last executing test programs: 9m18.352528443s ago: executing program 1 (id=3017): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, 0x0, &(0x7f0000000180)='%pK \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) eventfd2(0x3, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x2}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)=ANY=[@ANYRES16=r2, @ANYRES16=r7, @ANYBLOB="578d26bd7000fbdbdf250200000014000180080003007f0000010600010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x40080) close(r0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 9m17.238686912s ago: executing program 1 (id=3019): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) r3 = socket(0x1a, 0x3, 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40, 0x0) socket$xdp(0x2c, 0x3, 0x0) 9m15.87014701s ago: executing program 1 (id=3025): connect$unix(0xffffffffffffffff, 0x0, 0x0) io_cancel(0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000000000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x47c, 0x12}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6558}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x3a, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0xc, {0xa, 0x7}, "6e74be79f529790a"}, {0x0, 0x8, {0x6, 0x9}, "4ba5ec15b9af5b51"}], {0x0, 0x5, {0xa, 0xd50}, "6339425cdfdc7c15"}}}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040894}, 0x5) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 9m14.739160426s ago: executing program 1 (id=3030): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1004, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x3edd, &(0x7f0000000200)={0x0, 0xd6a8, 0x4000, 0x3, 0x206}, &(0x7f0000000280), &(0x7f00000002c0)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r4, 0x0, 0x3, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000180)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), r4, 0x1}}, 0x18) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$binder(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a40), r0) r7 = openat$binfmt_format(0xffffff9c, &(0x7f0000003040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r7, &(0x7f0000003080)='1\x00', 0x1) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a80)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x20000080) 9m10.492487522s ago: executing program 1 (id=3040): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f000000b900)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000580)="a7c4175c0aa5d191e40068a3064cdb915a9f2827b363ebcadf050ac8aa195f0bfd553cf94636135211c2b41d093bfada4d3a8f37335e27bf086da0ef503df1be9345abae08f1612a9ba679abcff85353fe307a18eeffab0a4d84d2506f07f105107af44bb875dcd73dbefef243dfe14408e19a347d85b7632e9ac5ba20b17f201e80575522f8f1394686bde22833e54bab01bbf49c1d0038d1e3da7913fc3a7bd813f2f312740898fd7ba31c0984f13ccb855bf375f475cea0c86588f55c100cbdea67a7a69bb4eac9128ddcc0fa26878cb6d92c652a51997ca52df20aec47eb66d69327eb61e50ec9256e8e00e63dcf5e855a0af31e6054890e112c55", 0xfd}, {&(0x7f0000000680)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r1, r0]}}], 0x28, 0x8000}}, {{&(0x7f0000001680)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001700)="4548a2675dacaf0c732ccc34125284a0269ccf93ceb02a9029c915626fa90753bbc2855f2ce78acb0be7a28b385410f5fa6a3157e9b2f9dc51ffa6e3d0d911b57b0abe045e4e2f3198d0ca4b3097ff0b395a79f0fb0f698976c0bba12cfff4c78b65553493c347027bcb9ac2875e544578b6d079a046e98ef5e4c167b13878fee18d94c13a5ad2990c17ea4b74", 0x8d}, {&(0x7f0000000400)="5e9d8d8b46d91dfce54c4f6691b331aac4939886ae9fa0bfea00", 0x1a}, {&(0x7f00000017c0)="2b76920ffa25a56994f792002781b5f57c83a03de2724727", 0x18}], 0x3, 0x0, 0x0, 0x54}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)="448eb8f65f0b7d3adb94ce17db62000016cd94a4f99aefc4d0ae2fdb7f2c3ad140379b7a2627c0d0c9419536df8bd4a348ff1cde96d5832d94b3adde1f0d8aa8c9542f1780e95ea2dae7dcbf5ea6b836e420163816cf434e1fc6e10f184efed8877ad3a477b314dd6474e07b378774a98c361593a43c9d3cd085eb38e29ae73feb84", 0x82}], 0x1, &(0x7f0000001cc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40040c0}}, {{0x0, 0x0, &(0x7f0000001d00), 0x0, &(0x7f0000002000)=[@cred={{0x1c}}], 0x20, 0x4008000}}, {{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000062c0)=[{&(0x7f000000a3c0)="95b4ddeb70f6071de270ea74516edcdcb2e493bf8856cff61de04b67328e0d00b99db078b3a0d6f2ca424988053aecf4e968c363632a78f4c1e34776ba4ca67d3cd9289d1da4822de156b08ed7afbf112f0998ff1a84b624d62dc35536f312eaaa990020d0106771f745478ac2778dc8b3e8bb7a0b793852e9ed169baf6d3de2357970a7a7ff0c4747430b64cb6ec380ba3245aa040418a4f0ec84bb697b10d94f6d9e5347c2013688835779818128df836922fd5062c7a10fe4e75fce4cb3d82f3bfdacc7b915", 0xc7}, {&(0x7f0000002040)="eb21676e59456dfe5e161e99c2bbc2049147696a340e41095b41345525d7d13083925a6b6321586124be", 0x2a}, {&(0x7f000000a4c0)="37bbdc8e9960888d69773b93533c3d38c2d06722975863e20c017149ab034b58071df83e7f184b09cca18393c29b078209c85d18e6e259b5ced182df45af922caa96134165669b0f6f227e1b71428237039d8b37778d3b35051f17c0055d7c4b3a64c576c7c7ed7f035f4fd0790f33d3b5fd5ea797faaea627c70f0ee19b0898db1b837c5d1e66b42b04846ea7b2ed141f92d5725ac499d582d4d665487711d72d30f2b8bd0d299e4eef395ef0ee16ca47016c4e22141b7cf639a646a20ab928b0988fe088491cf1fc2e7e15088875dd8ccb8b8129e681c6cb2635ccbfaa5fa330381d8d08d88fb3d8b4105d24851fbf692a3c3235", 0xf5}, {&(0x7f000000a5c0)="3f1bf79a122a406aade874daf836725e133cc223c0af19bd0e43d8f81c6b8e069f2fda2d5e235cf8c9963795095a9fca0995845adb3370f1559520c4e918aaf7eb60866241cf6c294a1cfb65ba64bc0c913d34023c994c5d3c10cf2d06d9db436d646f2f925dc1cf5b977cee3b4e1c03cbbafc0331fb64992dab4f3ac735a4ca31e8f20e58cfdf2af09548c6da2508af60c47787c18272fb621e650c81970a5b9e93c8e7d1d12be2d502da4b2ca66b16125bfc7483edfa3fb883e1808f6dcd3acd5887397975a43ba074c5c185162605279039c717b3722a20f6e01aa200d6e5a5e5e9f82082c0c7c779e22631962463fb4597dd73beb7", 0xf7}, {&(0x7f0000004200)}, {&(0x7f0000004240)="769b0f6d0bf9bb61289ec4b055aff79cb13aaa46acb94ae2d42c76f2313fed5c7a5e51e27c5fc0742276bacdf22b37c7691f6736db2d87f518397221f38258fd78b3e43707f49a7974f62bb35926682d534cb939f4bbc89696", 0x59}, {&(0x7f000000a6c0)="7b9f8dbf25c8dd64f361f2a9e38e8319199e688e8e6645baa8f7c26ccf9683a0c2b914469f3029043c03a8067c546cb726e9ce52133f706bb57cb5aa6052e9f34eae2fa834dad681e3a4bd3653ae1d91765fcb721da7797d1caf392954092f7f613a51d968db7036291c01d1ff3834a37ef9a8477decd0991c280048ad495a39fe1b5cbc33bd4dcd369e1b62204b4e46a4723d3809b501ea2a5490ab0e96e05a9ceb3cebca6ca738d1abe0548495e4d8dd2c018e8215e9ffa769e9a978f3e5c51ca4d10cb82e31e4edf35b559bfddd0e8211c836796c5b7f60926748e9ff02865974541e492feb8d6ba7ec3254bc69ab3e818a318d2b8b994864", 0xfa}], 0x7, &(0x7f0000006340), 0x0, 0x7b68d5775f530fdd}}, {{&(0x7f000000a7c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000b8c0)=[{&(0x7f000000a840)="eeb3689465", 0x5}, {&(0x7f000000a880)="b5e6e05683b1eb2d61a366a44e6014ddec4c41", 0x13}, {&(0x7f000000a8c0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x40000}}], 0x6, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x51, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200001a2, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1000000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r5, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r4, 0x0, 0x0) connect$unix(r7, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 9m9.189052747s ago: executing program 1 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shmctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fffffffffffffff400010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) 9m8.733437166s ago: executing program 32 (id=3045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shmctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05fffffffffffffff400010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) 5m12.513486115s ago: executing program 0 (id=3944): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0xfffffffd, {0xa, 0x10, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000e}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x44}}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xa8210}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x3f00) 5m12.383066258s ago: executing program 0 (id=3947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0xfffe}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xd) 5m10.808525136s ago: executing program 0 (id=3951): syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000180)=@ax25={{}, [@default, @null, @default, @default, @null, @null, @netrom, @default]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)=""/184, 0xc6}, {&(0x7f00000004c0)=""/132, 0x89}], 0x2}, 0x7}, {{&(0x7f0000000640)=@ax25={{0x3, @default}, [@netrom, @rose, @remote, @netrom, @default, @rose, @default]}, 0x80, &(0x7f0000001080), 0x0, &(0x7f0000000580)=""/57, 0x39}, 0x2}, {{&(0x7f0000000c80)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/214, 0xd6}], 0x1, &(0x7f0000000d00)=""/267, 0x10b}, 0x80}, {{&(0x7f0000000800)=@generic, 0x80, &(0x7f0000000140)=[{&(0x7f0000000a40)=""/105}], 0x0, &(0x7f0000001100)=""/184, 0xb8}, 0x9}, {{&(0x7f00000016c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=""/164, 0xa4}, 0x5e}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000880)=""/238, 0xee}, {&(0x7f00000005c0)=""/16, 0x10}], 0x2, &(0x7f0000001a00)=""/198, 0xc6}, 0x7f}, {{&(0x7f0000001b00)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000980)=""/165, 0xa5}], 0x61, &(0x7f00000012c0)=""/243, 0xf3}, 0x2}], 0x7, 0x10142, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x50007f, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000340)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000380)=0x28) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$alg(0x26, 0x5, 0x0) r3 = socket$inet(0x10, 0x3, 0x40000) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x48001051, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x39, 0x1a, r6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1f, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000200)=0x7, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000100001042dbd70000000000000000000", @ANYRES32=r7, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r10, @ANYBLOB="c4542c231bbf337ba6243aa7c131ab2aec89c869c9c5b28c46668bee674b88562de94cd441b7f590549557daf0a74523f1c462abe64306551197c1147ff0dfc6aeead934a7a119901042178ccd7a40400000001a7b223cbcf69a895508d44920bf66aa88744bbff7820fd5a343137ae9f1440df8bf3eab4b618e794dcb2cdd53a5c1351501ed5656cf065250ed6e034d"], 0x54}}, 0x0) 5m10.442949233s ago: executing program 0 (id=3955): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000080ffffff000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 5m9.867005422s ago: executing program 0 (id=3958): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0xabe00, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040f0440f60308"], 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc655}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x80000001}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xfffffffa}, @in={0x2, 0x4e20, @broadcast}], 0x64) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r1}}, 0x18}}, 0x0) 5m9.546181308s ago: executing program 0 (id=3961): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) keyctl$session_to_parent(0x12) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r3}}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x5, 0xfa00, {0x4, &(0x7f0000000180), 0x106, 0x8}}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000340)={0x3, @win={{0x1ff, 0x0, 0xfffffffd, 0x10014}, 0x3, 0x0, 0x0, 0x1, 0x0}}) socket$netlink(0x10, 0x3, 0x0) 4m54.112054915s ago: executing program 33 (id=3961): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) keyctl$session_to_parent(0x12) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000200)={0xa, 0x4, 0xfa00, {r3}}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000540)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc6fffffd) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x5, 0xfa00, {0x4, &(0x7f0000000180), 0x106, 0x8}}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e}) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000340)={0x3, @win={{0x1ff, 0x0, 0xfffffffd, 0x10014}, 0x3, 0x0, 0x0, 0x1, 0x0}}) socket$netlink(0x10, 0x3, 0x0) 1m24.179562565s ago: executing program 6 (id=4899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000800)="38c8114fa3db529ed03bcef7ec2ea72ff78e04927d241dea66ff7487527450271f5eecbf1ef4f33ddcdcbb7fd642d78b34841e80399d5c5249", 0x39}], 0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount$9p_rdma(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x10000, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[], [{@seclabel}]}}) 1m23.596024443s ago: executing program 6 (id=4901): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x18010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000780)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000400010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014"], 0xf0}}, 0x0) ioprio_set$uid(0x3, 0xee00, 0x4007) socket$inet(0x2, 0x1, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, &(0x7f0000000080)) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[], &(0x7f0000000500)=""/177, 0x64, 0xb1, 0x0, 0x6, 0x10000, @value=r3}, 0x28) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendto$packet(r1, &(0x7f0000000700)="33031600fd10004b1f000000000000000000000000000000810000000000", 0xb0eb381251b8400d, 0x2000c09d, &(0x7f00000000c0)={0x11, 0x2, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f00000003c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}], 0x0, 0x717, 0x26, &(0x7f0000000480)=""/38, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000600)=[{0x0, 0x4, 0xa}, {0x3, 0x3, 0x6, 0x1}], 0x10, 0xfffffffd}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400461c1d67f6f94007134cf6efb8000a007a290457f0189b31627287ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a15a8b16f14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f211ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941c6a0501148", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r5 = shmget(0x1, 0x4000, 0x2, &(0x7f0000ffb000/0x4000)=nil) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2, 0x1}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1m22.734792219s ago: executing program 6 (id=4905): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x29, 0x33, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) poll(&(0x7f0000000200), 0x0, 0x80) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) stat(&(0x7f00000005c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xe3}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d", 0x35}, {&(0x7f0000000840)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f1b976924a41f64f236a395543ddbbb994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56e5fe64f49c2d986d6ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec62472820000000000000000004b4b8c69a213b72547a209a1646fac7c50e91ce31a4ef520eb", 0xf0}, {&(0x7f0000004480)="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", 0x2f0}, {&(0x7f0000000400)}], 0x5) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0xa1ff) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200", 0x2000, &(0x7f0000000440)={&(0x7f0000004280)={0x50, 0x0, 0xfffffffffffffffd, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0x10, 0xffffffffffffffda, r5}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) 1m21.664742137s ago: executing program 6 (id=4912): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 1m21.463264759s ago: executing program 6 (id=4913): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000600)={0x0, 0xe7a9, 0x100, 0xfffa, 0x40024e}, &(0x7f00000001c0)=0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000100)}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0x20}, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r6, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 1m21.061744827s ago: executing program 6 (id=4919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 1m20.600238858s ago: executing program 34 (id=4919): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x30, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 11.384711005s ago: executing program 3 (id=5226): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getpeername(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058560f, &(0x7f0000000a40)=@multiplanar_mmap={0x4, 0x3, 0x4, 0x400, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x1, 0x6, 0x2, "d10fd561"}, 0xba, 0x1, {0x0}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000001080)) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180019001600010a00"/20], 0x78}}, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r6, &(0x7f0000001480)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x304, 0xfffffffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000014c0)=@newtaction={0x11a0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x118c, 0x1, [@m_ipt={0x34, 0x1a, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x58, 0xc, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xec, 0x20, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0x95, 0x6, "78eecaa209275119972ece92d2e88234b9706d227b2a1990c2f992e5abc79d597fc027585b2a522cbba2bbfd70572af8567f1ac5a6e5481a81de72a4d3833341dd6471dd4c2e672e8897a728399ac8a74c6279db2979b2a6718d193ae48042161bb00344ee79f3bef993b0ebcfa56777889cafa2e9d829ae9a3c3afaaaf9f70a7d5fa46e3ad32738204d8e94f4c600a9d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ipt={0x18c, 0x1e, 0x0, 0x0, {{0x8}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x6e, 0x6, {0x9c2, 'mangle\x00', 0x5, 0x9, "d2ff738b387b7f39b610c81e662ffd6c733ea643535c9b6f3ba567d05d62c341e67f5c94f4f8a309d9a650ecd5701d899001f883ce51de138bccc3309e80f145431e3b88"}}, @TCA_IPT_TARG={0x93, 0x6, {0x1, 'raw\x00', 0x4, 0xfff7, "b38cb18c9d90656d42006bd7a572746bed0ffd091e540e8d8294b7a233daf6995d85e38225ef7a7e4bfe310bf4bd789f725d98fd3f4b1ac0854308beda1dcab95080388de28d657e457e4604b60accaf783305eae6ef8090384c48d4fabdd235ae6d7fc818c4f592f3"}}]}, {0x5f, 0x6, "a33158033b353a0ee6c615a31664ea8a905cb4aa92ebd9a7d395653926208cf3c335f319ad972e67653fa9b54e8d9b628930696cf4df810cf089693bf751d59adfca8f1ee18b4caece040b16cb2d9573561d298f4327553d3095c5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0xddc, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3e, 0x6, {0x3, 'security\x00', 0x2, 0x4, "aa0c5d09f1fc22a0cd24fa4522c410e321496da6"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0xd62, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xa8, 0x1d, 0x0, 0x0, {{0x8}, {0x80, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x79, 0x6, {0x98, 'raw\x00', 0x1f, 0x26, "374cf76660b32ef74cf77b9ffe7f6bfbf5178692237ffdfcb310b13da6b966c705e4ab4efe4a16c41962f45abf219e56c0297164ac536ffe18646a20a5f435784b1b3d66afd04d36ea4652e27a3628"}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x11a0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24048880) recvmmsg$unix(r7, 0x0, 0x0, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 11.130788071s ago: executing program 3 (id=5227): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1b, 0x8032, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x6, "2a7c7363b4eb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000700)={0x20, 0x9, 0x5, "a0dc7fa8f8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000a80)={0x0, 0xf, 0x23, "9447e87524000527dd06cf828082a71f767f90b448f170a43bf2413bac5d902041c516"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.110662504s ago: executing program 3 (id=5245): socket$igmp(0x2, 0x3, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x4, 0x0, 0x10001}}, 0x30) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 5.898960652s ago: executing program 3 (id=5249): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0xc0ffffff}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.795301644s ago: executing program 4 (id=5250): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$sg(&(0x7f00000002c0), 0xa, 0x40000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 4.989426733s ago: executing program 7 (id=5251): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x14e7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6400}, 0x50) 4.938933239s ago: executing program 3 (id=5252): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x90800, 0x0) fcntl$notify(r0, 0x402, 0x8000000c) syz_open_dev$video(0x0, 0x3ff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000200), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x2) preadv2(r2, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/272, 0x110}], 0x1, 0x4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x4734}}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) mlock(&(0x7f0000f57000/0x3000)=nil, 0x3000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') 4.543450409s ago: executing program 7 (id=5253): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) 4.260570766s ago: executing program 3 (id=5255): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r4, 0xfffffffffffffc01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_io_uring_setup(0x49f, &(0x7f0000000600)={0x0, 0xe7a9, 0x100, 0xfffa, 0x40024e}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)=0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000380)={&(0x7f0000000100)}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2161, 0x1, {0x2}}) io_uring_enter(r6, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 4.225708522s ago: executing program 5 (id=5256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xffb) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500200600fe8000000000000000060000000000bb090000000000000000000800000000aa00004e223a86d413d2c0bf7bc5"], 0x0) 4.224849911s ago: executing program 7 (id=5257): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x12) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x0, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x0, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x6, 0xd, '\x00', 0x1}, {0xbc, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0x4, 0x3, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x28, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x4, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x8, '\x00', 0xe9}, {0xb, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x4}, {0x6f, 0x4, 0x1, '\x00', 0xe}, {0x7f, 0x2, 0x8, '\x00', 0x8}, {0x13, 0x7}, {0x1, 0x9, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xbd}, {0x3, 0x15, 0x2, '\x00', 0xc6}, {0x8, 0x9, 0x50, '\x00', 0x9}]}}) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0240f1000000000010007abfe648c657c928a7da39341bc906"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 4.161413252s ago: executing program 4 (id=5258): mkdirat(0xffffffffffffff9c, 0x0, 0x2) socket$unix(0x1, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='block_bio_complete\x00', r2, 0x0, 0x1}, 0x18) write$cgroup_int(r1, &(0x7f0000000040)=0x1c9, 0x12) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000fff00000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000780)=r7, 0x4) sendmsg$inet(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8d}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003000), 0xffffffffffffffff) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$packet(0x11, 0x2, 0x300) 4.100400964s ago: executing program 5 (id=5260): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000840)=ANY=[@ANYBLOB="140000000400000008000000bce8000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003f0400000000000000000000000000000000000000000000007181ef2cab268b6f52c0c66d2a"], 0x50) 3.611457063s ago: executing program 5 (id=5261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00fffe00000500100004"], 0x30}}, 0x0) 3.610406779s ago: executing program 7 (id=5263): socket$inet6(0xa, 0x2, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x84a200, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x200000c0) socket$inet6(0xa, 0x400000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fX~', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000e00,default_permissions,allow_other,blksize=0x0000000000000800,\x00']) read$FUSE(r2, &(0x7f000000e340)={0x2020, 0x0, 0x0}, 0x214) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0xb482b99aa34c35b3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000000)=""/50, 0x32) syz_fuse_handle_req(r2, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000300000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 3.589063618s ago: executing program 4 (id=5264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000019140)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x1, 0x6, 0x6, 0x10000000, 'syz0\x00', 0x1}, 0x0, [0x8, 0x2, 0x17ed, 0x23, 0x0, 0xb, 0x7, 0x3dac, 0xa5b, 0x4, 0x2, 0xfff, 0x6, 0x9, 0x7, 0x6, 0x299, 0x6, 0x7, 0x8000000000000000, 0x8000000000000001, 0x0, 0x15, 0xd3, 0x4, 0x1, 0x13, 0x2, 0x8, 0x9, 0x0, 0x0, 0x7fffffff, 0x6, 0x101, 0x8001, 0x8000000000000000, 0x85f9, 0x1, 0xffffffffffffffff, 0x2, 0x4379, 0xe, 0x10001, 0x0, 0x9, 0x8, 0x0, 0x5, 0xf, 0x1, 0x9d2, 0x401, 0x8, 0x3a50, 0xfff, 0x2, 0x3, 0x5, 0x8, 0x0, 0x4, 0x7, 0xdcb2, 0xffffffffffffffff, 0x1, 0xb, 0x3000, 0xffffffff80000001, 0x0, 0x3ff, 0xb, 0x7fff, 0xe4, 0x0, 0xf45, 0x0, 0xa, 0xffff, 0x5, 0x3, 0xa16, 0x10000, 0x6, 0x83fe, 0x6, 0x400, 0x0, 0x4, 0x0, 0x2, 0x5, 0x2c5, 0xff, 0x1000, 0x1, 0x3, 0x9, 0x9, 0x80000000, 0x335, 0x6, 0x5, 0x4, 0x7, 0x4, 0x0, 0x4, 0xfffffffffffffffb, 0x1b3, 0x5, 0x45d8, 0x10002, 0xffff, 0x7, 0x800001308, 0x9, 0x7f, 0x5c, 0x2, 0x9, 0x2, 0x5, 0x7ffeffff, 0x5, 0x24, 0x80000000, 0x87]}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 3.527416297s ago: executing program 5 (id=5265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="78030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3], 0x378}}, 0x8050) 2.575110206s ago: executing program 5 (id=5267): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r1, &(0x7f0000000040)=@known='security.apparmor\x00', &(0x7f0000000400)=""/4096, 0x1000) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, 0x3400, 0x1}) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) 2.441756689s ago: executing program 4 (id=5268): io_uring_setup(0x53b5, &(0x7f0000000280)={0x0, 0xbf6b, 0x1000, 0x2, 0x30f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(0x0, 0x8100, 0x31) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x9, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x3, 0x6, 0x80800001, 0x8001}, 0x81}}]}, {0x4}, {0xc, 0x7, {0xe4}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xac}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000000c0)) setuid(0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 971.343104ms ago: executing program 4 (id=5271): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nullb, 0xee00, &(0x7f0000000280)='.\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) (async) chdir(&(0x7f0000000240)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nullb, 0xee00, &(0x7f0000000280)='.\x00') (async) 954.732541ms ago: executing program 7 (id=5272): socket$kcm(0x10, 0x2, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0x2c9, 0x100000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x5f7dfad4abd9db53, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r8, &(0x7f0000001300)=[{{&(0x7f0000000280)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000500)="2136b2d2b41a36714e4ffe7a338a9d3f229b65c6e87d6745f144a7b038c2aebf8d16f82b98ca2c5ce9e1207cf5105c4da7f8665400d9eea7d580bebf5efc773971ca83e0cad0", 0x46}, {&(0x7f00000005c0)="4b3425f648325321c84a72bb434b2a91817dbfaef6ede0c6ee3288f6cc6fe16b796995a3700741afcbe587b72a484e4477532afa06b89772204c1415812525ef56a3fa70a40a3371a3343ce2fb961855ee8fd8068ccfd958289e6e3578debf11840875b46cd02e4f44fa74511f931e2517fc", 0x72}, {&(0x7f0000000640)="f34f0b85cc61c6caa81b3c3858345318717b056ac395efb03f837c9518b967eac46be460ab169e05f50c6574d6b8b27aa8ec622def61886c5a274052a0a57cc66340651a056c5a75b6875a8afaef9bd16ca968141a487e68d5ac7f614eda6a8b03146fc34219ed0931885b07a960dd549816643f03f9a2a279e32638fb5addb8b83ad2cd04d4cc99098961c2c332b65d46a6f438ad98ceb3c407cafb8c6b73364d305e0e0e71aff142d26aeed67939", 0xaf}, {&(0x7f0000001400)="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", 0x1c4}], 0x4, &(0x7f00000007c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r0, r1}}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x38, 0x4000090}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000880)="a468dda60b61b304241256c875bff511766fccc3d4f6ef17363317129e0e3be73f1bba79eeb36502f577252e20e35b6a5c75ba185ae65780a25bd4a206b171e0ae4903a0c88ea4a4eef6ef47793222068e799babc2a409a41106dfca89178ae4eb4aaf4d4023568e5c0cd7d10e92ae817391e3fc269095cb77fdd9e151acf6b8c33629aed7aa741c3d30ffec36a69f56698c66554b58add32092da8520e670fa0f3b0d3fbfe4d74ffce74775c7133b11f8c60d17c1cbd99476362815e8c9791fed649c0bf1", 0xc5}, {&(0x7f0000000980)="ba28c5029e922635ac0033ec7c535da731afbe46b121adea526fb4d9bba9a3fa820a3f314d042a27ae3b8cf58de3117f6e1b0d1ccc4eb123a016b5193c9611421e2de78f9dcc5d366e0c7cf7ee89c988b1a474a5a3e04bf826e5330eddc200219f923bc0737c63d4fda35bbd739056dee51bb02188fd9c13a42e43beec277f610a031e97d5bd0fb786a382b03997", 0x8e}, {&(0x7f0000000a80)="b8f17bb3ed696f37ec88a91c72964b777bf5b543c29719886d0dcae815bce4d36ab1c51c1da17c422597c87ab88a1b1f5c452b56ba22cef1e01eee825187f9c051843bc60ae1f729cadc4f1ba53e22316e5c431917f1f4bb2bf23ac8de6078ad646036b341441d2a1065e78245f492f6055dda04e8f43c284f2831fee84cfd370363fbfdebc842f8cd0fa89eba5b9a9327f79e2add5790cff3c063382ce679bcef5c9eff8ecea1f0cb8906", 0xab}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="2c003bc8ffff00000100000001000000", @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r7, @ANYRES32, @ANYRES32=r4, @ANYRES32=r10, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0x80}}, {{&(0x7f0000000bc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000c40)="b8ff7f5a78be52bea0b14e249f83b32064498d11ec9b667b0181673ba8fedfdf03b05d9f0b89cc7f8f8d93c37faad73542e6fb7e4e18b25bf999d1a97787fdf2fd3df1aed1392d77f4fe4cddc79ad117f481e77c26f575efaf99fd6ee8117071c5759ff4244a4f291138e65aa4fbdd3e6a79325d1f6dbc8585366fc961c2b8ae0e0d8c7817116c90cfe6ae87faa1b87352fdffdc73048a2e37f099a29c4231cf5f225b004b8e7c2d6eac18859bd8", 0xae}, {&(0x7f0000000d00)="327f48107ce260046424b13ba0c768fee34bd28822b259b99cbdac6017d96fd8ea9657c7b0f12593ca35b9c498aa5a3183703403fe68ab71264e4f15b41846012d45e84fdbbaaf2a2b74919b18ec77c0f95e9a7517454da67e0fd0be6bfe6463d13b166cbbdc7fa62f4f1a82d5f2c09d5c3816db754c0aefa6244786a124c413128d1fa02c295ebb50000f2653a77b90005a8cd42dfdce0b1a21cf458b2c2c36bb2a182e324331958bd40aec7f217499a5bb7ebe8fa12de12a4cebd758485dfa6e91118b6fc1cb1ec77ca9f2bd834a4b3561481a034127374a528c6ade", 0xdd}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="023230c8d6fb3d68a9c8929991407f51636cc4dbb273b6a484946cfbacae3e003f6ebfea89b1c52f768f9493be17fb5ea8882a47c03a1865f659cbd7cde66690c71a19b7", 0x44}, {&(0x7f0000000ec0)="a5a19c4028970ae87fa4c5e8f5888fc721810790776ada212b909e928fa20f502ca7a6840b06656572cec898aa0cc82b03603c09b800c7a8ecd598a9cc22896407bdc9a7dc0a86dd5d4d6989a416cdcdb118dbd489b47e018f4dd6272ba71d0fee0d5cee784f51be6f584518238648c0f24d6287ab4b4763f26306c65e118e27692d9339e42bb616a3d680f1e4e2e3af738d9f9f85bd27b6a81a240aa2ae4866f5", 0xa1}, {&(0x7f0000000f80)="4c0d570e9d9b57ef5159b28afc53c9f2c63147b3b060cc5f3ac008f4ca1467d1021b3785587d30aa24c722d804027be0871a78bda646d85c", 0x38}], 0x6, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r5, r0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r0, r1}}}], 0x40, 0x2400c844}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001080)="71623e86ad75efb1289c0f307967a4", 0xf}, {&(0x7f00000010c0)="9b4b99300f88f262", 0x8}, {&(0x7f0000001100)="c41f97387fc7a1dea50d3e8e1d6f4c869249c235060d25b2048eb6829851f66d25a326a3efa5943a0d4b13f5424ffada5c0b3ada48", 0x35}, {&(0x7f0000001140)="d90aa8546cdd205ee6d52bf89cb667cc825eb300981432fe31497f603de1f63e911d662ff949d38fec960e7a4b5f9b77aecac4b6aaa15ac2b150fa4582c68bd388dd5e9b6b55e2d83a55409407bd464fb48bc1613fb09c2cc48424ef7a2cd6f77b35e8053d9fc19bb8f8fe52009f035d2ed20c5bb6989f19fe27af9f1a346e398f1e0d8d45facfbc6e592d8b4db06c9e61b0d2fc81e4dbcdc565d9f2a1d3a6e849c8490ba6939cc6b6f8cfaf829ed8c51bdb79f854b101eb0b7b98a22f7a3ae455fe19f8e9d727956fc06f0072ee02dc614b293fa9f70a86d66160c0cf89af2083", 0xe1}, {&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000001240)="b3b5e5835180bd4920f94fab011594e5e28e", 0x12}], 0x6, 0x0, 0x0, 0x14}}], 0x4, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000700), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r0}}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x22}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r11, r12, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r12, r12, 0x2f, 0x202c, 0x4, @void, @void, @value=r13}, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0xb}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x100, 0x2, 0xfffffff8, 0x928, 0xfffffffffffffffd, r2}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) alarm(0x81) 891.326104ms ago: executing program 2 (id=5273): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4801000010000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff8000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) 890.854611ms ago: executing program 4 (id=5274): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a00)={0x8e, &(0x7f0000000740)={0x40, 0xa, 0x4, "57030007"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x0, 0x0, 0x18, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) (rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) (async, rerun: 64) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @private0, 0x20}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) (async, rerun: 32) syz_usb_connect(0x1, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7b2"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x155555555555562e, [{0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0202"]}, {0x51, &(0x7f0000000000)=@string={0x51, 0x3, "be83e6b585f237c8b34c3fb357cf9e04dc4e7c9279d6bf0d0bc6f2813ab5e36e53a18b858148b78fb4a67fb55a6aecbb9ada74c7160fe05b7db59f4df38c03d25248cd9ff86a2361a0406a7fedbb5f"}}]}) (rerun: 32) r9 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) sched_setaffinity(r9, 0x8, &(0x7f0000000080)) 842.123053ms ago: executing program 2 (id=5275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xa}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0xf000) 794.807754ms ago: executing program 2 (id=5276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000200000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 683.144658ms ago: executing program 5 (id=5277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe980}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000200)={0xfffffff8, [[0x5, 0x80000001, 0x40020, 0x0, 0x7fff, 0x3, 0xfffffffe, 0x206], [0x4, 0xfffffffe, 0x0, 0x0, 0x2, 0x940f, 0x0, 0x7], [0x0, 0x2, 0x5, 0x3, 0x100, 0x0, 0x1, 0x4571]], '\x00', [{0x0, 0x1, 0x1}, {0x2, 0x1}, {0x80, 0x80000}, {0x9, 0x4}, {0x2, 0xb}, {0x38}, {0xa5, 0x230d}, {}, {0x0, 0x1}, {0x4000000}, {0x80000000, 0x4}, {0x0, 0x1}], '\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5000000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) socket$packet(0x11, 0x2, 0x300) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$sndseq(r5, &(0x7f0000000300)=[{0x53, 0x81, 0x1, 0x5, @tick=0x7, {0x1, 0x91}, {0x3, 0x9}, @raw32={[0xd6, 0x5a1, 0x4]}}, {0x7, 0xc5, 0xf7, 0x5, @time={0x637, 0x8000}, {0x81, 0xa}, {0xfe, 0x6}, @raw8={"8da2de750c26a1b553d2c32a"}}, {0x1, 0xb4, 0xc, 0x3, @time={0x8, 0xd}, {0x9, 0xf}, {0x1, 0x4d}, @connect={{0x8b, 0x2}, {0x9, 0xef}}}], 0x54) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6}, 0x10) 668.626477ms ago: executing program 2 (id=5278): socket(0x1e, 0x1, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x5, 0x33, &(0x7f0000000480)=""/51, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x29, r7, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x9, 0x7, 0x4}, 0x10, 0x0, r6, 0x0, &(0x7f00000009c0), &(0x7f0000000a00), 0x10, 0x2}, 0x94) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@binder={0x73622a85, 0x2000, 0x2}, @fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x3d}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 530.920532ms ago: executing program 2 (id=5279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) shmctl$IPC_RMID(0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000070000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) 11.331507ms ago: executing program 2 (id=5280): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08007700ff01000054002d801e00"], 0x94}, 0x1, 0x100000000000000, 0x0, 0x24008010}, 0x4000004) 0s ago: executing program 7 (id=5281): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2270469, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x14002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x202040, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r1}}, './file0\x00'}) kernel console output (not intermixed with test programs): [ 1337.493148][ T30] audit: type=1400 audit(1760230907.551:4796): avc: denied { bind } for pid=23380 comm="syz.3.4709" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1337.515629][T17384] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1337.536137][T17384] usb 6-1: device descriptor read/8, error -71 [ 1337.563313][ T30] audit: type=1400 audit(1760230907.551:4797): avc: denied { name_bind } for pid=23380 comm="syz.3.4709" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1337.605179][ T30] audit: type=1400 audit(1760230907.551:4798): avc: denied { node_bind } for pid=23380 comm="syz.3.4709" saddr=ff02::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1337.647086][ T30] audit: type=1400 audit(1760230907.701:4799): avc: denied { mount } for pid=23398 comm="syz.6.4715" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1337.658094][T17384] usb usb6-port1: unable to enumerate USB device [ 1337.696809][ T30] audit: type=1400 audit(1760230907.731:4800): avc: denied { read write } for pid=23398 comm="syz.6.4715" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.730451][T23401] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4715'. [ 1337.769928][ T30] audit: type=1400 audit(1760230907.731:4801): avc: denied { open } for pid=23398 comm="syz.6.4715" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.828101][ T30] audit: type=1400 audit(1760230907.741:4802): avc: denied { map } for pid=23398 comm="syz.6.4715" path="/dev/nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1337.879283][ T30] audit: type=1400 audit(1760230907.891:4803): avc: denied { unmount } for pid=20837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1338.488383][T23383] veth0_to_bridge: left promiscuous mode [ 1338.507015][T23412] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1338.822040][T23416] netlink: 'syz.4.4718': attribute type 3 has an invalid length. [ 1338.830066][T23416] netlink: 'syz.4.4718': attribute type 3 has an invalid length. [ 1339.157849][T23420] loop6: detected capacity change from 0 to 524288000 [ 1339.955902][T10135] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1340.095715][T23434] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1340.158962][T10135] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1340.193462][T10135] usb 5-1: config 0 has no interface number 0 [ 1340.205958][T10135] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1340.221147][T10135] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1340.237526][T10135] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1340.247024][T10135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.257696][T10135] usb 5-1: Product: syz [ 1340.262046][T10135] usb 5-1: Manufacturer: syz [ 1340.266960][T23444] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4728'. [ 1340.276605][T10135] usb 5-1: SerialNumber: syz [ 1340.288696][T10135] usb 5-1: config 0 descriptor?? [ 1340.505303][T23413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1340.515490][T10135] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1340.517915][T17384] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1340.533110][T10135] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1340.571649][T10135] usb 5-1: USB disconnect, device number 104 [ 1340.667818][T17384] usb 4-1: device descriptor read/64, error -71 [ 1341.445616][T17384] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1341.598042][T17384] usb 4-1: device descriptor read/64, error -71 [ 1341.705884][T17384] usb usb4-port1: attempt power cycle [ 1342.089333][T17384] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1342.148509][T17384] usb 4-1: device descriptor read/8, error -71 [ 1342.417047][T17384] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1342.443901][T23490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4742'. [ 1342.447138][T17384] usb 4-1: device descriptor read/8, error -71 [ 1342.501021][T23492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1342.554448][T23492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1342.589837][T17384] usb usb4-port1: unable to enumerate USB device [ 1342.816097][T10135] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1342.816704][T23500] netlink: 'syz.5.4746': attribute type 3 has an invalid length. [ 1342.831723][T23500] netlink: 'syz.5.4746': attribute type 3 has an invalid length. [ 1343.115700][T10151] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1343.127170][T10135] usb 7-1: config 7 has an invalid interface number: 101 but max is 0 [ 1343.138963][T10135] usb 7-1: config 7 has no interface number 0 [ 1343.150775][T10135] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1343.160747][T10135] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.171797][T10135] usb 7-1: Product: syz [ 1343.178393][T10135] usb 7-1: Manufacturer: syz [ 1343.185304][T10135] usb 7-1: SerialNumber: syz [ 1343.276965][T10151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.288150][T10151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.297945][T10151] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1343.311185][T10151] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1343.320275][T10151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.328521][T17384] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1343.339362][T10151] usb 5-1: config 0 descriptor?? [ 1343.410401][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1343.410418][ T30] audit: type=1400 audit(1760230913.471:4814): avc: denied { write } for pid=23503 comm="syz.3.4747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1343.499922][T17384] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1343.508283][T17384] usb 6-1: config 0 has no interface number 0 [ 1343.514404][T17384] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1343.525684][T17384] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1343.537650][T17384] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1343.548631][T17384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.558284][T17384] usb 6-1: Product: syz [ 1343.562720][T17384] usb 6-1: Manufacturer: syz [ 1343.567408][T17384] usb 6-1: SerialNumber: syz [ 1343.574561][T17384] usb 6-1: config 0 descriptor?? [ 1343.764321][T10151] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1343.787741][T17384] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1343.796099][T17384] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1343.805945][T23498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1343.818502][T17384] usb 6-1: USB disconnect, device number 41 [ 1343.952108][T10135] as10x_usb: device has been detected [ 1343.957903][T10135] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1344.063569][T10135] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1344.076836][ T30] audit: type=1400 audit(1760230914.131:4815): avc: denied { firmware_load } for pid=10135 comm="kworker/1:11" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1344.306391][T10135] as10x_usb: error during firmware upload part1 [ 1344.306824][T23511] siw: device registration error -23 [ 1344.313199][T10135] Registered device Elgato EyeTV DTT Deluxe [ 1344.592759][T10135] usb 7-1: USB disconnect, device number 10 [ 1344.662966][T10135] Unregistered device Elgato EyeTV DTT Deluxe [ 1344.675284][T10135] as10x_usb: device has been disconnected [ 1345.257461][T10151] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1345.426789][T10151] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.435641][T10135] usb 5-1: reset high-speed USB device number 105 using dummy_hcd [ 1345.443748][T10151] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1345.543768][T10151] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1345.625644][T10151] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1345.672603][T10151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.715148][T23534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4755'. [ 1345.766406][T23533] netlink: 'syz.5.4754': attribute type 1 has an invalid length. [ 1346.032386][T10151] usb 4-1: Product: syz [ 1346.071057][T10151] usb 4-1: Manufacturer: syz [ 1346.105766][T10151] usb 4-1: SerialNumber: syz [ 1346.364169][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1346.373124][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1346.535029][T23545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1346.809987][T23546] netlink: 'syz.2.4759': attribute type 3 has an invalid length. [ 1346.817892][T23546] netlink: 'syz.2.4759': attribute type 3 has an invalid length. [ 1346.867047][T23544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1347.344770][ T30] audit: type=1400 audit(1760230917.401:4816): avc: denied { ioctl } for pid=23547 comm="syz.5.4760" path="/dev/fb0" dev="devtmpfs" ino=628 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1347.387452][T23517] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 1347.405365][T10151] usb 4-1: USB disconnect, device number 107 [ 1347.473987][ T30] audit: type=1400 audit(1760230917.521:4817): avc: denied { read } for pid=23562 comm="syz.6.4764" path="socket:[84954]" dev="sockfs" ino=84954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1347.929027][T23574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4767'. [ 1348.048691][T10132] usb 5-1: USB disconnect, device number 105 [ 1348.232528][T23577] netlink: 'syz.4.4768': attribute type 10 has an invalid length. [ 1348.286403][T23578] netlink: 'syz.4.4768': attribute type 10 has an invalid length. [ 1348.315512][T23577] bond0: (slave dummy0): Releasing backup interface [ 1348.323207][ T30] audit: type=1400 audit(1760230918.381:4818): avc: denied { execute_no_trans } for pid=23579 comm="syz.2.4769" path="/402/file2" dev="tmpfs" ino=2131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1348.364850][T23577] team0: Port device dummy0 added [ 1348.379967][T23582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4770'. [ 1348.790880][T23595] fuse: Bad value for 'fd' [ 1348.810933][T23594] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4774'. [ 1349.051234][T23601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1349.644449][ T30] audit: type=1400 audit(1760230919.701:4819): avc: denied { transfer } for pid=23609 comm="syz.6.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1350.198454][T23632] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1350.220477][T23630] fuse: Bad value for 'fd' [ 1350.368619][T23640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1351.666970][T23650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4794'. [ 1352.353988][T23669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4797'. [ 1353.274176][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4805'. [ 1353.615647][T10132] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1353.679740][T23680] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1353.690770][T23680] random: crng reseeded on system resumption [ 1353.708376][ T30] audit: type=1400 audit(1760230923.751:4820): avc: denied { write } for pid=23679 comm="syz.3.4804" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1353.778287][T23691] fuse: Bad value for 'fd' [ 1353.813741][ T30] audit: type=1400 audit(1760230923.751:4821): avc: denied { open } for pid=23679 comm="syz.3.4804" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1353.839220][T10132] usb 5-1: Using ep0 maxpacket: 32 [ 1353.847414][T10132] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.861627][T10132] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1353.893999][ T30] audit: type=1400 audit(1760230923.761:4822): avc: denied { ioctl } for pid=23679 comm="syz.3.4804" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1353.928313][T10132] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1353.944380][T10132] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 1.00 [ 1353.997491][T10132] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.030290][T10132] usb 5-1: config 0 descriptor?? [ 1354.035849][ T30] audit: type=1400 audit(1760230924.081:4823): avc: denied { create } for pid=23698 comm="syz.6.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1354.118313][ T30] audit: type=1400 audit(1760230924.181:4824): avc: denied { name_connect } for pid=23698 comm="syz.6.4811" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1354.415838][ T30] audit: type=1400 audit(1760230924.211:4825): avc: denied { listen } for pid=23698 comm="syz.6.4811" lport=59729 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1354.686551][T10132] hid-retrode 0003:0403:97C1.002B: unknown main item tag 0x0 [ 1354.698288][T10132] hid-retrode 0003:0403:97C1.002B: unknown main item tag 0x0 [ 1354.706798][T23710] geneve2: entered promiscuous mode [ 1354.712315][T23710] geneve2: entered allmulticast mode [ 1354.722200][ T30] audit: type=1400 audit(1760230924.521:4826): avc: denied { read } for pid=23702 comm="syz.5.4812" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1354.769112][T10132] hid-retrode 0003:0403:97C1.002B: unknown main item tag 0x0 [ 1354.777022][T10132] hid-retrode 0003:0403:97C1.002B: unknown main item tag 0x0 [ 1354.810078][T10132] hid-retrode 0003:0403:97C1.002B: unknown main item tag 0x0 [ 1354.820097][ T30] audit: type=1400 audit(1760230924.521:4827): avc: denied { open } for pid=23702 comm="syz.5.4812" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1354.858417][T10132] hid-retrode 0003:0403:97C1.002B: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 1354.902808][T10132] usb 5-1: USB disconnect, device number 106 [ 1354.909032][ T30] audit: type=1400 audit(1760230924.531:4828): avc: denied { ioctl } for pid=23702 comm="syz.5.4812" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1355.310535][T23716] syzkaller0: entered promiscuous mode [ 1355.384020][T23717] netdevsim netdevsim4: Direct firmware load for ( failed with error -2 [ 1355.419244][ T30] audit: type=1400 audit(1760230925.421:4829): avc: denied { name_bind } for pid=23702 comm="syz.5.4812" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1355.495158][ T30] audit: type=1400 audit(1760230925.431:4830): avc: denied { mount } for pid=23715 comm="syz.4.4814" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1355.588624][T23717] netdevsim netdevsim4: Falling back to sysfs fallback for: ( [ 1355.596231][ T30] audit: type=1400 audit(1760230925.651:4831): avc: denied { firmware_load } for pid=23715 comm="syz.4.4814" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1356.056919][ T30] audit: type=1400 audit(1760230925.651:4832): avc: denied { unmount } for pid=23715 comm="syz.4.4814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1356.178880][T23729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4818'. [ 1356.225364][T23732] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1356.475639][ T30] audit: type=1400 audit(1760230926.531:4833): avc: denied { ioctl } for pid=23735 comm="syz.5.4822" path="socket:[86294]" dev="sockfs" ino=86294 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1356.523463][ T30] audit: type=1400 audit(1760230926.531:4834): avc: denied { bind } for pid=23735 comm="syz.5.4822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1358.158371][ T30] audit: type=1400 audit(1760230928.221:4835): avc: denied { setopt } for pid=23755 comm="syz.3.4827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1358.468035][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1358.483472][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1358.518984][T23763] netlink: 'syz.4.4829': attribute type 21 has an invalid length. [ 1358.527696][T23763] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1360.411152][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1360.411171][ T30] audit: type=1400 audit(1760230929.941:4844): avc: denied { bind } for pid=23767 comm="syz.3.4831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1360.436500][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.476548][ T30] audit: type=1326 audit(1760230930.541:4845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.569648][ T30] audit: type=1326 audit(1760230930.541:4846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.636582][ T52] Bluetooth: hci2: unexpected event for opcode 0x202f [ 1360.643523][ T30] audit: type=1400 audit(1760230930.651:4847): avc: denied { write } for pid=23773 comm="syz.3.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1360.663226][ T30] audit: type=1326 audit(1760230930.701:4848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.686598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.693253][ T30] audit: type=1326 audit(1760230930.701:4849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.716899][ T30] audit: type=1326 audit(1760230930.701:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.740343][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.777896][ T30] audit: type=1326 audit(1760230930.731:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.803860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.830415][ T30] audit: type=1326 audit(1760230930.731:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.853934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1360.860075][ T30] audit: type=1326 audit(1760230930.731:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23765 comm="syz.5.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1360.889157][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.011540][T23763] netlink: 'syz.4.4829': attribute type 5 has an invalid length. [ 1361.019781][T23763] netlink: 'syz.4.4829': attribute type 6 has an invalid length. [ 1361.029637][T23763] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4829'. [ 1361.547568][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.553940][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.611144][T10151] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1361.867593][T10151] usb 5-1: config 0 has an invalid interface number: 127 but max is 1 [ 1361.876235][T10151] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1361.891719][T10151] usb 5-1: config 0 has no interface number 1 [ 1361.917554][T10151] usb 5-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1362.065456][T10151] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 1362.125917][T10151] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1362.260981][T10151] usb 5-1: New USB device strings: Mfr=1, Product=129, SerialNumber=0 [ 1362.345835][T23804] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1362.833463][T10151] usb 5-1: Product: syz [ 1362.867656][T10151] usb 5-1: Manufacturer: syz [ 1362.937141][T23811] netlink: 'syz.5.4843': attribute type 3 has an invalid length. [ 1362.945171][T23811] netlink: 'syz.5.4843': attribute type 3 has an invalid length. [ 1363.184087][T10151] usb 5-1: config 0 descriptor?? [ 1363.232298][T23810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4845'. [ 1363.256868][T10151] usb-storage 5-1:0.127: USB Mass Storage device detected [ 1363.277588][T10151] usb-storage 5-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 1363.329744][T10151] usbhid 5-1:0.127: couldn't find an input interrupt endpoint [ 1363.345444][T10151] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1363.353931][T10151] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1363.477322][T10151] usb 5-1: USB disconnect, device number 107 [ 1363.518663][T23820] netlink: 'syz.2.4847': attribute type 2 has an invalid length. [ 1363.625609][T10131] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1363.777369][T10131] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1363.785885][T10131] usb 6-1: config 0 has no interface number 0 [ 1363.792225][T10131] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1363.803608][T10131] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1363.821434][T10131] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1363.831000][T10131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.839561][T10131] usb 6-1: Product: syz [ 1363.843959][T10131] usb 6-1: Manufacturer: syz [ 1363.849087][T10131] usb 6-1: SerialNumber: syz [ 1363.873368][T10131] usb 6-1: config 0 descriptor?? [ 1364.049529][T23827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4850'. [ 1364.084596][T23806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1364.094682][T10131] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1364.117152][T10131] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1364.145414][T23833] bond2 (unregistering): Released all slaves [ 1364.146798][T10131] usb 6-1: USB disconnect, device number 42 [ 1364.181069][T23836] netlink: 'syz.2.4852': attribute type 3 has an invalid length. [ 1364.190086][T23836] netlink: 'syz.2.4852': attribute type 3 has an invalid length. [ 1364.244589][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1364.294268][T23838] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1364.307412][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1364.395644][T23844] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1365.347220][T23868] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1365.602100][T23866] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4862'. [ 1365.717605][T23872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4864'. [ 1365.729223][T23875] binder: 23873:23875 ioctl 541b 0 returned -22 [ 1366.085748][T10131] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1366.121000][T23883] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1366.575783][T10131] usb 6-1: Using ep0 maxpacket: 32 [ 1366.584661][T10131] usb 6-1: config 1 has an invalid descriptor of length 51, skipping remainder of the config [ 1366.619001][T10131] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1366.643472][T10131] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1366.671357][T10131] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1366.683485][T10131] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8256, setting to 1024 [ 1366.698538][T10131] usb 6-1: config 1 interface 1 has no altsetting 0 [ 1366.717076][T10131] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1366.740687][T10131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.748842][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 1366.748854][ T30] audit: type=1326 audit(1760230936.801:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1366.794352][T10131] usb 6-1: Product: syz [ 1366.803198][T10131] usb 6-1: Manufacturer: syz [ 1366.809336][T10131] usb 6-1: SerialNumber: syz [ 1366.847156][ T30] audit: type=1326 audit(1760230936.801:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1366.885822][ T30] audit: type=1326 audit(1760230936.801:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1366.922790][ T30] audit: type=1326 audit(1760230936.811:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1366.965852][ T30] audit: type=1326 audit(1760230936.811:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1366.998251][ T30] audit: type=1326 audit(1760230936.811:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1367.023468][ T30] audit: type=1326 audit(1760230936.811:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1367.126217][T10131] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1367.134136][T10131] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1367.195594][T10132] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1367.212398][T10131] usb 6-1: USB disconnect, device number 43 [ 1367.225162][T23845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1367.348191][T10132] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.388895][ T30] audit: type=1326 audit(1760230937.441:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1367.416418][T10132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1367.428094][T10132] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1367.730775][ T30] audit: type=1326 audit(1760230937.441:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1367.757189][T10132] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1367.772638][T10132] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1367.782040][T10132] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1367.784351][ T30] audit: type=1326 audit(1760230937.841:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23894 comm="syz.3.4873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1367.815197][T10132] usb 7-1: Manufacturer: syz [ 1367.841852][T10132] usb 7-1: config 0 descriptor?? [ 1368.715638][T10132] rc_core: IR keymap rc-hauppauge not found [ 1368.729911][T10132] Registered IR keymap rc-empty [ 1368.746534][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1368.775998][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1368.817022][T10132] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1368.830793][T10132] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input73 [ 1369.002555][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1369.026356][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1369.125275][T23928] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1369.622270][T23930] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1369.893051][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.060086][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.126275][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.149282][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.186282][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.206683][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.244416][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.261232][T23939] netlink: 'syz.3.4885': attribute type 3 has an invalid length. [ 1370.269338][T23939] netlink: 'syz.3.4885': attribute type 3 has an invalid length. [ 1370.310000][T10132] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1370.476272][T10131] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1370.589350][T10132] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1370.590237][T23947] siw: device registration error -23 [ 1370.603922][T10132] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1371.129465][T10132] usb 7-1: USB disconnect, device number 11 [ 1371.191738][T23952] netlink: 'syz.6.4890': attribute type 10 has an invalid length. [ 1371.207813][T23952] team0: Port device dummy0 added [ 1371.217181][T23952] netlink: 'syz.6.4890': attribute type 10 has an invalid length. [ 1371.330515][T23952] team0: Port device dummy0 removed [ 1371.341002][T10131] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1371.815179][T23952] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1371.824723][T10131] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1371.841432][T10131] usb 5-1: can't read configurations, error -71 [ 1371.851855][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1371.851873][ T30] audit: type=1326 audit(1760230941.911:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1371.882889][ T30] audit: type=1326 audit(1760230941.911:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1371.907244][T15392] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 1371.911320][ T30] audit: type=1326 audit(1760230941.941:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.031115][T23959] netlink: 'syz.2.4892': attribute type 3 has an invalid length. [ 1372.039240][T23959] netlink: 'syz.2.4892': attribute type 3 has an invalid length. [ 1372.047177][ T30] audit: type=1326 audit(1760230941.941:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.074601][ T30] audit: type=1326 audit(1760230941.941:5200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.502719][ T30] audit: type=1326 audit(1760230941.941:5201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.531884][ T30] audit: type=1326 audit(1760230941.941:5202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.579308][T15392] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1372.587857][T15392] usb 4-1: config 0 has no interface number 0 [ 1372.594141][T15392] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1372.605492][T15392] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1372.609442][ T30] audit: type=1326 audit(1760230942.671:5203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.639746][ T30] audit: type=1326 audit(1760230942.671:5204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.642513][T15392] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1372.669291][ T30] audit: type=1326 audit(1760230942.721:5205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23956 comm="syz.5.4891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1372.713559][T15392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.785050][T15392] usb 4-1: Product: syz [ 1372.789369][T15392] usb 4-1: Manufacturer: syz [ 1372.794073][T15392] usb 4-1: SerialNumber: syz [ 1372.859918][T23970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4895'. [ 1373.737165][T23934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1373.890713][T15392] usb 4-1: config 0 descriptor?? [ 1373.896855][T15392] usb 4-1: can't set config #0, error -71 [ 1373.905886][T15392] usb 4-1: USB disconnect, device number 108 [ 1374.644285][T23988] FAULT_INJECTION: forcing a failure. [ 1374.644285][T23988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.657877][T23988] CPU: 1 UID: 0 PID: 23988 Comm: syz.4.4900 Not tainted syzkaller #0 PREEMPT(full) [ 1374.657903][T23988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1374.657914][T23988] Call Trace: [ 1374.657923][T23988] [ 1374.657930][T23988] dump_stack_lvl+0x16c/0x1f0 [ 1374.657954][T23988] should_fail_ex+0x512/0x640 [ 1374.657979][T23988] strncpy_from_user+0x3b/0x2e0 [ 1374.658001][T23988] getname_flags.part.0+0x8f/0x550 [ 1374.658032][T23988] getname_flags+0x93/0xf0 [ 1374.658050][T23988] io_linkat_prep+0x25a/0x3f0 [ 1374.658076][T23988] io_submit_sqes+0x852/0x2710 [ 1374.658118][T23988] __do_sys_io_uring_enter+0xd69/0x1630 [ 1374.658147][T23988] ? __pfx___schedule+0x10/0x10 [ 1374.658175][T23988] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1374.658202][T23988] ? irqentry_exit+0x3b/0x90 [ 1374.658222][T23988] ? ksys_write+0x1ac/0x250 [ 1374.658251][T23988] do_syscall_64+0xcd/0x4e0 [ 1374.658271][T23988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.658290][T23988] RIP: 0033:0x7fcfd478eec9 [ 1374.658305][T23988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.658322][T23988] RSP: 002b:00007fcfd56ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1374.658340][T23988] RAX: ffffffffffffffda RBX: 00007fcfd49e6180 RCX: 00007fcfd478eec9 [ 1374.658352][T23988] RDX: 0000000000000483 RSI: 000000000000351e RDI: 0000000000000005 [ 1374.658363][T23988] RBP: 00007fcfd56ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.658374][T23988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.658385][T23988] R13: 00007fcfd49e6218 R14: 00007fcfd49e6180 R15: 00007fff210a2c48 [ 1374.658419][T23988] [ 1374.890121][T23964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1374.985205][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1374.998100][T23991] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1375.079932][T23991] netlink: 'syz.6.4901': attribute type 21 has an invalid length. [ 1375.088039][T23991] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1375.097925][T23991] netlink: 'syz.6.4901': attribute type 5 has an invalid length. [ 1375.105811][T23991] netlink: 'syz.6.4901': attribute type 6 has an invalid length. [ 1375.115036][T23991] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4901'. [ 1375.497440][T23999] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1376.224603][T24012] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1376.224603][T24012] The task syz.2.4907 (24012) triggered the difference, watch for misbehavior. [ 1376.634403][T24023] wlan0 speed is unknown, defaulting to 1000 [ 1376.859619][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 1376.859635][ T30] audit: type=1400 audit(1760230946.921:5382): avc: denied { mounton } for pid=24027 comm="syz.6.4912" path="/160/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1377.285185][T24041] fuse: Bad value for 'fd' [ 1377.458028][T24046] netlink: 'syz.2.4921': attribute type 6 has an invalid length. [ 1377.509357][T24047] netlink: 'syz.2.4921': attribute type 6 has an invalid length. [ 1377.582828][ T6974] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.583448][T24051] binder: BINDER_SET_CONTEXT_MGR already set [ 1377.613715][T24051] binder: 24048:24051 ioctl 4018620d 200000004a80 returned -16 [ 1377.831371][ T6974] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.331029][T24065] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4923'. [ 1378.513223][ T6974] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.844667][ T6974] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.868776][ T30] audit: type=1326 audit(1760230948.921:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1378.904580][ T30] audit: type=1326 audit(1760230948.921:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1378.938725][T24061] wlan0 speed is unknown, defaulting to 1000 [ 1378.945438][T18213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1378.957799][T18213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1378.971923][ T30] audit: type=1326 audit(1760230948.921:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1378.997930][ T30] audit: type=1326 audit(1760230948.921:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1379.002827][T18213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1379.037965][ T30] audit: type=1326 audit(1760230948.921:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1379.063537][ T30] audit: type=1326 audit(1760230948.921:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1379.087887][ T30] audit: type=1326 audit(1760230948.921:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1379.106647][T18213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1379.112206][ T30] audit: type=1326 audit(1760230948.921:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24076 comm="syz.2.4929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1379.119450][T18213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1379.215793][ T30] audit: type=1400 audit(1760230948.951:5391): avc: denied { read } for pid=24079 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1379.254927][T24083] FAULT_INJECTION: forcing a failure. [ 1379.254927][T24083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.312800][T24083] CPU: 0 UID: 0 PID: 24083 Comm: syz.4.4931 Not tainted syzkaller #0 PREEMPT(full) [ 1379.312830][T24083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1379.312841][T24083] Call Trace: [ 1379.312848][T24083] [ 1379.312855][T24083] dump_stack_lvl+0x16c/0x1f0 [ 1379.312878][T24083] should_fail_ex+0x512/0x640 [ 1379.312911][T24083] _copy_from_user+0x2e/0xd0 [ 1379.312934][T24083] __sys_bpf+0x248/0x4980 [ 1379.312956][T24083] ? __pfx___sys_bpf+0x10/0x10 [ 1379.312973][T24083] ? find_held_lock+0x2b/0x80 [ 1379.313006][T24083] ? find_held_lock+0x2b/0x80 [ 1379.313038][T24083] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 1379.313071][T24083] ? fput+0x9b/0xd0 [ 1379.313096][T24083] ? ksys_write+0x1ac/0x250 [ 1379.313114][T24083] ? __pfx_ksys_write+0x10/0x10 [ 1379.313137][T24083] __x64_sys_bpf+0x78/0xc0 [ 1379.313153][T24083] ? lockdep_hardirqs_on+0x7c/0x110 [ 1379.313180][T24083] do_syscall_64+0xcd/0x4e0 [ 1379.313200][T24083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.313218][T24083] RIP: 0033:0x7fcfd478eec9 [ 1379.313234][T24083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.313252][T24083] RSP: 002b:00007fcfd56f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1379.313270][T24083] RAX: ffffffffffffffda RBX: 00007fcfd49e5fa0 RCX: 00007fcfd478eec9 [ 1379.313281][T24083] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 1379.313292][T24083] RBP: 00007fcfd56f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.313303][T24083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.313314][T24083] R13: 00007fcfd49e6038 R14: 00007fcfd49e5fa0 R15: 00007fff210a2c48 [ 1379.313338][T24083] [ 1379.866558][T15392] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1380.125745][T10131] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1380.205648][T15392] usb 6-1: device descriptor read/64, error -71 [ 1380.251348][ T6974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.262248][ T6974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.273645][ T6974] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1380.285086][ T6974] bond0 (unregistering): Released all slaves [ 1380.306241][T24079] wlan0 speed is unknown, defaulting to 1000 [ 1380.310230][T10131] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1380.326116][T10131] usb 5-1: not running at top speed; connect to a high speed hub [ 1380.335825][T10131] usb 5-1: config 56 interface 0 altsetting 224 endpoint 0x86 has invalid maxpacket 512, setting to 64 [ 1380.347833][T10131] usb 5-1: config 56 interface 0 has no altsetting 0 [ 1380.407623][T10131] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=96.21 [ 1380.432813][T10131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.442962][T10131] usb 5-1: Product: syz [ 1380.447331][T15392] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1380.455118][T10131] usb 5-1: Manufacturer: syz [ 1380.460201][T10131] usb 5-1: SerialNumber: syz [ 1380.472038][T24088] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1380.586230][T15392] usb 6-1: device descriptor read/64, error -71 [ 1380.709278][T24079] chnl_net:caif_netlink_parms(): no params data found [ 1380.769345][T15392] usb usb6-port1: attempt power cycle [ 1380.786698][T24088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.799732][T24088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.821341][T10131] adutux 5-1:56.0: interrupt endpoints not found [ 1381.111668][T10131] usb 5-1: USB disconnect, device number 110 [ 1381.126595][ T6974] hsr_slave_0: left promiscuous mode [ 1381.133040][ T6974] hsr_slave_1: left promiscuous mode [ 1381.141368][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.153622][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.165102][ T6974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.174018][ T52] Bluetooth: hci0: command tx timeout [ 1381.181616][ T6974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1381.201572][ T6974] batadv_slave_1: left promiscuous mode [ 1381.207548][ T6974] veth1_macvtap: left promiscuous mode [ 1381.213082][ T6974] veth0_macvtap: left promiscuous mode [ 1381.218967][ T6974] veth1_vlan: left promiscuous mode [ 1381.224274][ T6974] veth0_vlan: left promiscuous mode [ 1381.376145][T15392] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1381.406207][T15392] usb 6-1: device descriptor read/8, error -71 [ 1381.436555][T10132] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1381.656060][T10132] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1381.665191][T10132] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.696430][T15392] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1381.721296][T10132] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1381.745114][T15392] usb 6-1: device descriptor read/8, error -71 [ 1381.753397][T10132] usb 4-1: config 1 has no interface number 1 [ 1381.762960][T10132] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1381.786489][T10132] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 1381.797530][T10132] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1381.837321][T10132] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1381.873653][T15392] usb usb6-port1: unable to enumerate USB device [ 1381.880123][T10132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.889837][T10132] usb 4-1: Product: syz [ 1381.894472][T10132] usb 4-1: Manufacturer: syz [ 1381.922092][T10132] usb 4-1: SerialNumber: syz [ 1382.162176][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.171099][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.190758][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.208549][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.217972][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.226731][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.240319][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.251721][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.260571][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1382.276368][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1382.676758][T10132] usb 4-1: USB disconnect, device number 109 [ 1382.694840][ T6974] team0 (unregistering): Port device team_slave_1 removed [ 1382.784057][ T30] kauditd_printk_skb: 177 callbacks suppressed [ 1382.784078][ T30] audit: type=1400 audit(1760230952.841:5569): avc: denied { ioctl } for pid=24128 comm="syz.4.4944" path="socket:[86903]" dev="sockfs" ino=86903 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1382.820397][ T6974] team0 (unregistering): Port device team_slave_0 removed [ 1383.257372][ T52] Bluetooth: hci0: command tx timeout [ 1384.039475][T24143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.149119][T24143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.150342][T24145] netlink: 'syz.4.4947': attribute type 10 has an invalid length. [ 1384.235715][ T30] audit: type=1400 audit(1760230954.211:5570): avc: denied { bind } for pid=24140 comm="syz.4.4947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1384.477140][T10151] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1384.757442][T10151] usb 4-1: config 11 has an invalid interface number: 198 but max is 3 [ 1384.882811][T10151] usb 4-1: config 11 has an invalid interface number: 102 but max is 3 [ 1384.900622][T10151] usb 4-1: config 11 has an invalid interface number: 116 but max is 3 [ 1384.915316][T10151] usb 4-1: config 11 contains an unexpected descriptor of type 0x2, skipping [ 1384.924770][T10151] usb 4-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 1384.933692][T10151] usb 4-1: config 11 has an invalid interface number: 180 but max is 3 [ 1384.942457][T10151] usb 4-1: config 11 contains an unexpected descriptor of type 0x1, skipping [ 1384.953050][T10151] usb 4-1: config 11 has no interface number 0 [ 1384.959390][T10151] usb 4-1: config 11 has no interface number 1 [ 1384.965677][T10151] usb 4-1: config 11 has no interface number 2 [ 1384.971942][T10151] usb 4-1: config 11 has no interface number 3 [ 1384.979174][T10151] usb 4-1: config 11 interface 102 altsetting 64 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1384.990560][T10151] usb 4-1: config 11 interface 102 altsetting 64 has a duplicate endpoint with address 0x8, skipping [ 1385.002720][T10151] usb 4-1: config 11 interface 102 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 1385.017803][T10151] usb 4-1: config 11 interface 102 altsetting 64 endpoint 0x6 has invalid maxpacket 1935, setting to 64 [ 1385.029295][T10151] usb 4-1: config 11 interface 102 altsetting 64 has a duplicate endpoint with address 0x2, skipping [ 1385.040368][T10151] usb 4-1: config 11 interface 102 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1385.052033][T10151] usb 4-1: config 11 interface 102 altsetting 64 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1385.063994][T10151] usb 4-1: config 11 interface 102 altsetting 64 has a duplicate endpoint with address 0x82, skipping [ 1385.075067][T10151] usb 4-1: config 11 interface 102 altsetting 64 has a duplicate endpoint with address 0x6, skipping [ 1385.092311][T10151] usb 4-1: config 11 interface 102 altsetting 64 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1385.107410][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 1385.119899][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1385.131030][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 1385.151120][T10151] usb 4-1: config 11 interface 116 altsetting 2 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 1385.162461][T10151] usb 4-1: config 11 interface 116 altsetting 2 has an endpoint descriptor with address 0x22, changing to 0x2 [ 1385.174246][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1385.185126][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1385.196094][T10151] usb 4-1: config 11 interface 116 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1385.207947][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 1385.219785][T10151] usb 4-1: config 11 interface 116 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1385.232135][T10151] usb 4-1: config 11 interface 116 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1385.243217][T10151] usb 4-1: config 11 interface 180 altsetting 1 endpoint 0x5 has invalid maxpacket 1064, setting to 64 [ 1385.255061][T10151] usb 4-1: config 11 interface 180 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1385.266368][T10151] usb 4-1: config 11 interface 180 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1385.277625][T10151] usb 4-1: config 11 interface 180 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 1385.287894][T10151] usb 4-1: config 11 interface 180 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1385.308677][T10151] usb 4-1: config 11 interface 180 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 1385.320450][T10151] usb 4-1: config 11 interface 180 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 1385.332950][ T52] Bluetooth: hci0: command tx timeout [ 1385.339825][T10151] usb 4-1: config 11 interface 198 has no altsetting 0 [ 1385.346912][T10151] usb 4-1: config 11 interface 102 has no altsetting 0 [ 1385.354383][T10151] usb 4-1: config 11 interface 116 has no altsetting 0 [ 1385.361585][T10151] usb 4-1: config 11 interface 180 has no altsetting 0 [ 1385.371142][T10151] usb 4-1: New USB device found, idVendor=04fc, idProduct=5330, bcdDevice=90.ec [ 1385.384544][T10151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.396895][T10151] usb 4-1: Product: 췓ﴴཱࣚﻣ꾛㬸ᦦ뗮䴽쵁칹᫰엲ֻ♵汽琍暇ᗘ記皎鋷洁썐ꃲⲵ﹓숵䨿혛ẚ﵂撕⾯ꯜ䝔䈀ᮝ묔ꜭ쨝簆經摌듩櫺ꉝ櫁雈崣㖔拃ꕴ䄇ঃ蟲旡オ藍紬來漈觋滥䒣ꡮ䋵ᵮࠛਁ첡厉梛ᄊ餫⹙啋䅴㟹蔛덝肀얽ꈉ [ 1385.433097][T10151] usb 4-1: Manufacturer: о [ 1385.437933][T10151] usb 4-1: SerialNumber: ☦줰㟫억如⍁ᮥᱯ膄躒㜥㴉䡹ㄟ㒻㹟뇰Ԅ濽鮬栨樍䞍⺁῟㼗휶䝏﷑鐞␰ɼⅺ䉷䘭忸豤젋姯褚ઢต⠜꩟崫縷砓凙썻ൎ㺤Eꎫሐ [ 1385.527176][T24145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1385.548681][T24145] bond0: (slave team0): Enslaving as an active interface with an up link [ 1385.639932][T24158] netlink: 'syz.5.4952': attribute type 3 has an invalid length. [ 1385.647865][T24158] netlink: 'syz.5.4952': attribute type 3 has an invalid length. [ 1385.907634][T24079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.934319][T24079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.949133][T24079] bridge_slave_0: entered allmulticast mode [ 1385.956530][T24079] bridge_slave_0: entered promiscuous mode [ 1385.977602][T24079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.985827][T24079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.993218][T24079] bridge_slave_1: entered allmulticast mode [ 1386.010479][T24079] bridge_slave_1: entered promiscuous mode [ 1386.099981][T24079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1386.121343][T10151] usb 4-1: USB disconnect, device number 110 [ 1386.124202][T24165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4954'. [ 1386.130505][T24079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.232027][T24166] netlink: 'syz.4.4954': attribute type 3 has an invalid length. [ 1386.240041][T24166] netlink: 'syz.4.4954': attribute type 3 has an invalid length. [ 1386.275874][T15392] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 1386.561591][T24079] team0: Port device team_slave_0 added [ 1386.613628][T24079] team0: Port device team_slave_1 added [ 1386.666802][T24079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.687562][T24079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.723068][T24079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.742316][T24079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.751479][T24079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.778327][T24079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.796318][T15392] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1386.804510][T15392] usb 6-1: config 0 has no interface number 0 [ 1386.810987][T15392] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1386.822183][T15392] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1386.837576][T15392] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1386.846839][T15392] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.854933][T15392] usb 6-1: Product: syz [ 1386.991867][T24177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4955'. [ 1387.296658][T24079] hsr_slave_0: entered promiscuous mode [ 1387.305447][T15392] usb 6-1: Manufacturer: syz [ 1387.312886][T24079] hsr_slave_1: entered promiscuous mode [ 1387.320166][T15392] usb 6-1: SerialNumber: syz [ 1387.320332][T24079] debugfs: 'hsr0' already exists in 'hsr' [ 1387.331575][T24079] Cannot create hsr debugfs directory [ 1387.336457][T15392] usb 6-1: config 0 descriptor?? [ 1387.355606][T10151] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1387.357324][T10132] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1387.405760][ T52] Bluetooth: hci0: command tx timeout [ 1387.566696][T10132] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1387.574889][T10132] usb 5-1: config 0 has no interface number 0 [ 1387.585742][T10132] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1387.602428][T10132] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1387.607529][T24156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1387.613038][T15392] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1387.631198][T10151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1387.631943][T15392] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1387.650736][T10132] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1387.659857][T10151] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1387.665699][T10132] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.681942][T10151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1387.687589][T15392] usb 6-1: USB disconnect, device number 48 [ 1387.695332][T10151] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1387.702143][T10132] usb 5-1: Product: syz [ 1387.709778][T10151] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1387.715630][T10132] usb 5-1: Manufacturer: syz [ 1387.723172][T10151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.748451][T10132] usb 5-1: SerialNumber: syz [ 1387.769220][T10151] usb 4-1: config 0 descriptor?? [ 1387.796046][T10132] usb 5-1: config 0 descriptor?? [ 1387.854608][T24185] pimreg: entered allmulticast mode [ 1387.894543][T24183] pimreg: left allmulticast mode [ 1387.916171][T24079] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1387.930062][T24079] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1387.940439][T24079] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1387.965878][T24079] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1388.020649][T10151] hdpvr 4-1:0.0: firmware version 0x0 dated [ 1388.038649][T10151] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 1388.082452][T24079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.101674][T24079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1388.114360][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.121567][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.139801][T17923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.147016][T17923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.425087][T24203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4961'. [ 1388.675803][ T30] audit: type=1400 audit(1760230958.731:5571): avc: granted { setsecparam } for pid=24172 comm="syz.3.4956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1388.763344][ T30] audit: type=1400 audit(1760230958.771:5572): avc: denied { write } for pid=24172 comm="syz.3.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1388.824916][T24079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1388.937473][T24211] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1388.940768][T10151] hdpvr 4-1:0.0: Could not setup controls [ 1388.971706][T10151] hdpvr 4-1:0.0: registering videodev failed [ 1388.999260][T10151] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -71 [ 1389.019059][T10151] usb 4-1: USB disconnect, device number 111 [ 1389.071481][ T30] audit: type=1400 audit(1760230959.131:5573): avc: denied { kexec_image_load } for pid=24209 comm="syz.5.4962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1389.142892][T24221] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4965'. [ 1389.181218][T10132] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1389.189369][T24167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1389.203558][T10132] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1389.236627][T10132] usb 5-1: USB disconnect, device number 111 [ 1389.444613][T17384] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1389.502154][T24079] veth0_vlan: entered promiscuous mode [ 1389.568826][T24233] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1389.983387][T24079] veth1_vlan: entered promiscuous mode [ 1390.036316][T17384] usb 6-1: Using ep0 maxpacket: 32 [ 1390.062078][T17384] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1390.084731][T17384] usb 6-1: config 0 has no interface number 0 [ 1390.094183][T24079] veth0_macvtap: entered promiscuous mode [ 1390.103358][T17384] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1390.116676][T24079] veth1_macvtap: entered promiscuous mode [ 1390.123229][T17384] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.143275][T17384] usb 6-1: Product: syz [ 1390.152684][T24079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.160414][T17384] usb 6-1: Manufacturer: syz [ 1390.165708][T17384] usb 6-1: SerialNumber: syz [ 1390.177662][T24079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.235170][T17384] usb 6-1: config 0 descriptor?? [ 1390.246234][T17923] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.255105][ T30] audit: type=1400 audit(1760230960.231:5574): avc: denied { mount } for pid=24238 comm="syz.3.4969" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1390.257043][T17384] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1390.298879][T17923] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.355698][T17923] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.415689][ T4891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1390.574513][T17384] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1390.600753][T17384] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1390.616242][ T6974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.633742][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 1390.642835][T24251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4973'. [ 1390.685950][ T6974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.722558][T24252] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 1390.732097][T24254] netlink: 'syz.3.4973': attribute type 21 has an invalid length. [ 1390.740221][T24254] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4973'. [ 1390.748993][T17923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.809088][T24254] netlink: 'syz.3.4973': attribute type 5 has an invalid length. [ 1390.830519][T24254] netlink: 'syz.3.4973': attribute type 6 has an invalid length. [ 1390.845663][T24254] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4973'. [ 1391.091919][ T30] audit: type=1400 audit(1760230960.871:5575): avc: denied { ioctl } for pid=24242 comm="syz.4.4971" path="socket:[89017]" dev="sockfs" ino=89017 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1391.136314][T17923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.322479][ T30] audit: type=1400 audit(1760230961.381:5576): avc: denied { mounton } for pid=24079 comm="syz-executor" path="/root/syzkaller.Pu9TTI/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1391.538221][ T30] audit: type=1400 audit(1760230961.521:5577): avc: denied { mounton } for pid=24079 comm="syz-executor" path="/root/syzkaller.Pu9TTI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1391.608085][ T30] audit: type=1400 audit(1760230961.521:5578): avc: denied { mounton } for pid=24079 comm="syz-executor" path="/root/syzkaller.Pu9TTI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=89058 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1391.885812][T15392] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1391.896013][ T30] audit: type=1400 audit(1760230961.641:5579): avc: denied { mounton } for pid=24079 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2782 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1391.982834][ T30] audit: type=1400 audit(1760230961.641:5580): avc: denied { mount } for pid=24079 comm="syz-executor" name="/" dev="gadgetfs" ino=6961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1392.095215][T24264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4974'. [ 1392.197657][T15392] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1392.229585][T15392] usb 4-1: not running at top speed; connect to a high speed hub [ 1392.244931][T15392] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1392.372742][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4976'. [ 1392.398146][T15392] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1392.711258][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1392.718991][T17384] usb 6-1: USB disconnect, device number 49 [ 1392.732226][T24268] netlink: 'syz.7.4976': attribute type 3 has an invalid length. [ 1392.744768][T24268] netlink: 'syz.7.4976': attribute type 3 has an invalid length. [ 1392.837133][T17384] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1392.854192][T17384] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1392.876046][T17384] quatech2 6-1:0.51: device disconnected [ 1392.890346][T15392] usb 4-1: string descriptor 0 read error: -22 [ 1392.899796][T15392] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1392.911285][T15392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.957759][T15392] usb 4-1: 0:2 : does not exist [ 1393.250855][T24274] netlink: 'syz.4.4978': attribute type 3 has an invalid length. [ 1393.264182][T24274] netlink: 'syz.4.4978': attribute type 3 has an invalid length. [ 1393.292856][T24272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1393.573208][T10151] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 1393.708913][T24259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.719142][T24259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.805940][T17384] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1394.191599][T10151] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1394.226006][T10151] usb 8-1: config 0 has no interface number 0 [ 1394.232145][T10151] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1394.263399][T10151] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1394.273546][T17384] usb 6-1: Using ep0 maxpacket: 16 [ 1394.281785][T17384] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1394.296606][T17384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.307508][T17384] usb 6-1: config 0 descriptor?? [ 1394.312603][T10151] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1394.322074][T10151] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.332656][T10151] usb 8-1: Product: syz [ 1394.332756][T15392] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1394.336915][T10151] usb 8-1: Manufacturer: syz [ 1394.336935][T10151] usb 8-1: SerialNumber: syz [ 1394.339367][T10151] usb 8-1: config 0 descriptor?? [ 1394.355980][T15392] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1394.375847][T15392] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1394.393282][T15392] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1394.405248][T15392] usb 4-1: USB disconnect, device number 112 [ 1394.538287][T24277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1394.549103][T19778] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1394.560115][T24300] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1394.694873][T17384] usbhid 6-1:0.0: can't add hid device: -71 [ 1394.701145][T17384] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1394.724561][T24304] wlan0 speed is unknown, defaulting to 1000 [ 1394.768696][T17384] usb 6-1: USB disconnect, device number 50 [ 1394.773661][T19778] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 1394.785207][T19778] usb 5-1: config 6 has no interface number 0 [ 1394.793479][T19778] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1394.815621][T19778] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.830203][T19778] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1394.843526][T19778] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1394.855651][T19778] usb 5-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1394.872428][T19778] usb 5-1: Product: syz [ 1394.887358][T19778] usb 5-1: Manufacturer: syz [ 1394.892735][T19778] usb 5-1: SerialNumber: syz [ 1394.914699][T19778] hso 5-1:6.2: Failed to find INT IN ep [ 1395.835920][ T30] audit: type=1400 audit(1760230965.901:5581): avc: denied { setopt } for pid=24298 comm="syz.4.4987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1395.916184][T24269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1395.926123][T10151] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 1395.933226][T10151] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1395.956099][T10151] usb 8-1: USB disconnect, device number 2 [ 1395.997730][T24317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.007095][T24317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.121115][ T30] audit: type=1400 audit(1760230967.181:5582): avc: denied { unmount } for pid=16987 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1397.398950][T24334] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1399.929286][T15392] usb 5-1: USB disconnect, device number 112 [ 1400.089586][T24359] netlink: 'syz.5.5003': attribute type 4 has an invalid length. [ 1400.154538][T24359] netlink: 'syz.5.5003': attribute type 4 has an invalid length. [ 1400.180594][T24361] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1400.566300][T24372] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5009'. [ 1400.632350][T24376] netlink: 'syz.5.5008': attribute type 3 has an invalid length. [ 1400.648959][T24376] netlink: 'syz.5.5008': attribute type 3 has an invalid length. [ 1400.916103][T24382] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1401.642676][T24385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1402.115671][T10151] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 1403.296881][T10151] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1403.314586][T10151] usb 6-1: config 0 has no interface number 0 [ 1403.414802][T10151] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1403.426313][T10151] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1403.446796][T10151] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1403.498955][T10151] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.525876][T24247] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 1403.547001][T10151] usb 6-1: Product: syz [ 1403.556452][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1403.558055][T10151] usb 6-1: Manufacturer: syz [ 1403.712118][T24403] overlayfs: missing 'workdir' [ 1403.779186][T10151] usb 6-1: SerialNumber: syz [ 1403.846337][T10151] usb 6-1: config 0 descriptor?? [ 1403.855253][T10151] usb 6-1: can't set config #0, error -71 [ 1403.872815][T24247] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 1403.950344][T10151] usb 6-1: USB disconnect, device number 51 [ 1403.959262][T24247] usb 4-1: config 6 has no interface number 0 [ 1403.987046][T24247] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1404.015620][T24247] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1404.038121][T24247] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1404.050573][T24247] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1404.080013][T24247] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1404.117306][T24247] usb 4-1: Product: syz [ 1404.155580][T24247] usb 4-1: Manufacturer: syz [ 1404.160221][T24247] usb 4-1: SerialNumber: syz [ 1404.196396][T24247] hso 4-1:6.2: Failed to find INT IN ep [ 1404.932406][T24427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1404.967192][T24427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.048093][T24429] siw: device registration error -23 [ 1405.723712][T24436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5024'. [ 1405.952577][T24438] netlink: 'syz.5.5024': attribute type 3 has an invalid length. [ 1405.960744][T24438] netlink: 'syz.5.5024': attribute type 3 has an invalid length. [ 1406.405720][T10132] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1406.572242][T10132] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1406.580742][T10132] usb 6-1: config 0 has no interface number 0 [ 1406.595429][T10132] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1406.621650][T10132] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1406.653024][T10132] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1406.662277][T10132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.670555][T10132] usb 6-1: Product: syz [ 1406.674909][T10132] usb 6-1: Manufacturer: syz [ 1406.679622][T10132] usb 6-1: SerialNumber: syz [ 1406.695370][T10132] usb 6-1: config 0 descriptor?? [ 1406.726089][ T30] audit: type=1400 audit(1760230976.781:5583): avc: denied { connect } for pid=24440 comm="syz.7.5025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1407.903030][T24417] dvmrp8: entered allmulticast mode [ 1407.915166][T24417] dvmrp8: left allmulticast mode [ 1408.045160][T19778] usb 4-1: USB disconnect, device number 113 [ 1408.394661][T24450] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 1408.406867][ T30] audit: type=1400 audit(1760230978.461:5584): avc: denied { map } for pid=24453 comm="syz.4.5030" path="socket:[90401]" dev="sockfs" ino=90401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1408.435255][T24450] netlink: 'syz.3.5028': attribute type 3 has an invalid length. [ 1408.448185][ T30] audit: type=1400 audit(1760230978.461:5585): avc: denied { accept } for pid=24453 comm="syz.4.5030" path="socket:[90401]" dev="sockfs" ino=90401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1408.471683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.702777][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1408.745664][T24438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1408.755635][T10132] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1408.762795][T10132] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1408.789836][T10132] usb 6-1: USB disconnect, device number 52 [ 1408.795598][T18213] Bluetooth: hci0: command 0x0405 tx timeout [ 1408.825839][ T30] audit: type=1326 audit(1760230978.881:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1408.855678][ T30] audit: type=1326 audit(1760230978.881:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1408.880052][ T30] audit: type=1326 audit(1760230978.881:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1408.885623][T19778] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1408.903492][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.904215][ T30] audit: type=1326 audit(1760230978.881:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1408.941083][ C0] vkms_vblank_simulate: vblank timer overrun [ 1408.949048][ T30] audit: type=1326 audit(1760230978.881:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1408.973173][ T30] audit: type=1326 audit(1760230978.881:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1409.013840][ T30] audit: type=1326 audit(1760230978.881:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24468 comm="syz.5.5035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2a298eec9 code=0x7ffc0000 [ 1409.460654][T19778] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1409.470511][T19778] usb 4-1: config 0 has no interface number 0 [ 1409.477323][T19778] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1409.502914][T19778] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1409.553713][T19778] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1409.571466][T19778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.589790][T19778] usb 4-1: Product: syz [ 1409.686763][T19778] usb 4-1: Manufacturer: syz [ 1409.691485][T19778] usb 4-1: SerialNumber: syz [ 1409.702010][T19778] usb 4-1: config 0 descriptor?? [ 1410.013581][T19778] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 1410.023904][T24448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.041667][T19778] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1410.088534][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1410.097506][T24497] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1410.121637][T19778] usb 4-1: USB disconnect, device number 114 [ 1410.216476][T24499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5042'. [ 1410.489332][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5045'. [ 1410.824663][T24506] netlink: 'syz.7.5045': attribute type 3 has an invalid length. [ 1410.832739][T24506] netlink: 'syz.7.5045': attribute type 3 has an invalid length. [ 1411.955859][T19778] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 1412.198185][T24523] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1412.357529][T19778] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1412.364547][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1412.364562][ T30] audit: type=1400 audit(1760230982.421:5619): avc: denied { ioctl } for pid=24526 comm="syz.5.5052" path="socket:[90520]" dev="sockfs" ino=90520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1412.372483][T19778] usb 8-1: config 0 has no interface number 0 [ 1412.415101][T19778] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1412.545900][ T30] audit: type=1400 audit(1760230982.591:5620): avc: denied { connect } for pid=24526 comm="syz.5.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1412.877543][T24535] netlink: 10 bytes leftover after parsing attributes in process `syz.5.5052'. [ 1412.889879][T19778] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1413.019915][T19778] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1413.045136][T19778] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.054640][T19778] usb 8-1: Product: syz [ 1413.059182][T19778] usb 8-1: Manufacturer: syz [ 1413.064249][T19778] usb 8-1: SerialNumber: syz [ 1413.133466][T24539] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1413.514937][T24509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.544529][T19778] usb 8-1: config 0 descriptor?? [ 1413.565854][T19778] usb 8-1: can't set config #0, error -71 [ 1413.596058][T19778] usb 8-1: USB disconnect, device number 3 [ 1414.356777][T24554] fuse: Unknown parameter 'grou00000000000000000000' [ 1414.635720][T15392] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1414.761723][ T30] audit: type=1326 audit(1760230984.811:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1414.921593][T15392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1415.124794][ T30] audit: type=1326 audit(1760230984.811:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.128153][T15392] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1415.148547][ T30] audit: type=1326 audit(1760230984.821:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.185587][ T30] audit: type=1326 audit(1760230984.821:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.299373][T15392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1415.309413][T15392] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1415.319465][T15392] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1415.357534][ T30] audit: type=1326 audit(1760230984.821:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.393008][T15392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.402370][T24567] netlink: 'syz.7.5064': attribute type 3 has an invalid length. [ 1415.410571][T24567] netlink: 'syz.7.5064': attribute type 3 has an invalid length. [ 1415.418776][ T30] audit: type=1326 audit(1760230984.851:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.446604][T15392] usb 5-1: config 0 descriptor?? [ 1415.519807][ T30] audit: type=1326 audit(1760230984.901:5627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.565015][ T30] audit: type=1326 audit(1760230984.901:5628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65758eec9 code=0x7ffc0000 [ 1415.654069][T15392] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 1415.678841][T15392] hdpvr 5-1:0.0: device init failed [ 1415.721400][T15392] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1415.795144][T15392] usb 5-1: USB disconnect, device number 113 [ 1415.845722][T10131] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1416.036919][T10131] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1416.046093][T10131] usb 8-1: config 0 has no interface number 0 [ 1416.052208][T10131] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1416.228786][T24587] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1416.340484][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5070'. [ 1416.838914][T10131] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1416.866983][T10131] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1416.877841][T24592] fuse: Unknown parameter 'fX~0x0000000000000007' [ 1416.885691][T10131] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.899241][T10131] usb 8-1: Product: syz [ 1416.903427][T10131] usb 8-1: Manufacturer: syz [ 1416.908090][T10131] usb 8-1: SerialNumber: syz [ 1416.914804][T10131] usb 8-1: config 0 descriptor?? [ 1417.680581][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1417.680592][ T30] audit: type=1326 audit(1760230987.281:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24559 comm="syz.2.5062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd65752af79 code=0x7ffc0000 [ 1417.711876][T24565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.743859][T24602] fuse: Unknown parameter 'grou00000000000000000000' [ 1417.976904][T10131] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 1418.001322][T10131] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1418.067748][T10131] usb 8-1: USB disconnect, device number 4 [ 1419.352525][ T30] audit: type=1400 audit(1760230989.411:5745): avc: denied { ioctl } for pid=24626 comm="syz.7.5083" path="socket:[89847]" dev="sockfs" ino=89847 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1419.405927][ T30] audit: type=1400 audit(1760230989.441:5746): avc: denied { setattr } for pid=24626 comm="syz.7.5083" path="socket:[89847]" dev="sockfs" ino=89847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1419.455597][T10131] usb 5-1: new full-speed USB device number 114 using dummy_hcd [ 1419.630767][T24634] kAFS: No cell specified [ 1420.140861][T10131] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 1420.150624][T24636] fuse: Unknown parameter 'grou00000000000000000000' [ 1420.335867][T10131] usb 5-1: config 0 has no interface number 0 [ 1420.341982][T10131] usb 5-1: config 0 interface 104 has no altsetting 0 [ 1420.361519][T10131] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 1420.383162][T10131] usb 5-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1420.438616][T10131] usb 5-1: Product: syz [ 1420.443613][T10131] usb 5-1: Manufacturer: syz [ 1420.454177][T24650] netlink: 'syz.2.5092': attribute type 23 has an invalid length. [ 1420.595060][T10131] usb 5-1: SerialNumber: syz [ 1420.785853][T10131] usb 5-1: config 0 descriptor?? [ 1420.880427][T24658] netlink: 'syz.3.5093': attribute type 3 has an invalid length. [ 1420.889561][T24658] netlink: 'syz.3.5093': attribute type 3 has an invalid length. [ 1421.057022][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1421.521907][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1421.881878][T24660] netlink: 'syz.2.5097': attribute type 21 has an invalid length. [ 1421.889968][T24660] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1421.935717][T24660] netlink: 'syz.2.5097': attribute type 5 has an invalid length. [ 1421.943744][T24660] netlink: 'syz.2.5097': attribute type 6 has an invalid length. [ 1421.999469][T24660] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1422.195656][T19778] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1422.607509][T24674] netlink: 'syz.2.5099': attribute type 3 has an invalid length. [ 1422.615241][T24674] netlink: 'syz.2.5099': attribute type 3 has an invalid length. [ 1422.649323][T10131] usb 5-1: USB disconnect, device number 114 [ 1422.724995][T19778] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1422.734998][T19778] usb 4-1: config 0 has no interface number 0 [ 1422.749826][T19778] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1422.763153][T19778] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1422.776884][T19778] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1422.786194][T19778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.794312][T19778] usb 4-1: Product: syz [ 1422.798799][T19778] usb 4-1: Manufacturer: syz [ 1422.803443][T19778] usb 4-1: SerialNumber: syz [ 1422.811082][T19778] usb 4-1: config 0 descriptor?? [ 1422.850652][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.857154][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.967576][T24677] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1423.063442][T24687] fuse: Unknown parameter 'group_i00000000000000000000' [ 1423.336218][T24677] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1423.361046][T24652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.371017][T19778] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 1423.378661][T24677] usb 6-1: not running at top speed; connect to a high speed hub [ 1423.388933][T19778] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1423.405972][T24677] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1423.418378][T19778] usb 4-1: USB disconnect, device number 115 [ 1423.438510][T24677] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1423.457426][T24677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.472982][T24677] usb 6-1: Product: Є [ 1423.482796][T24677] usb 6-1: Manufacturer: 忌縷⇕暙킥䎠䱐ꈿ쐉̈́̂凪ꅃ碻䷵麁Ό⡯䖲뒧ḗ [ 1423.505543][T24677] usb 6-1: SerialNumber: syz [ 1423.866513][T24692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.870332][T24677] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1423.900738][T24677] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1423.935550][T24677] usb 6-1: USB disconnect, device number 53 [ 1424.607946][T24708] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.614051][T24708] binder: 24705:24708 ioctl 4018620d 200000000040 returned -16 [ 1424.715660][ T30] audit: type=1400 audit(1760230994.771:5747): avc: denied { append } for pid=24710 comm="syz.4.5109" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1424.760018][T24712] vlan2: entered promiscuous mode [ 1424.765054][T24712] bond0: entered promiscuous mode [ 1424.859248][T24712] bond_slave_0: entered promiscuous mode [ 1424.865460][T24712] bond_slave_1: entered promiscuous mode [ 1424.871762][T24712] batadv0: entered promiscuous mode [ 1424.877815][T24712] team0: entered promiscuous mode [ 1424.885811][T24712] team_slave_0: entered promiscuous mode [ 1424.906618][T24712] team_slave_1: entered promiscuous mode [ 1424.914121][T24712] dummy0: entered promiscuous mode [ 1425.369176][ T30] audit: type=1400 audit(1760230995.201:5748): avc: denied { remount } for pid=24709 comm="syz.5.5108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1425.409204][T24673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1425.676962][T24725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'. [ 1426.156708][T24729] fuse: Unknown parameter 'group_i00000000000000000000' [ 1426.267736][T24734] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5115'. [ 1426.601855][T24740] netlink: 'syz.3.5118': attribute type 3 has an invalid length. [ 1426.609761][T24740] netlink: 'syz.3.5118': attribute type 3 has an invalid length. [ 1427.385888][T24677] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1427.533460][T24758] netlink: 'syz.2.5120': attribute type 3 has an invalid length. [ 1427.541840][T24758] netlink: 'syz.2.5120': attribute type 3 has an invalid length. [ 1427.718544][T24677] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1427.776628][T24677] usb 4-1: config 0 has no interface number 0 [ 1428.125847][T24677] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1428.157400][T24677] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1428.247855][T24677] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1428.257564][T24677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.266958][T24677] usb 4-1: Product: syz [ 1428.286743][T24677] usb 4-1: Manufacturer: syz [ 1428.291457][T24677] usb 4-1: SerialNumber: syz [ 1428.300697][T24677] usb 4-1: config 0 descriptor?? [ 1428.879543][T24739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1428.890599][T24677] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 1428.898261][T24677] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1428.914038][T24677] usb 4-1: USB disconnect, device number 116 [ 1429.111397][T24775] fuse: Unknown parameter 'group_i00000000000000000000' [ 1429.390504][T10131] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1429.565763][T10131] usb 8-1: Using ep0 maxpacket: 32 [ 1429.578986][T10131] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1429.640926][T24784] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1429.665404][T24784] random: crng reseeded on system resumption [ 1429.836143][T10131] usb 8-1: config 0 has no interface number 0 [ 1429.854511][T10131] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1429.881558][T10131] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.198510][T10131] usb 8-1: Product: syz [ 1430.203598][T10131] usb 8-1: Manufacturer: syz [ 1430.208405][T10131] usb 8-1: SerialNumber: syz [ 1430.216261][T10131] usb 8-1: config 0 descriptor?? [ 1430.232328][T10131] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1430.254029][T24787] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1430.424184][T24799] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1430.695075][T10131] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1430.748951][T24763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1430.761616][T10131] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1430.914474][T24805] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1430.932889][T24770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.941722][T24770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.144869][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1431.154076][T10131] usb 8-1: USB disconnect, device number 5 [ 1431.367392][T10131] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1431.465358][T24809] fuse: Unknown parameter 'group_id00000000000000000000' [ 1431.504207][T10131] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1431.692178][T10131] quatech2 8-1:0.51: device disconnected [ 1431.876261][T24813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5140'. [ 1431.942615][T24817] tmpfs: Unknown parameter 'mpocal' [ 1431.977924][T24822] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5144'. [ 1432.195662][T24677] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1432.579237][T24835] netlink: 'syz.4.5147': attribute type 3 has an invalid length. [ 1432.587236][T24835] netlink: 'syz.4.5147': attribute type 3 has an invalid length. [ 1432.776050][T24677] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1432.819240][T24677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.855196][T24677] usb 6-1: Product: syz [ 1432.865333][T24677] usb 6-1: Manufacturer: syz [ 1432.873621][T24677] usb 6-1: SerialNumber: syz [ 1432.888535][T24677] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1432.910670][T10131] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1432.950287][T24842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.959603][T24842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.135884][T10151] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1433.357300][T19778] usb 6-1: USB disconnect, device number 54 [ 1433.645291][T24856] fuse: Unknown parameter '' [ 1433.837571][T10151] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 1433.845929][T10151] usb 5-1: config 0 has no interface number 0 [ 1433.851992][T10151] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1433.861862][T24853] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1433.883525][T12341] Bluetooth: hci4: Frame reassembly failed (-84) [ 1433.884079][ T30] audit: type=1400 audit(1760231003.941:5749): avc: denied { read append } for pid=24852 comm="syz.3.5152" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1433.915637][T10151] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1433.940078][ T30] audit: type=1400 audit(1760231003.941:5750): avc: denied { open } for pid=24852 comm="syz.3.5152" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1433.966837][T10151] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1433.975940][T10151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.983922][T10151] usb 5-1: Product: syz [ 1433.988100][T10151] usb 5-1: Manufacturer: syz [ 1433.993111][T10151] usb 5-1: SerialNumber: syz [ 1433.995959][T10131] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1433.999684][T10151] usb 5-1: config 0 descriptor?? [ 1434.024679][T10131] ath9k_htc: Failed to initialize the device [ 1434.057498][T19778] usb 6-1: ath9k_htc: USB layer deinitialized [ 1435.173949][T24880] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1435.644033][T10151] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 1435.648345][T24837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.665947][T10151] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1435.708955][T10151] usb 5-1: USB disconnect, device number 115 [ 1435.885676][ T52] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1435.885985][T18213] Bluetooth: hci4: command 0x1003 tx timeout [ 1436.012725][T24893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5165'. [ 1436.399274][T24903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24903 comm=syz.4.5166 [ 1436.432498][T24903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=24903 comm=syz.4.5166 [ 1436.475811][T24903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24903 comm=syz.4.5166 [ 1436.515170][T24903] IPv6: NLM_F_CREATE should be specified when creating new route [ 1436.522818][T24906] FAULT_INJECTION: forcing a failure. [ 1436.522818][T24906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1436.580127][T24908] loop6: detected capacity change from 0 to 524288000 [ 1436.850573][T24906] CPU: 0 UID: 0 PID: 24906 Comm: syz.5.5170 Not tainted syzkaller #0 PREEMPT(full) [ 1436.850593][T24906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.850599][T24906] Call Trace: [ 1436.850604][T24906] [ 1436.850610][T24906] dump_stack_lvl+0x16c/0x1f0 [ 1436.850626][T24906] should_fail_ex+0x512/0x640 [ 1436.850646][T24906] _copy_from_user+0x2e/0xd0 [ 1436.850660][T24906] ucma_write+0x128/0x330 [ 1436.850672][T24906] ? __pfx_ucma_write+0x10/0x10 [ 1436.850682][T24906] ? bpf_lsm_file_permission+0x9/0x10 [ 1436.850695][T24906] ? security_file_permission+0x71/0x210 [ 1436.850709][T24906] ? rw_verify_area+0xcf/0x6c0 [ 1436.850727][T24906] ? __pfx_ucma_write+0x10/0x10 [ 1436.850737][T24906] vfs_write+0x2a0/0x11d0 [ 1436.850751][T24906] ? __pfx_vfs_write+0x10/0x10 [ 1436.850760][T24906] ? find_held_lock+0x2b/0x80 [ 1436.850777][T24906] ? __fget_files+0x204/0x3c0 [ 1436.850791][T24906] ? __fget_files+0x20e/0x3c0 [ 1436.850806][T24906] ksys_write+0x1f8/0x250 [ 1436.850817][T24906] ? __pfx_ksys_write+0x10/0x10 [ 1436.850833][T24906] do_syscall_64+0xcd/0x4e0 [ 1436.850844][T24906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.850856][T24906] RIP: 0033:0x7fb2a298eec9 [ 1436.850867][T24906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1436.850878][T24906] RSP: 002b:00007fb2a3829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1436.850889][T24906] RAX: ffffffffffffffda RBX: 00007fb2a2be5fa0 RCX: 00007fb2a298eec9 [ 1436.850896][T24906] RDX: 00000000000000a0 RSI: 0000200000000140 RDI: 0000000000000003 [ 1436.850903][T24906] RBP: 00007fb2a3829090 R08: 0000000000000000 R09: 0000000000000000 [ 1436.850909][T24906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1436.850916][T24906] R13: 00007fb2a2be6038 R14: 00007fb2a2be5fa0 R15: 00007fff5a68b1c8 [ 1436.850929][T24906] [ 1437.181449][T24917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5173'. [ 1437.213977][ T30] audit: type=1400 audit(1760231007.271:5751): avc: denied { create } for pid=24918 comm="syz.2.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1437.372862][T24928] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1437.756770][T24934] ALSA: seq fatal error: cannot create timer (-22) [ 1438.135524][ T30] audit: type=1400 audit(1760231008.101:5752): avc: denied { relabelfrom } for pid=24933 comm="syz.3.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1438.167868][T24941] netlink: 'syz.2.5179': attribute type 1 has an invalid length. [ 1438.186701][T24941] gretap1: entered promiscuous mode [ 1438.275841][ T30] audit: type=1400 audit(1760231008.101:5753): avc: denied { relabelto } for pid=24933 comm="syz.3.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1438.342184][ T30] audit: type=1400 audit(1760231008.111:5754): avc: denied { ioctl } for pid=24933 comm="syz.3.5178" path="socket:[92356]" dev="sockfs" ino=92356 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1439.302290][T24967] netlink: 'syz.5.5186': attribute type 3 has an invalid length. [ 1439.310417][T24967] netlink: 'syz.5.5186': attribute type 3 has an invalid length. [ 1439.699352][T24965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1440.886074][T24247] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1441.058437][T24247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1441.079732][T24247] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1441.090103][T24247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.098182][T24247] usb 6-1: Product: syz [ 1441.102379][T24247] usb 6-1: Manufacturer: syz [ 1441.119847][T24247] usb 6-1: SerialNumber: syz [ 1441.156270][T24247] usb 6-1: config 0 descriptor?? [ 1441.702502][T24989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.718311][T24989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1441.749043][T24247] usb 6-1: USB disconnect, device number 55 [ 1442.434670][T24992] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1442.989983][T24995] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 1443.973354][T25010] wlan0 speed is unknown, defaulting to 1000 [ 1444.263930][T10131] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1444.437750][T10131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.475559][T10131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.486610][T25038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5205'. [ 1444.505348][T10131] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1444.555584][T10131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.596236][T10131] usb 5-1: config 0 descriptor?? [ 1444.659696][T25047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5207'. [ 1445.062816][T25051] fuse: Unknown parameter 'fX~0x0000000000000007' [ 1445.123115][T25051] netlink: 'syz.2.5211': attribute type 3 has an invalid length. [ 1445.145700][T25051] netlink: 'syz.2.5211': attribute type 4 has an invalid length. [ 1445.158778][T10131] keytouch 0003:0926:3333.002C: fixing up Keytouch IEC report descriptor [ 1445.209402][ T30] audit: type=1400 audit(1760231015.261:5755): avc: denied { bind } for pid=25053 comm="syz.5.5212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1445.389166][T10131] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002C/input/input83 [ 1446.281307][T10131] keytouch 0003:0926:3333.002C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1446.385304][T25073] batadv_slave_1: entered promiscuous mode [ 1446.557788][T25082] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5220'. [ 1446.626220][T10131] usb 5-1: reset high-speed USB device number 116 using dummy_hcd [ 1446.714072][T25092] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1446.765746][T10131] usb 5-1: device descriptor read/64, error -32 [ 1446.779847][T25087] netlink: 'syz.7.5222': attribute type 1 has an invalid length. [ 1446.789338][T25094] FAULT_INJECTION: forcing a failure. [ 1446.789338][T25094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.802743][T25087] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5222'. [ 1446.838065][T25094] CPU: 0 UID: 0 PID: 25094 Comm: syz.3.5225 Not tainted syzkaller #0 PREEMPT(full) [ 1446.838091][T25094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1446.838100][T25094] Call Trace: [ 1446.838106][T25094] [ 1446.838113][T25094] dump_stack_lvl+0x16c/0x1f0 [ 1446.838133][T25094] should_fail_ex+0x512/0x640 [ 1446.838152][T25094] _copy_from_user+0x2e/0xd0 [ 1446.838171][T25094] ucma_join_multicast+0xa1/0x160 [ 1446.838188][T25094] ? __pfx_ucma_join_multicast+0x10/0x10 [ 1446.838220][T25094] ? __pfx_ucma_join_multicast+0x10/0x10 [ 1446.838237][T25094] ucma_write+0x1f8/0x330 [ 1446.838251][T25094] ? __pfx_ucma_write+0x10/0x10 [ 1446.838263][T25094] ? bpf_lsm_file_permission+0x9/0x10 [ 1446.838280][T25094] ? security_file_permission+0x71/0x210 [ 1446.838298][T25094] ? rw_verify_area+0xcf/0x6c0 [ 1446.838322][T25094] ? __pfx_ucma_write+0x10/0x10 [ 1446.838334][T25094] vfs_write+0x2a0/0x11d0 [ 1446.838353][T25094] ? __pfx_vfs_write+0x10/0x10 [ 1446.838366][T25094] ? find_held_lock+0x2b/0x80 [ 1446.838388][T25094] ? __fget_files+0x204/0x3c0 [ 1446.838408][T25094] ? __fget_files+0x20e/0x3c0 [ 1446.838430][T25094] ksys_write+0x1f8/0x250 [ 1446.838444][T25094] ? __pfx_ksys_write+0x10/0x10 [ 1446.838465][T25094] do_syscall_64+0xcd/0x4e0 [ 1446.838482][T25094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.838499][T25094] RIP: 0033:0x7f1c54b8eec9 [ 1446.838514][T25094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1446.838529][T25094] RSP: 002b:00007f1c559e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1446.838546][T25094] RAX: ffffffffffffffda RBX: 00007f1c54de5fa0 RCX: 00007f1c54b8eec9 [ 1446.838556][T25094] RDX: 00000000000000a0 RSI: 0000200000000140 RDI: 0000000000000003 [ 1446.838566][T25094] RBP: 00007f1c559e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.838575][T25094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.838585][T25094] R13: 00007f1c54de6038 R14: 00007f1c54de5fa0 R15: 00007ffef1ba44f8 [ 1446.838606][T25094] [ 1447.107017][T10131] usb 5-1: reset high-speed USB device number 116 using dummy_hcd [ 1447.245638][T10131] usb 5-1: device descriptor read/64, error -32 [ 1447.481063][T25104] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1447.639110][ T30] audit: type=1400 audit(1760231017.701:5756): avc: denied { ioctl } for pid=25110 comm="syz.2.5232" path="socket:[92790]" dev="sockfs" ino=92790 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1447.706848][T19778] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1447.990446][T19778] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1448.005016][T19778] usb 4-1: config 1 has no interface number 0 [ 1448.099996][T19778] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1448.110706][T19778] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1448.169497][T19778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.260593][T25119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5234'. [ 1448.293616][T25119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=25119 comm=syz.2.5234 [ 1448.296419][T19778] usb 4-1: Product: syz [ 1448.311696][T24677] usb 5-1: USB disconnect, device number 116 [ 1448.374824][T19778] usb 4-1: Manufacturer: syz [ 1448.380229][T19778] usb 4-1: SerialNumber: syz [ 1448.672726][T25122] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1448.857695][T25129] netlink: 'syz.7.5237': attribute type 3 has an invalid length. [ 1448.865747][T25129] netlink: 'syz.7.5237': attribute type 3 has an invalid length. [ 1449.100352][T25130] overlayfs: missing 'lowerdir' [ 1449.105751][ T30] audit: type=1400 audit(1760231019.131:5757): avc: denied { getopt } for pid=25123 comm="syz.4.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1450.478359][T19778] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1450.504880][T19778] aqc111 4-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 2a:7c:73:63:b4:eb [ 1450.606933][T25153] netlink: 'syz.5.5242': attribute type 3 has an invalid length. [ 1450.614846][T25153] netlink: 'syz.5.5242': attribute type 3 has an invalid length. [ 1450.655615][T24677] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1450.723306][T19778] usb 4-1: USB disconnect, device number 117 [ 1450.730677][T19778] aqc111 4-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1450.776708][T19778] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1450.787246][T19778] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1450.796879][T19778] aqc111 4-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1450.807768][T24677] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1450.816569][T24677] usb 8-1: config 0 has no interface number 0 [ 1450.823630][T24677] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1450.834826][T24677] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1450.846966][T24677] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1450.857481][T24677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.865712][T24677] usb 8-1: Product: syz [ 1450.869960][T24677] usb 8-1: Manufacturer: syz [ 1450.874613][T24677] usb 8-1: SerialNumber: syz [ 1450.880770][T24677] usb 8-1: config 0 descriptor?? [ 1450.925567][T10152] usb 6-1: new full-speed USB device number 56 using dummy_hcd [ 1451.277298][T10152] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1451.285617][T10152] usb 6-1: config 0 has no interface number 0 [ 1451.291740][T10152] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1451.335655][T10152] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1451.365400][T10152] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1451.379482][T10152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.389896][T10152] usb 6-1: Product: syz [ 1451.404712][T10152] usb 6-1: Manufacturer: syz [ 1451.413634][T10152] usb 6-1: SerialNumber: syz [ 1451.543284][T10152] usb 6-1: config 0 descriptor?? [ 1451.555631][T25168] fuse: Bad value for 'user_id' [ 1451.560685][T25168] fuse: Bad value for 'user_id' [ 1452.248636][T25152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.258618][T10152] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1452.278978][T25129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.295985][T24677] usbtouchscreen 8-1:0.214: Failed to read FW rev: -71 [ 1452.303144][T24677] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1452.327139][T10152] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1452.328483][T24677] usb 8-1: USB disconnect, device number 6 [ 1452.483059][T25180] loop6: detected capacity change from 0 to 524288000 [ 1452.565586][T10152] usb 6-1: USB disconnect, device number 56 [ 1453.639496][ T30] audit: type=1400 audit(1760231023.701:5758): avc: denied { watch } for pid=25193 comm="syz.3.5252" path="/proc/1432" dev="proc" ino=92994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1454.279953][ T30] audit: type=1326 audit(1760231024.341:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.334991][ T30] audit: type=1326 audit(1760231024.341:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.372358][ T30] audit: type=1326 audit(1760231024.341:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.505883][ T30] audit: type=1326 audit(1760231024.341:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.593884][ T30] audit: type=1326 audit(1760231024.341:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.781769][ T30] audit: type=1326 audit(1760231024.341:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1454.882273][ T30] audit: type=1326 audit(1760231024.341:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1455.100287][T25225] fuse: Unknown parameter 'fX~0x0000000000000007' [ 1455.232885][T25233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5262'. [ 1456.052792][ T30] audit: type=1326 audit(1760231025.171:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1456.520870][ T30] audit: type=1326 audit(1760231026.111:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25203 comm="syz.3.5255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c54b8eec9 code=0x7ffc0000 [ 1456.694597][T25248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5269'. [ 1457.835715][T10151] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1458.445696][T10151] usb 5-1: Using ep0 maxpacket: 32 [ 1458.452520][T10151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.480821][T25280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5280'. [ 1458.490057][T10151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.507640][T17923] ------------[ cut here ]------------ [ 1458.513365][T17923] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1458.526315][T17923] WARNING: CPU: 1 PID: 17923 at net/mac80211/rate.c:401 __rate_control_send_low+0x667/0x780 [ 1458.536506][T17923] Modules linked in: [ 1458.540690][T17923] CPU: 1 UID: 0 PID: 17923 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1458.550308][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1458.560606][T17923] Workqueue: phy34 hw_scan_work [ 1458.565532][T17923] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 1458.572177][T17923] Code: a4 a0 d4 00 00 00 e8 78 96 eb f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 20 46 c3 8c e8 1a 1d aa f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 f7 08 54 f7 e9 f5 fc ff [ 1458.592040][T17923] RSP: 0018:ffffc9001bef76a0 EFLAGS: 00010282 [ 1458.598121][T17923] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81799b88 [ 1458.606495][T17923] RDX: ffff888032afc900 RSI: ffffffff81799b95 RDI: 0000000000000001 [ 1458.614471][T17923] RBP: ffff88805f63b8e8 R08: 0000000000000001 R09: 0000000000000000 [ 1458.622541][T17923] R10: 0000000000000001 R11: 0000000000037018 R12: 00000000ffffffff [ 1458.630581][T17923] R13: 0000000000000000 R14: 000000000000000c R15: ffff88805f63b8f0 [ 1458.638594][T17923] FS: 0000000000000000(0000) GS:ffff888124f67000(0000) knlGS:0000000000000000 [ 1458.647573][T17923] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.654152][T17923] CR2: 00005555587de808 CR3: 000000005aa74000 CR4: 00000000003526f0 [ 1458.662249][T17923] Call Trace: [ 1458.665572][T17923] [ 1458.665784][T10151] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1458.668515][T17923] rate_control_send_low+0x52a/0x810 [ 1458.683509][T17923] ? __alloc_skb+0x166/0x380 [ 1458.689589][T17923] ? __netdev_alloc_skb+0x213/0x920 [ 1458.692911][T10151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.694826][T17923] ? ieee80211_probereq_get+0x6a/0x290 [ 1458.694857][T17923] rate_control_get_rate+0x1be/0x5e0 [ 1458.707811][T10151] usb 5-1: config 0 descriptor?? [ 1458.708538][T17923] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 1458.715910][T10151] hub 5-1:0.0: USB hub found [ 1458.718719][T17923] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1458.729106][T25282] hugetlbfs: Bad value 'p' for mount option 'nr_inodes' [ 1458.729106][T25282] [ 1458.735028][T17923] invoke_tx_handlers_late+0x1172/0x27d0 [ 1458.735068][T17923] ? invoke_tx_handlers_early+0x669/0x28a0 [ 1458.755836][T17923] ? __asan_memset+0x23/0x50 [ 1458.760442][T17923] ieee80211_tx_prepare_skb+0x236/0x470 [ 1458.766036][T17923] ? __pfx_ieee80211_tx_prepare_skb+0x10/0x10 [ 1458.772491][T17923] ? __asan_memcpy+0x3c/0x60 [ 1458.777342][T17923] ? ieee80211_probereq_get+0x21d/0x290 [ 1458.782894][T17923] hw_scan_work+0x8e3/0xfa0 [ 1458.787440][T17923] ? __pfx_hw_scan_work+0x10/0x10 [ 1458.792473][T17923] ? rcu_is_watching+0x12/0xc0 [ 1458.797343][T17923] process_one_work+0x9cc/0x1b70 [ 1458.802298][T17923] ? __pfx_process_one_work+0x10/0x10 [ 1458.807814][T17923] ? assign_work+0x1a0/0x250 [ 1458.812409][T17923] worker_thread+0x6c8/0xf10 [ 1458.817080][T17923] ? __pfx_worker_thread+0x10/0x10 [ 1458.822182][T17923] kthread+0x3c5/0x780 [ 1458.826297][T17923] ? __pfx_kthread+0x10/0x10 [ 1458.830904][T17923] ? rcu_is_watching+0x12/0xc0 [ 1458.835542][ T30] kauditd_printk_skb: 203 callbacks suppressed [ 1458.835571][ T30] audit: type=1400 audit(1760231028.791:5971): avc: denied { mount } for pid=25281 comm="syz.7.5281" name="/" dev="hugetlbfs" ino=93137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1458.835678][T17923] ? __pfx_kthread+0x10/0x10 [ 1458.868401][ T30] audit: type=1400 audit(1760231028.791:5972): avc: denied { remount } for pid=25281 comm="syz.7.5281" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1458.869505][T17923] ret_from_fork+0x56d/0x730 [ 1458.894743][T17923] ? __pfx_kthread+0x10/0x10 [ 1458.899429][T17923] ret_from_fork_asm+0x1a/0x30 [ 1458.904230][T17923] [ 1458.907389][T17923] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1458.914677][T17923] CPU: 1 UID: 0 PID: 17923 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 1458.924227][T17923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1458.934294][T17923] Workqueue: phy34 hw_scan_work [ 1458.939158][T17923] Call Trace: [ 1458.942438][T17923] [ 1458.945368][T17923] dump_stack_lvl+0x3d/0x1f0 [ 1458.949965][T17923] vpanic+0x640/0x6f0 [ 1458.953954][T17923] ? __rate_control_send_low+0x667/0x780 [ 1458.959571][T17923] panic+0xca/0xd0 [ 1458.963272][T17923] ? __pfx_panic+0x10/0x10 [ 1458.967675][T17923] ? check_panic_on_warn+0x1f/0xb0 [ 1458.972794][T17923] check_panic_on_warn+0xab/0xb0 [ 1458.977719][T17923] __warn+0xf6/0x3c0 [ 1458.981589][T17923] ? preempt_schedule_notrace+0x62/0xe0 [ 1458.987113][T17923] ? __rate_control_send_low+0x667/0x780 [ 1458.992721][T17923] report_bug+0x3c3/0x580 [ 1458.997035][T17923] ? __rate_control_send_low+0x667/0x780 [ 1459.002652][T17923] handle_bug+0x184/0x210 [ 1459.006973][T17923] exc_invalid_op+0x17/0x50 [ 1459.011468][T17923] asm_exc_invalid_op+0x1a/0x20 [ 1459.016309][T17923] RIP: 0010:__rate_control_send_low+0x667/0x780 [ 1459.022534][T17923] Code: a4 a0 d4 00 00 00 e8 78 96 eb f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 20 46 c3 8c e8 1a 1d aa f6 90 <0f> 0b 90 90 e9 20 fd ff ff 48 8b 3c 24 e8 f7 08 54 f7 e9 f5 fc ff [ 1459.042143][T17923] RSP: 0018:ffffc9001bef76a0 EFLAGS: 00010282 [ 1459.048201][T17923] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81799b88 [ 1459.056148][T17923] RDX: ffff888032afc900 RSI: ffffffff81799b95 RDI: 0000000000000001 [ 1459.064120][T17923] RBP: ffff88805f63b8e8 R08: 0000000000000001 R09: 0000000000000000 [ 1459.072087][T17923] R10: 0000000000000001 R11: 0000000000037018 R12: 00000000ffffffff [ 1459.080051][T17923] R13: 0000000000000000 R14: 000000000000000c R15: ffff88805f63b8f0 [ 1459.088122][T17923] ? __warn_printk+0x198/0x350 [ 1459.092876][T17923] ? __warn_printk+0x1a5/0x350 [ 1459.097642][T17923] rate_control_send_low+0x52a/0x810 [ 1459.102927][T17923] ? __alloc_skb+0x166/0x380 [ 1459.108548][T17923] ? __netdev_alloc_skb+0x213/0x920 [ 1459.113741][T17923] ? ieee80211_probereq_get+0x6a/0x290 [ 1459.119180][T17923] rate_control_get_rate+0x1be/0x5e0 [ 1459.124457][T17923] ieee80211_tx_h_rate_ctrl+0xa35/0x1ae0 [ 1459.130088][T17923] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1459.136148][T17923] invoke_tx_handlers_late+0x1172/0x27d0 [ 1459.141779][T17923] ? invoke_tx_handlers_early+0x669/0x28a0 [ 1459.147564][T17923] ? __asan_memset+0x23/0x50 [ 1459.152137][T17923] ieee80211_tx_prepare_skb+0x236/0x470 [ 1459.157677][T17923] ? __pfx_ieee80211_tx_prepare_skb+0x10/0x10 [ 1459.163777][T17923] ? __asan_memcpy+0x3c/0x60 [ 1459.168358][T17923] ? ieee80211_probereq_get+0x21d/0x290 [ 1459.173919][T17923] hw_scan_work+0x8e3/0xfa0 [ 1459.178427][T17923] ? __pfx_hw_scan_work+0x10/0x10 [ 1459.183438][T17923] ? rcu_is_watching+0x12/0xc0 [ 1459.188204][T17923] process_one_work+0x9cc/0x1b70 [ 1459.193138][T17923] ? __pfx_process_one_work+0x10/0x10 [ 1459.198492][T17923] ? assign_work+0x1a0/0x250 [ 1459.203084][T17923] worker_thread+0x6c8/0xf10 [ 1459.207709][T17923] ? __pfx_worker_thread+0x10/0x10 [ 1459.212925][T17923] kthread+0x3c5/0x780 [ 1459.216977][T17923] ? __pfx_kthread+0x10/0x10 [ 1459.221557][T17923] ? rcu_is_watching+0x12/0xc0 [ 1459.226358][T17923] ? __pfx_kthread+0x10/0x10 [ 1459.231038][T17923] ret_from_fork+0x56d/0x730 [ 1459.235616][T17923] ? __pfx_kthread+0x10/0x10 [ 1459.240190][T17923] ret_from_fork_asm+0x1a/0x30 [ 1459.244972][T17923] [ 1459.248185][T17923] Kernel Offset: disabled [ 1459.252507][T17923] Rebooting in 86400 seconds..