 62.967182][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.997263][ T5818] usb 3-1: Product: syz [ 63.016013][ T5818] usb 3-1: Manufacturer: syz [ 63.022649][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 63.027899][ T5912] cdc_wdm 4-1:1.0: skipping garbage [ 63.035156][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 63.055678][ T5818] cdc_wdm 3-1:1.0: skipping garbage [ 63.063699][ T5969] CPU: 1 UID: 0 PID: 5969 Comm: syz.0.20 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 63.063726][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.063737][ T5969] Call Trace: [ 63.063742][ T5969] [ 63.063749][ T5969] dump_stack_lvl+0x16c/0x1f0 [ 63.063783][ T5969] should_fail_ex+0x50a/0x650 [ 63.063813][ T5969] _copy_from_user+0x2e/0xd0 [ 63.063839][ T5969] copy_msghdr_from_user+0x99/0x160 [ 63.063860][ T5969] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 63.063887][ T5969] ___sys_sendmsg+0xff/0x1e0 [ 63.063906][ T5969] ? __pfx____sys_sendmsg+0x10/0x10 [ 63.063941][ T5969] ? __pfx_lock_release+0x10/0x10 [ 63.063965][ T5969] ? trace_lock_acquire+0x14e/0x1f0 [ 63.063990][ T5969] ? __fget_files+0x206/0x3a0 [ 63.064028][ T5969] __sys_sendmsg+0x16e/0x220 [ 63.064049][ T5969] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.064087][ T5969] do_syscall_64+0xcd/0x250 [ 63.064108][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.064136][ T5969] RIP: 0033:0x7f2ae618cda9 [ 63.064152][ T5969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.064169][ T5969] RSP: 002b:00007f2ae6f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.064189][ T5969] RAX: ffffffffffffffda RBX: 00007f2ae63a5fa0 RCX: 00007f2ae618cda9 [ 63.064202][ T5969] RDX: 0000000000000854 RSI: 0000000020000340 RDI: 0000000000000003 [ 63.064213][ T5969] RBP: 00007f2ae6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 63.064225][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.064236][ T5969] R13: 0000000000000000 R14: 00007f2ae63a5fa0 R15: 00007ffce1491728 [ 63.064260][ T5969] [ 63.065112][ T5912] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 63.067638][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 63.115024][ T5912] cdc_wdm 4-1:1.0: Unknown control protocol [ 63.123761][ T5818] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 63.716762][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 63.723650][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 63.730205][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 63.736835][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 63.743280][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 63.749904][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 63.756443][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 63.756582][ T5864] usb 4-1: USB disconnect, device number 2 [ 63.763056][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 63.763077][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 63.805821][ T5818] cdc_wdm 3-1:1.0: Unknown control protocol [ 63.848259][ T5818] usb 3-1: USB disconnect, device number 2 [ 63.929682][ T5912] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 63.999336][ T9] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 64.088132][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 64.097711][ T5912] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=67.9b [ 64.107120][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.115233][ T5912] usb 1-1: Product: syz [ 64.120880][ T5912] usb 1-1: Manufacturer: syz [ 64.125789][ T5912] usb 1-1: SerialNumber: syz [ 64.158611][ T5912] usb 1-1: config 0 descriptor?? [ 64.167717][ T9] usb 2-1: string descriptor 0 read error: -22 [ 64.180690][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 64.190780][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.206027][ T9] usb 2-1: config 0 descriptor?? [ 64.214378][ T9] usbtest 2-1:0.0: FX2 device [ 64.221883][ T9] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 64.427981][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 64.523491][ T5987] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 64.586696][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 64.586714][ T29] audit: type=1400 audit(1738227484.026:201): avc: denied { ioctl } for pid=5975 comm="syz.0.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8771 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 64.630160][ T5976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.631631][ T5990] openvswitch: netlink: Duplicate or invalid key (type 1). [ 64.661056][ T5976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.671472][ T5990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.683192][ T29] audit: type=1400 audit(1738227484.036:202): avc: denied { create } for pid=5975 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.685706][ T5912] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 64.706972][ T29] audit: type=1400 audit(1738227484.066:203): avc: denied { ioctl } for pid=5975 comm="syz.0.23" path="socket:[8772]" dev="sockfs" ino=8772 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.803465][ T5912] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 64.827526][ T29] audit: type=1400 audit(1738227484.066:204): avc: denied { bind } for pid=5975 comm="syz.0.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.890071][ T5912] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 64.926232][ T5912] usb 1-1: USB disconnect, device number 3 [ 64.992298][ T29] audit: type=1400 audit(1738227484.436:205): avc: denied { accept } for pid=5994 comm="syz.2.28" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.061800][ T29] audit: type=1400 audit(1738227484.486:206): avc: denied { write } for pid=5989 comm="syz.3.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 65.192825][ T6000] fuse: Unknown parameter '0x0000000000000003' [ 65.236652][ T6000] netlink: 'syz.2.29': attribute type 2 has an invalid length. [ 65.245032][ T29] audit: type=1400 audit(1738227484.676:207): avc: denied { create } for pid=5999 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 65.278927][ T6000] netlink: 'syz.2.29': attribute type 4 has an invalid length. [ 65.383780][ T29] audit: type=1400 audit(1738227484.826:208): avc: denied { unlink } for pid=6002 comm="syz.4.31" name="#1" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 65.404725][ T6006] warning: `syz.0.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.442031][ T6003] loop6: detected capacity change from 0 to 524287999 [ 65.473736][ T29] audit: type=1400 audit(1738227484.866:209): avc: denied { mount } for pid=6002 comm="syz.4.31" name="/" dev="overlay" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.544385][ T29] audit: type=1400 audit(1738227484.886:210): avc: denied { append } for pid=6002 comm="syz.4.31" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.498310][ T9] usb 2-1: USB disconnect, device number 3 [ 66.868284][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 66.923206][ T6034] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 67.038273][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 67.108213][ T5912] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.123719][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 67.143416][ T46] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 67.182323][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.225832][ T46] usb 4-1: Product: syz [ 67.251185][ T46] usb 4-1: Manufacturer: syz [ 67.280785][ T46] usb 4-1: SerialNumber: syz [ 67.297870][ T5912] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 67.376881][ T46] usb 4-1: config 0 descriptor?? [ 67.384352][ T5912] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 67.396691][ T5912] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 67.406227][ T6024] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 67.407856][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 67.428038][ T46] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.441067][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 67.474863][ T5912] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 67.514811][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 67.532206][ T5912] usb 1-1: Product: syz [ 67.542407][ T5912] usb 1-1: Manufacturer: syz [ 67.570206][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 67.586286][ T5912] cdc_wdm 1-1:1.0: skipping garbage [ 67.605101][ T5912] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 67.624161][ T5912] cdc_wdm 1-1:1.0: Unknown control protocol [ 67.707767][ T5864] usb 4-1: USB disconnect, device number 3 [ 67.859680][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 67.860381][ T5912] usb 1-1: USB disconnect, device number 4 [ 67.866330][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 67.866354][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 68.362383][ T6063] syz.3.45 uses obsolete (PF_INET,SOCK_PACKET) [ 68.428148][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 68.638247][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 68.722444][ T5912] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 64 [ 68.743064][ T5912] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.797474][ T5912] usb 3-1: config 1 interface 0 has no altsetting 0 [ 68.847951][ T5912] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.978191][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.986247][ T5912] usb 3-1: Product: ࠠ [ 68.990870][ T5912] usb 3-1: Manufacturer: 뢧ᶉᘰ诊訷㊫ꗒ鱩乿穜㔽궩䍱᰻঴쪂鍪ᤜ뢅琕톳ﻜሽ隠监퀡抲ᙌ䍔⅀鿒䯵馄졞⃘쯨戉迒콣䫝ढ寷没⬭썡ᇐ둑侅썣됫솯楢Ფ贈ᒴ爊쪁地㰥錴䒄阣䙖梣㢅糕䀵Ⴅ琶㐏ꐝ艢砶ᄳ縄긍⌉㲈扠䭿ᄅ轩麦驚쪭룙ⷬ䇘⒏ [ 69.003614][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 69.023145][ T5912] usb 3-1: SerialNumber: 空⇛ﻹ╅姴絗ꐁ▉仁塻儚늺䱡鑧툈휹ꧣ祫襊䜀ゥ釔땒܇ဿ殉⛒腅䇌渦눋⣳衂䒮镒炙椪边࡮먋⧹뀓㲤壨观ꏲ맅씹⸾늦ଢ଼ⷼ㉏붂襮ꩪᐊ蝁䗶迗剎ᬺ䎺ᬠ綶ṻ꙾퇴栟韜ꚷ鳃愴玒᳉뫖骨鱰풓﫬쮚ꦸቀˉﻐ烴ࣄ跙 [ 69.072342][ T6057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.109388][ T6057] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 69.496573][ T5912] usb 3-1: USB disconnect, device number 3 [ 69.668350][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 70.188239][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.203787][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.248309][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 70.267634][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.291271][ T5864] usb 4-1: config 0 descriptor?? [ 70.394086][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 70.394103][ T29] audit: type=1400 audit(1738227489.836:232): avc: denied { mount } for pid=6092 comm="syz.0.53" name="/" dev="ramfs" ino=7916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.445395][ T29] audit: type=1400 audit(1738227489.886:233): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 70.522491][ T29] audit: type=1400 audit(1738227489.956:234): avc: denied { connect } for pid=6101 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.380053][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.386577][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.427759][ T6102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 71.453740][ T5864] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.478374][ T29] audit: type=1400 audit(1738227490.916:235): avc: denied { ioctl } for pid=6093 comm="syz.1.54" path="socket:[7942]" dev="sockfs" ino=7942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.519509][ T5864] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.526794][ T5864] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 71.627640][ T29] audit: type=1400 audit(1738227490.916:236): avc: denied { name_bind } for pid=6093 comm="syz.1.54" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.912590][ T29] audit: type=1400 audit(1738227491.196:237): avc: denied { nlmsg_read } for pid=6101 comm="syz.4.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 71.970968][ T29] audit: type=1400 audit(1738227491.326:238): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.990507][ T5864] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 72.001081][ T29] audit: type=1400 audit(1738227491.336:239): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2766 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.025071][ T29] audit: type=1400 audit(1738227491.336:240): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2766 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 72.059763][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.068535][ T5864] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 72.076574][ T5864] cm6533_jd 0003:0D8C:0022.0001: No inputs registered, leaving [ 72.173374][ T5864] cm6533_jd 0003:0D8C:0022.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 72.220321][ T5864] usb 4-1: USB disconnect, device number 4 [ 72.236867][ T29] audit: type=1400 audit(1738227491.676:241): avc: denied { audit_write } for pid=6117 comm="syz.0.59" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.274514][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.300359][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 72.330399][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.380765][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 72.409465][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 72.440383][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.450171][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.469481][ T9] usb 3-1: Product: syz [ 72.473844][ T9] usb 3-1: Manufacturer: syz [ 72.497346][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 72.518135][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 72.539428][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 72.545384][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 73.086959][ T5912] usb 3-1: USB disconnect, device number 4 [ 73.150989][ T6136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.62'. [ 73.910186][ T5912] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.927643][ T6161] CIFS: iocharset name too long [ 73.948014][ T6161] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 74.163140][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.714023][ T5912] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 74.931263][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.967322][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.005617][ T5912] usb 2-1: Product: syz [ 75.028186][ T5912] usb 2-1: Manufacturer: syz [ 75.040200][ T5912] usb 2-1: SerialNumber: syz [ 75.135714][ T6171] kernel read not supported for file /policy (pid: 6171 comm: syz.4.73) [ 75.275694][ T6147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.382598][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 76.382615][ T29] audit: type=1400 audit(1738227495.826:270): avc: denied { create } for pid=6172 comm="syz.3.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 76.410894][ T29] audit: type=1400 audit(1738227495.826:271): avc: denied { open } for pid=6172 comm="syz.3.74" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 76.434199][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.475793][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.484526][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.492023][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.499449][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.507001][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.514427][ T6174] Dead loop on virtual device ip6_vti0, fix it urgently! [ 76.542760][ T8] cfg80211: failed to load regulatory.db [ 76.581457][ T29] audit: type=1400 audit(1738227495.996:272): avc: denied { read } for pid=6185 comm="syz.0.77" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.604479][ C1] vkms_vblank_simulate: vblank timer overrun [ 76.797206][ T29] audit: type=1400 audit(1738227495.996:273): avc: denied { open } for pid=6185 comm="syz.0.77" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.820713][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.279267][ T5912] cdc_ncm 2-1:1.0: bind() failure [ 77.287381][ T5912] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 77.298132][ T5912] cdc_ncm 2-1:1.1: bind() failure [ 77.309121][ T5912] usb 2-1: USB disconnect, device number 4 [ 77.849175][ T6211] tipc: Enabling of bearer rejected, failed to enable media [ 77.950146][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.3.81'. [ 78.026059][ T6211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'. [ 79.539049][ T6223] mkiss: ax0: crc mode is auto. [ 79.547086][ T5864] kernel write not supported for file /cpu/0/msr (pid: 5864 comm: kworker/0:7) [ 79.549799][ T29] audit: type=1400 audit(1738227498.986:274): avc: denied { write } for pid=6221 comm="syz.1.85" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 79.608240][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.87'. [ 79.650466][ T29] audit: type=1400 audit(1738227498.996:275): avc: denied { search } for pid=5484 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.678923][ T6228] netlink: 28 bytes leftover after parsing attributes in process `syz.3.87'. [ 79.736036][ T29] audit: type=1400 audit(1738227498.996:276): avc: denied { read } for pid=5484 comm="dhcpcd" name="n101" dev="tmpfs" ino=2213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.783164][ T29] audit: type=1400 audit(1738227498.996:277): avc: denied { open } for pid=5484 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.890481][ T29] audit: type=1400 audit(1738227498.996:278): avc: denied { getattr } for pid=5484 comm="dhcpcd" path="/run/udev/data/n101" dev="tmpfs" ino=2213 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 79.979259][ T8] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 80.124337][ T29] audit: type=1400 audit(1738227499.036:279): avc: denied { name_bind } for pid=6221 comm="syz.1.85" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 80.292309][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 80.312550][ T8] usb 5-1: config 0 has no interface number 0 [ 80.353115][ T8] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 80.629418][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.637470][ T8] usb 5-1: Product: syz [ 80.675284][ T8] usb 5-1: Manufacturer: syz [ 80.744130][ T8] usb 5-1: SerialNumber: syz [ 80.761965][ T6244] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 80.832748][ T8] usb 5-1: config 0 descriptor?? [ 81.051076][ T8] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 81.062083][ T8] usb 5-1: USB disconnect, device number 2 [ 81.094299][ T6247] FAULT_INJECTION: forcing a failure. [ 81.094299][ T6247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.094526][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.0.91 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 81.094540][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 81.094545][ T6247] Call Trace: [ 81.094548][ T6247] [ 81.094552][ T6247] dump_stack_lvl+0x116/0x1f0 [ 81.094571][ T6247] should_fail_ex+0x50a/0x650 [ 81.094586][ T6247] strncpy_from_user+0x3b/0x2d0 [ 81.094600][ T6247] strncpy_from_user_nofault+0x7f/0x180 [ 81.094615][ T6247] bpf_probe_read_compat_str+0xf1/0x170 [ 81.094630][ T6247] bpf_prog_c1796171ffc7efef+0x3e/0x40 [ 81.094647][ T6247] bpf_trace_run4+0x245/0x5a0 [ 81.094659][ T6247] ? __pfx_bpf_trace_run4+0x10/0x10 [ 81.094669][ T6247] ? psi_task_switch+0x203/0x8e0 [ 81.094681][ T6247] ? __pfx_lock_release+0x10/0x10 [ 81.094696][ T6247] ? lock_acquire+0x2f/0xb0 [ 81.094707][ T6247] ? psi_task_switch+0x203/0x8e0 [ 81.094719][ T6247] __bpf_trace_sched_switch+0x13e/0x190 [ 81.094733][ T6247] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 81.094750][ T6247] ? psi_task_switch+0x203/0x8e0 [ 81.094763][ T6247] __schedule+0x160c/0x5890 [ 81.094776][ T6247] ? queue_work_on+0x9d/0x140 [ 81.094795][ T6247] ? __pfx___schedule+0x10/0x10 [ 81.094806][ T6247] ? fb_get_color_depth+0x120/0x250 [ 81.094817][ T6247] ? bit_cursor+0xecf/0x1800 [ 81.094832][ T6247] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 81.094845][ T6247] preempt_schedule_notrace+0x62/0xe0 [ 81.094859][ T6247] preempt_schedule_notrace_thunk+0x1a/0x30 [ 81.094871][ T6247] ? trace_lock_acquire+0x3c/0x1f0 [ 81.094882][ T6247] rcu_is_watching+0x8e/0xc0 [ 81.094892][ T6247] trace_lock_acquire+0x14e/0x1f0 [ 81.094902][ T6247] ? atomic_notifier_call_chain+0x3a/0x1c0 [ 81.094914][ T6247] lock_acquire+0x2f/0xb0 [ 81.094924][ T6247] ? atomic_notifier_call_chain+0x3a/0x1c0 [ 81.094936][ T6247] atomic_notifier_call_chain+0x40/0x1c0 [ 81.094945][ T6247] ? atomic_notifier_call_chain+0x3a/0x1c0 [ 81.094955][ T6247] do_con_write+0x48f/0x7bb0 [ 81.094967][ T6247] ? rcu_is_watching+0x12/0xc0 [ 81.094976][ T6247] ? trace_contention_end+0xee/0x140 [ 81.094992][ T6247] ? find_held_lock+0x2d/0x110 [ 81.095003][ T6247] ? __pfx_do_con_write+0x10/0x10 [ 81.095016][ T6247] ? mark_held_locks+0x9f/0xe0 [ 81.095029][ T6247] con_write+0x23/0xb0 [ 81.095039][ T6247] n_tty_write+0x419/0x1140 [ 81.095056][ T6247] ? __pfx_n_tty_write+0x10/0x10 [ 81.095066][ T6247] ? __virt_addr_valid+0x1a4/0x590 [ 81.095077][ T6247] ? __pfx_woken_wake_function+0x10/0x10 [ 81.095088][ T6247] ? __virt_addr_valid+0x5e/0x590 [ 81.095096][ T6247] ? __phys_addr_symbol+0x30/0x80 [ 81.095105][ T6247] ? __check_object_size+0x488/0x710 [ 81.095116][ T6247] ? __pfx_n_tty_write+0x10/0x10 [ 81.095128][ T6247] file_tty_write.constprop.0+0x506/0x9a0 [ 81.095141][ T6247] vfs_write+0x5ae/0x1150 [ 81.095156][ T6247] ? __pfx_tty_write+0x10/0x10 [ 81.095165][ T6247] ? __pfx_vfs_write+0x10/0x10 [ 81.095179][ T6247] ? __fget_files+0x40/0x3a0 [ 81.095195][ T6247] ksys_write+0x12b/0x250 [ 81.095208][ T6247] ? __pfx_ksys_write+0x10/0x10 [ 81.095225][ T6247] do_syscall_64+0xcd/0x250 [ 81.095235][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.095248][ T6247] RIP: 0033:0x7f2ae618cda9 [ 81.095256][ T6247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.095265][ T6247] RSP: 002b:00007f2ae6f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 81.095275][ T6247] RAX: ffffffffffffffda RBX: 00007f2ae63a5fa0 RCX: 00007f2ae618cda9 [ 81.095280][ T6247] RDX: 0000000000001006 RSI: 0000000020002080 RDI: 0000000000000004 [ 81.095285][ T6247] RBP: 00007f2ae6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 81.095290][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.095295][ T6247] R13: 0000000000000000 R14: 00007f2ae63a5fa0 R15: 00007ffce1491728 [ 81.095307][ T6247] [ 81.483752][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 81.483792][ T29] audit: type=1400 audit(1738227500.926:291): avc: denied { read write } for pid=6256 comm="syz.2.97" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.544432][ T29] audit: type=1400 audit(1738227500.986:292): avc: denied { open } for pid=6256 comm="syz.2.97" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.799286][ T29] audit: type=1400 audit(1738227501.246:293): avc: denied { getopt } for pid=6256 comm="syz.2.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 82.771500][ T29] audit: type=1400 audit(1738227502.216:294): avc: denied { write } for pid=6267 comm="syz.2.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.301562][ T29] audit: type=1400 audit(1738227502.746:295): avc: denied { bind } for pid=6274 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.301606][ T29] audit: type=1400 audit(1738227502.746:296): avc: denied { name_bind } for pid=6274 comm="syz.2.101" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 83.301633][ T29] audit: type=1400 audit(1738227502.746:297): avc: denied { node_bind } for pid=6274 comm="syz.2.101" saddr=127.0.0.1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 83.305828][ T29] audit: type=1400 audit(1738227502.746:298): avc: denied { setopt } for pid=6274 comm="syz.2.101" laddr=127.0.0.1 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.390111][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.544414][ T29] [ 83.544419][ T29] ====================================================== [ 83.544422][ T29] WARNING: possible circular locking dependency detected [ 83.544427][ T29] 6.13.0-syzkaller-08265-g9c5968db9e62 #0 Not tainted [ 83.544432][ T29] ------------------------------------------------------ [ 83.544434][ T29] kauditd/29 is trying to acquire lock: [ 83.544438][ T29] ffff88802875ae68 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xb6/0x1490 [ 83.544466][ T29] [ 83.544466][ T29] but task is already holding lock: [ 83.544469][ T29] ffffffff8e1abbd8 ((console_sem).lock){-.-.}-{2:2}, at: up+0x16/0xb0 [ 83.544485][ T29] [ 83.544485][ T29] which lock already depends on the new lock. [ 83.544485][ T29] [ 83.544488][ T29] [ 83.544488][ T29] the existing dependency chain (in reverse order) is: [ 83.544491][ T29] [ 83.544491][ T29] -> #2 ((console_sem).lock){-.-.}-{2:2}: [ 83.544501][ T29] _raw_spin_lock_irqsave+0x3a/0x60 [ 83.544513][ T29] down_trylock+0x12/0x70 [ 83.544520][ T29] __down_trylock_console_sem+0x40/0x140 [ 83.544533][ T29] vprintk_emit+0x3ec/0x6f0 [ 83.544541][ T29] _printk+0xc8/0x100 [ 83.544551][ T29] should_fail_ex+0x4df/0x650 [ 83.544563][ T29] strncpy_from_user+0x3b/0x2d0 [ 83.544573][ T29] strncpy_from_user_nofault+0x7f/0x180 [ 83.544587][ T29] bpf_probe_read_compat_str+0xf1/0x170 [ 83.544598][ T29] 0xffffffffa0001fc6 [ 83.544604][ T29] bpf_trace_run4+0x245/0x5a0 [ 83.544619][ T29] __bpf_trace_sched_switch+0x13e/0x190 [ 83.544632][ T29] __schedule+0x160c/0x5890 [ 83.544643][ T29] preempt_schedule_notrace+0x62/0xe0 [ 83.544655][ T29] preempt_schedule_notrace_thunk+0x1a/0x30 [ 83.544666][ T29] rcu_is_watching+0x8e/0xc0 [ 83.544675][ T29] trace_lock_acquire+0x14e/0x1f0 [ 83.544685][ T29] lock_acquire+0x2f/0xb0 [ 83.544695][ T29] atomic_notifier_call_chain+0x40/0x1c0 [ 83.544705][ T29] do_con_write+0x48f/0x7bb0 [ 83.544714][ T29] con_write+0x23/0xb0 [ 83.544721][ T29] n_tty_write+0x419/0x1140 [ 83.544731][ T29] file_tty_write.constprop.0+0x506/0x9a0 [ 83.544739][ T29] vfs_write+0x5ae/0x1150 [ 83.544752][ T29] ksys_write+0x12b/0x250 [ 83.544764][ T29] do_syscall_64+0xcd/0x250 [ 83.544771][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.544783][ T29] [ 83.544783][ T29] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 83.544794][ T29] _raw_spin_lock_nested+0x31/0x40 [ 83.544804][ T29] raw_spin_rq_lock_nested+0x29/0x130 [ 83.544815][ T29] task_rq_lock+0xcf/0x3b0 [ 83.544826][ T29] cgroup_move_task+0x82/0x250 [ 83.544835][ T29] css_set_move_task+0x288/0x5f0 [ 83.544846][ T29] cgroup_post_fork+0x1c6/0x910 [ 83.544853][ T29] copy_process+0x5034/0x8d60 [ 83.544860][ T29] kernel_clone+0xfd/0x960 [ 83.544867][ T29] user_mode_thread+0xb4/0xf0 [ 83.544874][ T29] rest_init+0x23/0x2b0 [ 83.544882][ T29] start_kernel+0x3e9/0x4d0 [ 83.544890][ T29] x86_64_start_reservations+0x18/0x30 [ 83.544898][ T29] x86_64_start_kernel+0xb2/0xc0 [ 83.544906][ T29] common_startup_64+0x13e/0x148 [ 83.544919][ T29] [ 83.544919][ T29] -> #0 (&p->pi_lock){-.-.}-{2:2}: [ 83.544928][ T29] __lock_acquire+0x249e/0x3c40 [ 83.544939][ T29] lock_acquire.part.0+0x11b/0x380 [ 83.544950][ T29] _raw_spin_lock_irqsave+0x3a/0x60 [ 83.544960][ T29] try_to_wake_up+0xb6/0x1490 [ 83.544970][ T29] up+0x79/0xb0 [ 83.544976][ T29] __up_console_sem+0x85/0xe0 [ 83.544987][ T29] console_unlock+0x1dc/0x210 [ 83.544995][ T29] vprintk_emit+0x424/0x6f0 [ 83.545002][ T29] _printk+0xc8/0x100 [ 83.545012][ T29] kauditd_hold_skb+0x205/0x250 [ 83.545023][ T29] kauditd_send_queue+0x236/0x290 [ 83.545033][ T29] kauditd_thread+0x611/0xa60 [ 83.545042][ T29] kthread+0x3af/0x750 [ 83.545051][ T29] ret_from_fork+0x45/0x80 [ 83.545062][ T29] ret_from_fork_asm+0x1a/0x30 [ 83.545070][ T29] [ 83.545070][ T29] other info that might help us debug this: [ 83.545070][ T29] [ 83.545072][ T29] Chain exists of: [ 83.545072][ T29] &p->pi_lock --> &rq->__lock --> (console_sem).lock [ 83.545072][ T29] [ 83.545084][ T29] Possible unsafe locking scenario: [ 83.545084][ T29] [ 83.545086][ T29] CPU0 CPU1 [ 83.545088][ T29] ---- ---- [ 83.545090][ T29] lock((console_sem).lock); [ 83.545095][ T29] lock(&rq->__lock); [ 83.545101][ T29] lock((console_sem).lock); [ 83.545106][ T29] lock(&p->pi_lock); [ 83.545111][ T29] [ 83.545111][ T29] *** DEADLOCK *** [ 83.545111][ T29] [ 83.545112][ T29] 1 lock held by kauditd/29: [ 83.545117][ T29] #0: ffffffff8e1abbd8 ((console_sem).lock){-.-.}-{2:2}, at: up+0x16/0xb0 [ 83.545134][ T29] [ 83.545134][ T29] stack backtrace: [ 83.545138][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 83.545147][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 83.545152][ T29] Call Trace: [ 83.545155][ T29] [ 83.545159][ T29] dump_stack_lvl+0x116/0x1f0 [ 83.545173][ T29] print_circular_bug+0x490/0x760 [ 83.545186][ T29] check_noncircular+0x31a/0x400 [ 83.545197][ T29] ? __pfx_check_noncircular+0x10/0x10 [ 83.545207][ T29] ? __pfx__prb_read_valid+0x10/0x10 [ 83.545220][ T29] ? lockdep_lock+0xc6/0x200 [ 83.545229][ T29] ? __pfx_lockdep_lock+0x10/0x10 [ 83.545238][ T29] __lock_acquire+0x249e/0x3c40 [ 83.545251][ T29] ? __pfx___lock_acquire+0x10/0x10 [ 83.545262][ T29] ? hlock_class+0x4e/0x130 [ 83.545270][ T29] ? __lock_acquire+0x15a9/0x3c40 [ 83.545282][ T29] lock_acquire.part.0+0x11b/0x380 [ 83.545294][ T29] ? try_to_wake_up+0xb6/0x1490 [ 83.545305][ T29] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 83.545317][ T29] ? rcu_is_watching+0x12/0xc0 [ 83.545325][ T29] ? trace_lock_acquire+0x14e/0x1f0 [ 83.545334][ T29] ? try_to_wake_up+0xb6/0x1490 [ 83.545345][ T29] ? lock_acquire+0x2f/0xb0 [ 83.545356][ T29] ? try_to_wake_up+0xb6/0x1490 [ 83.545367][ T29] _raw_spin_lock_irqsave+0x3a/0x60 [ 83.545378][ T29] ? try_to_wake_up+0xb6/0x1490 [ 83.545389][ T29] try_to_wake_up+0xb6/0x1490 [ 83.545400][ T29] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.545408][ T29] ? __pfx_try_to_wake_up+0x10/0x10 [ 83.545419][ T29] ? lock_acquire+0x2f/0xb0 [ 83.545430][ T29] ? up+0x16/0xb0 [ 83.545437][ T29] up+0x79/0xb0 [ 83.545444][ T29] __up_console_sem+0x85/0xe0 [ 83.545456][ T29] console_unlock+0x1dc/0x210 [ 83.545464][ T29] ? __pfx_console_unlock+0x10/0x10 [ 83.545472][ T29] ? lock_acquire+0x2f/0xb0 [ 83.545483][ T29] ? vprintk_emit+0x638/0x6f0 [ 83.545491][ T29] vprintk_emit+0x424/0x6f0 [ 83.545500][ T29] ? __pfx_vprintk_emit+0x10/0x10 [ 83.545508][ T29] ? __pfx_lock_release+0x10/0x10 [ 83.545518][ T29] ? trace_lock_acquire+0x14e/0x1f0 [ 83.545528][ T29] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 83.545539][ T29] _printk+0xc8/0x100 [ 83.545550][ T29] ? __pfx__printk+0x10/0x10 [ 83.545561][ T29] ? ___ratelimit+0x24c/0x570 [ 83.545573][ T29] ? __pfx____ratelimit+0x10/0x10 [ 83.545585][ T29] ? kauditd_hold_skb+0x1bc/0x250 [ 83.545596][ T29] kauditd_hold_skb+0x205/0x250 [ 83.545606][ T29] kauditd_send_queue+0x236/0x290 [ 83.545620][ T29] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 83.545631][ T29] kauditd_thread+0x611/0xa60 [ 83.545641][ T29] ? __pfx_kauditd_thread+0x10/0x10 [ 83.545652][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 83.545663][ T29] ? lockdep_hardirqs_on+0x7c/0x110 [ 83.545676][ T29] ? __kthread_parkme+0x148/0x220 [ 83.545685][ T29] ? __pfx_kauditd_thread+0x10/0x10 [ 83.545695][ T29] kthread+0x3af/0x750 [ 83.545705][ T29] ? __pfx_kthread+0x10/0x10 [ 83.545715][ T29] ? __pfx_kthread+0x10/0x10 [ 83.545725][ T29] ret_from_fork+0x45/0x80 [ 83.545735][ T29] ? __pfx_kthread+0x10/0x10 [ 83.545745][ T29] ret_from_fork_asm+0x1a/0x30 [ 83.545756][ T29] [ 83.609338][ T5818] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.042301][ T29] audit: type=1400 audit(1738227503.056:299): avc: denied { rename } for pid=5172 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.042347][ T29] audit: type=1400 audit(1738227503.056:300): avc: denied { unlink } for pid=5172 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.158425][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 85.082044][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.103637][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.120776][ T5818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.135489][ T5818] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.193387][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.206225][ T5818] usb 3-1: config 0 descriptor?? [ 85.421649][ T5818] usbhid 3-1:0.0: can't add hid device: -71 [ 85.428864][ T5818] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 85.440270][ T5818] usb 3-1: USB disconnect, device number 6