last executing test programs: 6m5.996525099s ago: executing program 3 (id=581): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x7, 0xaf, 0x8, 0x8}, {0x7, 0x8, 0x86, 0x71edcb02}, {0x7, 0x81, 0x47, 0x4639}]}) chdir(0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) 6m5.184316301s ago: executing program 3 (id=582): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff7ffffffffffffa, 0x100000000, &(0x7f0000000000)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x55, &(0x7f0000000040)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000224000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x4c6, 0x1) shmget(0x2, 0x1000, 0x78000000, &(0x7f000081f000/0x1000)=nil) 6m2.434910562s ago: executing program 3 (id=592): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x7, 0xaf, 0x8, 0x8}, {0x7, 0x8, 0x86, 0x71edcb02}, {0x7, 0x81, 0x47, 0x4639}]}) chdir(0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) 5m59.500618446s ago: executing program 3 (id=602): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b40)={0x1c, 0x40, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r1, &(0x7f00000001c0)={0x20, 0x0, r3}, 0x20) ioperm(0x0, 0x1fb, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r5, &(0x7f0000000080)='./file0/file0\x00', r5, &(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0) tkill(r4, 0x1) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x922, 0x12) 5m58.52144839s ago: executing program 3 (id=606): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/197, 0xc5}, {&(0x7f00000001c0)=""/225, 0xe1}], 0x2, 0x3, 0x9) (fail_nth: 4) 5m55.292155477s ago: executing program 3 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x280, 0x3}, 0x10, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x2100}], 0x1, 0x0, 0x0, 0xe) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) socket(0x28, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x80ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m55.291991157s ago: executing program 32 (id=615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x280, 0x3}, 0x10, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) ppoll(&(0x7f0000000340)=[{r3, 0x2100}], 0x1, 0x0, 0x0, 0xe) syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x1) socket(0x28, 0x5, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x80ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9588, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m45.19997788s ago: executing program 5 (id=616): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d800fe00100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00034006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5m45.054192037s ago: executing program 5 (id=650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2cc8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e046e513b3177e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) 5m43.763471207s ago: executing program 5 (id=653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) 5m42.045038478s ago: executing program 5 (id=655): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000680)) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file1\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f8000000000868327a31"], 0x10002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) lsetxattr$trusted_overlay_nlink(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740), &(0x7f0000000780)={'L+', 0x100000000}, 0x16, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x24, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8d00, 0x40}, [@IFLA_PORT_SELF={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa000800450000380000000000019078ac1414bbac14140003049078000000004500000003000000002f56dda100007f000701ac1414aa000022eb00"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000640)={0x0, &(0x7f0000000600)=[&(0x7f0000000540)="ae89c8f4a055024308edec35a9b6e58a4bcc106725ea646fc6c1304562dc910a4b3308a162b6ac83", &(0x7f0000000580)="723ff09ad8dd2e2f57bb0ce83e364e34e3530a04", &(0x7f00000005c0)="aa5adbb1f229a53b06d4b87bb9aab7c7e73e36c57e33f6d264fb72c7645548bb"], 0xddf}) 5m41.907852021s ago: executing program 5 (id=657): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1, 0x4, [@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @remote, @remote]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x0, 0x0, 0x330, 0x0, 0xfa}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00007300fe800000000000000000040000"], 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="80000000080211000001080211"], 0x36) 5m39.361434372s ago: executing program 5 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) (async, rerun: 32) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (rerun: 32) r6 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x146, r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x2c5e, &(0x7f0000000400)={0x0, 0x71eb, 0x10, 0x1, 0x10f}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_FILES_UPDATE={0x14, 0x34, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540)=[r4], 0x1}) (async, rerun: 32) r9 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async, rerun: 32) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x94}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) 5m39.035891674s ago: executing program 33 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x8000) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) (async, rerun: 32) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) (rerun: 32) r6 = add_key$user(&(0x7f0000000480), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000900)="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", 0x146, r5) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x12, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x2c5e, &(0x7f0000000400)={0x0, 0x71eb, 0x10, 0x1, 0x10f}, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_FILES_UPDATE={0x14, 0x34, 0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000540)=[r4], 0x1}) (async, rerun: 32) r9 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async, rerun: 32) r10 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r10, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'crct10dif\x00\x00\x00 \x00\x00\x00+\xcc\xff%\xd2cTH,\x00'}}) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x94}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14) 9.265864425s ago: executing program 1 (id=2022): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x600000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, &(0x7f00000001c0), 0x0, 0x2b, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r3, 0x2, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RSTATu(r7, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x2f5) writev(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000080)="82", 0x1}], 0x2) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 7.938578234s ago: executing program 1 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x42402, 0x0) write$nci(r0, &(0x7f00000000c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0xf, {0x0, 0x20, 0x2}}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000180)) r6 = open(&(0x7f0000000780)='./bus\x00', 0x1494fc, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r6, 0x0, 0x0, 0xfeffffffffffff}]) ioctl$TIOCCONS(r0, 0x541d) 6.89086499s ago: executing program 6 (id=2035): syz_emit_ethernet(0x36, &(0x7f0000000340)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x28000000}}}}}}}, 0x0) 6.753852365s ago: executing program 6 (id=2039): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) msgctl$IPC_RMID(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10101, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfff5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.644367597s ago: executing program 6 (id=2040): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x3, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000100)=[@release={0x40046306, 0x1}, @decrefs, @acquire_done={0x40106309, 0x3}], 0x37, 0x0, &(0x7f0000000140)="8ab0fa36f978fea5c40f80c8e79da4fa4250e15190c5a5536e54bd5ed51d05ece6fd717251939d38c777a8147dc1cd67a1b423a4c13d06"}) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f00000001c0)={0x2, 0x0, @loopback}, 0xfffffffffffffee7, 0x0}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x541b, &(0x7f0000000000)) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYRES8=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYBLOB="3840cba2a0c4e39cf14d5221b0cceada47bf69b376dab9eee5b837de97ebb5e532f5976bfb1705a31b51186a5ffb8ac9a33fc440affcf4b6e6740b1d90fbc45fcf494cf36dd4ed52b4eb86eaa01295967dd2790b8507ef95a15eee486b9f66bfb3c65b26bc1de14cb923141309be2855", @ANYRES32, @ANYBLOB='\x00'/16], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000deffb602000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000808500ec0085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r8}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB='\fE\x00', @ANYRES32], 0x1c}}, 0x0) 5.59935341s ago: executing program 4 (id=2041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}, {0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0xffffffff}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000480)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000001f0000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x2b, 0x1, 0x1) r7 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) r9 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) readv(r9, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.474611748s ago: executing program 4 (id=2043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001900017c82cb372c95cbed00021800000000ef000000000008000100ac1414"], 0x30}, 0x1, 0x0, 0x0, 0x4081}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89b0, &(0x7f0000000180)={'macvtap0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0xffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000e00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r5, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0x4c}}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000006c0)=0x1a) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, 0x0, 0x0) r9 = socket(0x1e, 0x4, 0x0) recvmmsg(r8, &(0x7f0000008140), 0x0, 0x7fb10727dda9, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 3.602222829s ago: executing program 0 (id=2046): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0xe6, &(0x7f0000000a40)={@local, @link_local, @void, {@mpls_mc={0x8848, {[{0x9}, {0x2, 0x0, 0x1}], @ipv4=@icmp={{0x2f, 0x4, 0x2, 0x0, 0xd0, 0x64, 0x0, 0x10, 0x1, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x34, 0xe6, 0x1, 0x9, [{@private=0xa010101, 0xfff}, {@private=0xa010102, 0x2}, {@multicast1}, {@rand_addr=0x64010101, 0x5}, {@local, 0xe}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x1c, 0x8a, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x70}, {@multicast2, 0x2dd}, {@multicast1, 0x2}]}, @lsrr={0x83, 0x1b, 0xd9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, @empty, @local]}, @rr={0x7, 0x7, 0x76, [@local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd4, [@local, @private=0xa010101, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @multicast2]}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x25}, 0x3}]}]}}, @timestamp={0xd, 0x0, 0x0, 0x8001, 0x5, 0x8, 0x4d8c, 0x8}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x7, "be84e88709"}]}}}}}}}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000180)=0x10) socket$rxrpc(0x21, 0x2, 0xa) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x7) (async) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x7) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$caif_stream(0x25, 0x1, 0x0) (async) r4 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) 3.098933576s ago: executing program 1 (id=2047): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = gettid() r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000002c0), &(0x7f00000004c0)=0x4) fchownat(r2, &(0x7f0000000280)='./file0\x00', r4, r6, 0x100) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) statx(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x400, 0x400, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3966, 0x3, 0x1000, 0x0, r12, r13, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x2}, [{0x2, 0x0, r4}, {0x2, 0xc, r7}, {0x2, 0x5, r9}], {0x4, 0x4}, [{0x8, 0x6, r5}, {0x8, 0x0, r10}, {0x8, 0x3, r8}], {0x10, 0x5}, {0x20, 0x2}}, 0x54, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 3.046729323s ago: executing program 4 (id=2048): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "f4"}]}}, 0x0}, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x9, "f4"}]}}, 0x0}, 0x0) (async) getpgrp(0xffffffffffffffff) (async) sched_setscheduler(r2, 0x5, &(0x7f0000000000)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) 3.046056013s ago: executing program 0 (id=2049): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) socket(0xa, 0x3, 0x3a) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="750645", 0x3}], 0x1, 0x0, 0x0, 0xffffff8d}, 0xc800) 2.990406649s ago: executing program 0 (id=2051): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x680340, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = socket$inet(0x2, 0x6, 0x0) shutdown(r1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r3) add_key(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000000005000c0001"], 0x90}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) timerfd_create(0x3, 0x800) io_submit(0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0xe, 0x2, {}, {0xee01}, 0xe, 0xb6}) 2.903671322s ago: executing program 0 (id=2052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000080)={0x4, "e5fc472a3eb6e618b9c9cc92f25d9b846dce3b3d3ef843692b2c482c6d0899a7", 0x10, 0x4, 0xf61, 0x10, 0x2}) 2.850755121s ago: executing program 2 (id=2053): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x20000008) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000047c0000040000001400018006000600800a000008001800e0010000"], 0x2c}}, 0x8004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r7, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/34, 0x22}], 0x1}, 0x9}], 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x10001, 0x0) shutdown(r7, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000240)) 2.850085666s ago: executing program 6 (id=2054): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd8, 0xde, 0xfc, 0x20, 0x413, 0x6029, 0xb23d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x35, 0x8e, 0x5e}}]}}]}}, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_usb_connect$uac1(0x2, 0x9d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0xe, 0x50, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xf8, 0x1, 0x3, 0x1, "2cd1d6a9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x65, 0x0, "", "c2f2de"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0x10, 0x6, 'O', 'y'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x2, 0x5, {0x7, 0x25, 0x1, 0x80, 0xf7, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, "adda", '\''}]}, {{0x9, 0x5, 0x82, 0x9, 0x408, 0x0, 0x5, 0x10, {0x7, 0x25, 0x1, 0x2, 0x2, 0x8}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xf0, 0xa, 0x5, 0x20, 0xa}, 0x16, &(0x7f0000000200)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x7f, 0x10}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x8, 0x7, 0x6}]}, 0x9, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0x91, &(0x7f0000000280)=@string={0x91, 0x3, "f93ae51fe59a70df12eb547b864bda5273042e3cb21b16e6ef8237cfbf14375343abb385578d5243123f5e1bcb3e9e8de8829e2c6727e41a69a94ce8c38567ab4092080f89577d7e49ecd9eed467ac2d4b9ec80090f7c52651c311523fd3927a95df6ca755bf7667f0f71a96cd096e613345db955804060ecc4b94dd9f0154a9a5ac8c3fe241785385744b3a2ed410"}}, {0x11, &(0x7f0000000340)=@string={0x11, 0x3, "988e01c0842d59d54881254329e45c"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x441}}, {0xc9, &(0x7f00000004c0)=@string={0xc9, 0x3, "4be68e5ea5fcee820f496de34e25563dfec8eb6dbbb8191fed4ca30bca79a4b65df3b53cd11e52486005715104d22223b51f5a617126635f8f7c3166beea457e0e992f930b2c94ed025faf44a40a3ea65fb34d56f332e41e4a15bba25e1210c146b83ec4041a70af66cf47dd3028279f17f0ed433096e1ff23fc0d9cf0af69ff7921aa50d51ebf6d4a4cf66777183c44453e4556f3506cd6ee890acdcb426975796a3514b5f07c69f2b6c48af4b70755af4f4d78bd5c5705608b541ce7f3461376bf5e021ec957"}}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085000000c5000000b700000006ca000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.819344368s ago: executing program 0 (id=2055): socket(0x1d, 0x2, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x10) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0xfff5) 2.754936725s ago: executing program 0 (id=2056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="8d437a5771"]}]}, 0x30}}, 0xc000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) recvmmsg(r1, &(0x7f0000005a00)=[{{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/107, 0x6b}, {&(0x7f0000000480)=""/150, 0x96}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/116, 0x74}, {&(0x7f00000015c0)=""/246, 0xf6}, {&(0x7f00000016c0)=""/199, 0xc7}, {&(0x7f00000017c0)=""/78, 0x4e}], 0x7}, 0xe51}, {{&(0x7f00000018c0)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000001940)=""/245, 0xf5}, {&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f0000001a40)=""/41, 0x29}, {&(0x7f0000001a80)=""/22, 0x16}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000003b40)=""/176, 0xb0}, 0x2}, {{&(0x7f0000003c00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f00000051c0)=[{&(0x7f0000003c80)=""/223, 0xdf}, {&(0x7f0000003d80)=""/9, 0x9}, {&(0x7f0000003dc0)=""/4096, 0x1000}, {&(0x7f0000004dc0)=""/150, 0x96}, {&(0x7f0000004e80)=""/182, 0xb6}, {&(0x7f0000004f40)=""/167, 0xa7}, {&(0x7f0000005000)=""/236, 0xec}, {&(0x7f0000005100)=""/184, 0xb8}], 0x8, &(0x7f0000005240)=""/172, 0xac}, 0xa}, {{&(0x7f0000005300)=@alg, 0x80, &(0x7f0000005580)=[{&(0x7f0000005380)=""/182, 0xb6}, {&(0x7f0000005440)=""/224, 0xe0}, {&(0x7f0000005540)=""/12, 0xc}], 0x3, &(0x7f00000055c0)=""/67, 0x43}, 0x8}, {{&(0x7f0000005640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000005900)=[{&(0x7f00000056c0)=""/107, 0x6b}, {&(0x7f0000005740)=""/152, 0x98}, {&(0x7f0000005800)=""/231, 0xe7}], 0x3, &(0x7f0000005940)=""/190, 0xbe}, 0x4}], 0x5, 0x40010021, &(0x7f0000005b40)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x7d, &(0x7f00000001c0)="020000000980ffff", 0x8) 2.190674517s ago: executing program 1 (id=2057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x42402, 0x0) write$nci(r0, &(0x7f00000000c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0xf, {0x0, 0x20, 0x2}}, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000180)) r6 = open(&(0x7f0000000780)='./bus\x00', 0x1494fc, 0x0) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffe, r6, 0x0, 0x0, 0xfeffffffffffff}]) ioctl$TIOCCONS(r0, 0x541d) 2.189878939s ago: executing program 4 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0xb, 0x40, 0xa4, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xffff, 0xac1, 0xf9}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0xd, 0xb, 0x6}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x2, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x9, 0x4, 0x7f, 0x10, 0x7}, 0x41, &(0x7f0000000180)={0x5, 0xf, 0x41, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "7343769bfaafe919288ad0c87bd12efa"}, @ssp_cap={0x14, 0x10, 0xa, 0xb, 0x2, 0x2, 0xf, 0x7, [0xc000, 0xff]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "8338542670467fb57c6dcb25980516c0"}]}}) getpid() syz_open_dev$usbfs(0x0, 0x77, 0x101301) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) io_setup(0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) getpeername$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/128, 0x80}], 0x1, 0xc102a0, 0x101) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x300}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x0) 1.90921403s ago: executing program 2 (id=2059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$int_out(r1, 0x6, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) 1.735483669s ago: executing program 2 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffa0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000c80)="b9ff060000000000000014f086dd", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x50) 1.61878181s ago: executing program 2 (id=2061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0), 0x0, 0x9200000000000000) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x8, 0x3, 0x2, 0x2, 0x3, 0xa}) sendmsg$tipc(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 1.515094059s ago: executing program 4 (id=2062): timerfd_create(0x0, 0x800) io_submit(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(0xffffffffffffffff) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000380)="0fae484f6655baf80c0c28469e8eef66bafc0c66b8d37d66ef260f01c4f30faeeec4c3750fdb7744e3fd012f3fb805000000b9090000000f01d90f013e640fc76b0a66b899008ed8", 0x48}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) link(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x4, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x8000000000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x8001, 0x800000000000400, 0x0, 0x40, 0x0, 0x3fffffffffffffff, 0x0, 0x0, 0xa3, 0x0, 0x20000, 0x5, 0x7fff, 0x200, 0x2, 0x0, 0x16, 0x4, 0xc874, 0xc, 0xffff, 0x0, 0x40, 0x0, 0x0, 0xfffffffffffffffc, 0x7e, 0xffffffffffff8000, 0x0, 0x8000000000000001, 0x0, 0x4, 0x1, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x527, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11da, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38000000000000]}) chmod(&(0x7f0000000180)='./file0\x00', 0x140) 874.728598ms ago: executing program 4 (id=2063): socket$nl_xfrm(0x10, 0x3, 0x6) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ffc, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r6, 0x6, 0xd, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}, 0x1, 0x7000000}, 0x0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = add_key(&(0x7f00000007c0)='big_key\x00', 0x0, &(0x7f0000000840)="d5", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r10, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000440)={0x0, 0x0, r10}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={'cbcmac-aes-neon\x00'}, &(0x7f0000000540)}) 718.512901ms ago: executing program 2 (id=2064): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000c80080002400000000008000140000000001400030076657468315f09005f6873720000000014000000020a090100000000000000000000000014000000110001"], 0xb0}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x24100041}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x24, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88b0}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000001900)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet6(r2, &(0x7f0000000300)={&(0x7f0000000040)={0xa, 0x4e21, 0x6a4d, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000100)="1b48223ec35012e20700abfd6b15080ff2dec7796305b9b20058a45717d9ea69756f139db928a77b62aa1b27c3fd6e9b3b63797519191226353f851b9441de9b53008cf3e3089d1b8a6fc40e8d8a57185a4be8e3cbed4dd879cedd5484f5dba2931bcf88796fe7940ec121832b85ee483616c2", 0x73}, {&(0x7f0000000180)="c8cd19e5fd579a302071e4fdd33390747fbb2b11ccbdde372240527994029deb46c64a63c824b5afdf85bef46df3e9942407474d78d01270b4f318343966019040e977193c4561d9285afa3c3ed95027e2c4ad06d925857d9ba81bf45940cf054122359fc47ae8c3d4e01688058d401dd31ea5e77abfc558ee245039f391901edb7e109c24d8105bb6b8e4025e0b78943f77681c9b9388936aa24002326955889fc4d1cc07bb0034fa", 0xa9}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000240)="59b18a1fac2d0a3b7881ef31b210223b202ae6eff5eb66f8c1d72fd9bac1758b1b3ce16f35388178af6243b7ecfcadba4523084e28a32b72ddaae306b34f6f9e6728266a0e608dfc1707d614b7a04b4c486c88cbece3adfcfacc54f8619bc047bc7ae5b74e90853b62578cb03dd06e913aec01230c279adb2f3c62321222db27752a9762881dc3ee9c582de74b50b9a226be3ad505f55e55482f563845e3a16adc1eba8bff422b521166bca73a", 0xad}], 0x4, &(0x7f0000001500)=[@hopopts={{0x120, 0x29, 0x36, {0x73, 0x20, '\x00', [@ra={0x5, 0x2, 0x101}, @pad1, @generic={0x7, 0xfa, "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"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffc}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x11, 0x10, 0x2, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @empty, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x2a}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0x3b, 0x10, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x7, [0x6, 0x5, 0x7, 0x3]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x5, 0x6, [0x7]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @rthdrdstopts={{0xf8, 0x29, 0x37, {0x3b, 0x1b, '\x00', [@generic={0xa, 0xd8, "3ec8c2307de0d56494cc76ff0cbf818155c84ee6d4bce3176560d63a5bfcfc3f7185f54dc46439b745164b24cccaff58bf0fd3571f3d0b7c93bb10142f22e0187fe236696332e68032c7eccdf15b0be66df84dcbb5d25f5723392a5506481e11bfe89862449876807f2cd264e99c4259ab32731df704158e1014ac90fcbac6c0abe58b5acfa988e1bc777b22036686b1f3ff38da898db1e027fd1a8073281f2e0580c837839432dd104c716e7dea228838622e7faac7b0598847a48bbeafc276914276d517d3ff08a19639b83780269cd180631edd378d87"}]}}}, @flowinfo={{0x14}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x0, 0x7, '\x00', [@hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hoplimit_2292={{0x14}}], 0x3f0}, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) tkill(0x0, 0x1f) tkill(0x0, 0x12) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000480)=0x8, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) 688.725612ms ago: executing program 1 (id=2065): r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/221, 0xdd}, {0x0}, {0x0}, {&(0x7f0000000d40)=""/164, 0xa4}, {&(0x7f0000000880)=""/75, 0x4b}, {0x0}, {0x0}], 0x7, 0x0, 0x0) unshare(0x62040200) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000200)={0x2, 0x5e22, @rand_addr=0x64010100}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'bridge_slave_1\x00', {0x2, 0xff, @broadcast}}) r4 = fsmount(r0, 0x0, 0x0) mknodat(r4, &(0x7f0000000040)='./file0\x00', 0x1004, 0x5) 612.388721ms ago: executing program 6 (id=2066): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x4, 0x5, 0x5, 0xfffff800, 0x3, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x528, 0xc, 0x5}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fanotify_init(0x79, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11, 0x9, 0x8, 0x15, 0xf704, 0x400, 0x100, 0x80000000, 0x2}}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmmsg(r6, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40, 0x0) 169.946691ms ago: executing program 6 (id=2067): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000000)={0x8, 0x4, 0x6}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000200000040"]) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x30, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x14, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000640)={0x0, 0x0, 0x4, "2f520edc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000180), 0x2, 0x3) 70.84124ms ago: executing program 1 (id=2068): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000240)={0xa, 0x6, 0x10, 0x800, 0xb, "2d164d43a6e917cb8b663d68d93a1e2b6973f2"}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_UNALIGN(0x6, 0x1) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x15, 0x2, 'wrr\x00', 0x0, 0x1, 0x44}, 0x2c) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x7f00, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 0s ago: executing program 2 (id=2069): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) syz_io_uring_setup(0x38f0, &(0x7f0000000140)={0x0, 0x108380, 0x100, 0x1, 0x39f}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(r1, &(0x7f0000000040)='net/rt_acct\x00') syz_io_uring_submit(r4, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {0x0, 0xffff000000000000}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) kernel console output (not intermixed with test programs): z [ 378.135355][ T59] usb 1-1: config 0 descriptor?? [ 378.141295][T13619] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 378.219238][T13686] FAULT_INJECTION: forcing a failure. [ 378.219238][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 378.238428][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.2.1028 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 378.249223][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 378.259285][T13686] Call Trace: [ 378.262559][T13686] [ 378.265486][T13686] dump_stack_lvl+0x16c/0x1f0 [ 378.270170][T13686] should_fail_ex+0x497/0x5b0 [ 378.274851][T13686] ? fs_reclaim_acquire+0xae/0x150 [ 378.279967][T13686] should_failslab+0xc2/0x120 [ 378.284643][T13686] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 378.290446][T13686] ? __alloc_skb+0x2b1/0x380 [ 378.295044][T13686] __alloc_skb+0x2b1/0x380 [ 378.299464][T13686] ? __pfx___alloc_skb+0x10/0x10 [ 378.304409][T13686] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 378.310401][T13686] netlink_alloc_large_skb+0x69/0x130 [ 378.315791][T13686] netlink_sendmsg+0x689/0xd70 [ 378.320573][T13686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.325880][T13686] ____sys_sendmsg+0xaaf/0xc90 [ 378.330652][T13686] ? copy_msghdr_from_user+0x10b/0x160 [ 378.336119][T13686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 378.341426][T13686] ___sys_sendmsg+0x135/0x1e0 [ 378.346105][T13686] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.351311][T13686] ? __pfx_lock_release+0x10/0x10 [ 378.356334][T13686] ? trace_lock_acquire+0x14e/0x1f0 [ 378.361547][T13686] ? __fget_files+0x206/0x3a0 [ 378.366228][T13686] __sys_sendmsg+0x16e/0x220 [ 378.370814][T13686] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.375940][T13686] do_syscall_64+0xcd/0x250 [ 378.380448][T13686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.386343][T13686] RIP: 0033:0x7ff988985d29 [ 378.390754][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.410370][T13686] RSP: 002b:00007ff98987f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.418801][T13686] RAX: ffffffffffffffda RBX: 00007ff988b75fa0 RCX: 00007ff988985d29 [ 378.426775][T13686] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 378.434744][T13686] RBP: 00007ff98987f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.442711][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.450679][T13686] R13: 0000000000000000 R14: 00007ff988b75fa0 R15: 00007ffca08b1808 [ 378.458674][T13686] [ 378.505789][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.512467][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.666084][ T59] cxacru 1-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 378.689882][ T59] cxacru 1-1:0.0: probe with driver cxacru failed with error -22 [ 378.716337][ T59] usb 1-1: USB disconnect, device number 41 [ 379.242281][ T5864] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 379.294805][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.330098][ T5946] usb 3-1: device descriptor read/64, error -71 [ 379.414644][ T5864] usb 7-1: Product: syz [ 379.418867][ T5864] usb 7-1: Manufacturer: syz [ 379.488959][ T5864] usb 7-1: SerialNumber: syz [ 379.521049][ T5864] usb 7-1: config 0 descriptor?? [ 379.598321][ T5897] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 380.249660][ T5946] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 380.387255][ T5864] int51x1 7-1:0.0: probe with driver int51x1 failed with error -71 [ 380.397722][ T5864] usb 7-1: USB disconnect, device number 10 [ 380.405085][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 380.418055][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.429065][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.442294][ T5897] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 380.451426][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.541689][ T5897] usb 2-1: config 0 descriptor?? [ 380.633721][ T5946] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 380.642989][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.654573][ T5946] usb 3-1: Product: syz [ 380.658736][ T5946] usb 3-1: Manufacturer: syz [ 380.680082][ T5946] usb 3-1: SerialNumber: syz [ 380.698422][ T5946] usb 3-1: config 0 descriptor?? [ 380.851761][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1033'. [ 380.943499][ T5946] usb 3-1: ignoring: probably an ADSL modem [ 381.307534][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1038'. [ 381.362905][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 381.368975][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 381.382693][ T5946] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 381.430766][T13701] overlayfs: missing 'lowerdir' [ 381.448184][ T5946] usb 3-1: USB disconnect, device number 29 [ 381.515051][ T5897] usb 2-1: USB disconnect, device number 32 [ 381.583432][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 381.583448][ T29] audit: type=1326 audit(1734701941.752:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 381.613169][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.642527][ T29] audit: type=1326 audit(1734701941.782:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13850 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 382.090740][ T29] audit: type=1326 audit(1734701941.812:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.123387][ T29] audit: type=1326 audit(1734701941.812:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.170238][ T29] audit: type=1326 audit(1734701941.812:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.209997][ T29] audit: type=1326 audit(1734701941.812:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.240065][ T59] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 382.264762][ T29] audit: type=1326 audit(1734701941.812:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.320007][ T29] audit: type=1326 audit(1734701941.812:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.360041][ T5897] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 382.380015][ T29] audit: type=1326 audit(1734701941.812:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.410526][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 382.433865][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.579899][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.580083][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 382.595983][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 382.598677][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.607934][ T29] audit: type=1326 audit(1734701941.812:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13852 comm="syz.6.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bbdd85d29 code=0x7ffc0000 [ 382.628653][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 382.655661][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 382.665844][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 382.675593][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 382.685331][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 382.697062][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.714456][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 382.740153][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 382.751582][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 382.761939][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 382.771741][ T5897] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 382.781658][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 382.844147][ T5897] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 382.857255][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.866490][ T5897] usb 3-1: Product: syz [ 382.878181][ T5897] usb 3-1: Manufacturer: syz [ 382.889124][ T5897] usb 3-1: SerialNumber: syz [ 382.934842][ T5897] usb 3-1: config 0 descriptor?? [ 382.953734][T13851] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 383.201995][ T5897] cxacru 3-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 383.209632][ T59] usb 7-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 383.219462][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.227849][ T59] usb 7-1: Product: syz [ 383.227936][ T5897] cxacru 3-1:0.0: probe with driver cxacru failed with error -22 [ 383.232383][ T59] usb 7-1: Manufacturer: syz [ 383.244510][ T59] usb 7-1: SerialNumber: syz [ 383.254241][ T5897] usb 3-1: USB disconnect, device number 30 [ 383.298204][ T59] usb 7-1: config 0 descriptor?? [ 383.305774][T13853] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 383.741203][ T59] cxacru 7-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 383.749529][ T59] cxacru 7-1:0.0: probe with driver cxacru failed with error -22 [ 383.763022][ T59] usb 7-1: USB disconnect, device number 11 [ 383.963572][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 383.972016][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 384.123921][T13903] ceph: No mds server is up or the cluster is laggy [ 384.220143][T13920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1052'. [ 384.251552][T13910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.286300][ T59] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 385.621420][ T59] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 385.632773][ T59] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 385.643254][ T59] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 385.652552][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.667823][T13931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 385.718760][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.304504][ T5897] usb 7-1: USB disconnect, device number 12 [ 387.104343][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 387.104361][ T29] audit: type=1326 audit(1734701947.152:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13930 comm="syz.6.1055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8bbdd85d29 code=0x0 [ 387.122186][T13992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1061'. [ 387.133490][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.152838][T13984] lo speed is unknown, defaulting to 1000 [ 387.257402][T13989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1059'. [ 387.949374][ T29] audit: type=1400 audit(1734701948.112:921): avc: denied { connect } for pid=14047 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 387.994246][ T29] audit: type=1400 audit(1734701948.162:922): avc: denied { getopt } for pid=14047 comm="syz.0.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.013641][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.437756][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 388.460313][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 388.500067][ T29] audit: type=1400 audit(1734701948.642:923): avc: denied { listen } for pid=14059 comm="syz.0.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 388.536401][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.544643][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.553072][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.560985][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.568753][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.577210][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.585139][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.773279][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.810235][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.817923][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.825822][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.833700][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.841421][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.849073][ T5946] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 388.861754][ T5946] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 390.080142][ T5897] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 390.088473][ T865] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 390.676355][T14100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.838553][T14103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.289092][ T865] usb 3-1: Using ep0 maxpacket: 8 [ 391.295557][ T865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.408608][ T865] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 391.418185][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.433707][ T865] usb 3-1: config 0 descriptor?? [ 391.442759][ T865] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 391.565376][ T865] gspca_vc032x: reg_r err -71 [ 391.570451][ T865] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 391.580901][ T865] usb 3-1: USB disconnect, device number 31 [ 392.680139][ T5946] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 392.907610][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 392.915258][ T5946] usb 2-1: config 0 has an invalid interface number: 161 but max is 2 [ 392.929353][ T5946] usb 2-1: config 0 has an invalid interface number: 209 but max is 2 [ 392.953966][ T5946] usb 2-1: config 0 has an invalid interface number: 228 but max is 2 [ 392.962342][ T5946] usb 2-1: config 0 has an invalid interface number: 159 but max is 2 [ 393.151237][ T5946] usb 2-1: config 0 has 4 interfaces, different from the descriptor's value: 3 [ 393.161614][ T5946] usb 2-1: config 0 has no interface number 0 [ 393.168647][ T5946] usb 2-1: config 0 has no interface number 1 [ 393.174844][ T5946] usb 2-1: config 0 has no interface number 2 [ 393.181077][ T5946] usb 2-1: config 0 has no interface number 3 [ 393.187296][ T5946] usb 2-1: config 0 interface 161 altsetting 95 bulk endpoint 0x9 has invalid maxpacket 16 [ 393.197423][ T5946] usb 2-1: config 0 interface 161 altsetting 95 bulk endpoint 0x5 has invalid maxpacket 64 [ 393.207669][ T5946] usb 2-1: config 0 interface 161 altsetting 95 has an invalid descriptor for endpoint zero, skipping [ 393.218967][ T5946] usb 2-1: config 0 interface 161 altsetting 95 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 393.230255][ T5946] usb 2-1: config 0 interface 161 altsetting 95 endpoint 0x4 has an invalid bInterval 252, changing to 7 [ 393.241651][ T5946] usb 2-1: config 0 interface 209 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 393.252452][ T5946] usb 2-1: config 0 interface 209 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 393.266122][ T5946] usb 2-1: too many endpoints for config 0 interface 228 altsetting 173: 225, using maximum allowed: 30 [ 393.277979][ T5946] usb 2-1: config 0 interface 228 altsetting 173 has an invalid descriptor for endpoint zero, skipping [ 393.289125][ T5946] usb 2-1: config 0 interface 228 altsetting 173 has 1 endpoint descriptor, different from the interface descriptor's value: 225 [ 393.302662][ T5946] usb 2-1: config 0 interface 159 altsetting 150 has a duplicate endpoint with address 0x4, skipping [ 393.313696][ T5946] usb 2-1: config 0 interface 159 altsetting 150 has a duplicate endpoint with address 0x8, skipping [ 393.324683][ T5946] usb 2-1: config 0 interface 159 altsetting 150 has a duplicate endpoint with address 0x9, skipping [ 393.335702][ T5946] usb 2-1: config 0 interface 161 has no altsetting 0 [ 393.342598][ T5946] usb 2-1: config 0 interface 209 has no altsetting 0 [ 393.349439][ T5946] usb 2-1: config 0 interface 228 has no altsetting 0 [ 393.356319][ T5946] usb 2-1: config 0 interface 159 has no altsetting 0 [ 393.607462][ T5946] usb 2-1: New USB device found, idVendor=0565, idProduct=0005, bcdDevice=b6.06 [ 393.616891][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.625300][ T5946] usb 2-1: Product: syz [ 393.629578][ T5946] usb 2-1: Manufacturer: syz [ 393.634518][ T5946] usb 2-1: SerialNumber: syz [ 393.650180][ T5946] usb 2-1: config 0 descriptor?? [ 393.656037][T14123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.666737][T14123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 393.906146][T14152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1087'. [ 394.054732][T14157] binder: 14155:14157 ioctl c0306201 20000580 returned -14 [ 394.391958][T14123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.430325][T14123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.654628][ T5946] kaweth 2-1:0.161: Firmware present in device. [ 394.661962][ T5946] kaweth 2-1:0.161: Error reading configuration (-71), no net device created [ 394.676553][ T5946] kaweth 2-1:0.161: probe with driver kaweth failed with error -5 [ 394.694410][ T59] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 394.976782][ T5946] kaweth 2-1:0.209: Firmware present in device. [ 395.424784][ T5946] kaweth 2-1:0.209: Error reading configuration (-71), no net device created [ 395.433973][ T5946] kaweth 2-1:0.209: probe with driver kaweth failed with error -5 [ 395.474495][ T5946] kaweth 2-1:0.228: Firmware present in device. [ 395.482123][ T5946] kaweth 2-1:0.228: Error reading configuration (-71), no net device created [ 395.491510][ T5946] kaweth 2-1:0.228: probe with driver kaweth failed with error -5 [ 395.495677][T14180] 9pnet_fd: Insufficient options for proto=fd [ 395.682209][ T59] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 395.720712][ T59] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.722040][ T5946] kaweth 2-1:0.159: Firmware present in device. [ 395.734019][ T59] usb 3-1: New USB device found, idVendor=0079, idProduct=1803, bcdDevice= 0.00 [ 395.746779][ T5946] kaweth 2-1:0.159: Error reading configuration (-71), no net device created [ 395.747260][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.755946][ T5946] kaweth 2-1:0.159: probe with driver kaweth failed with error -5 [ 395.849271][ T5946] usb 2-1: USB disconnect, device number 33 [ 396.105837][ T59] usb 3-1: config 0 descriptor?? [ 396.310062][ T29] audit: type=1400 audit(1734701956.472:924): avc: denied { accept } for pid=14203 comm="syz.6.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 396.492558][T14211] netlink: 'syz.1.1096': attribute type 4 has an invalid length. [ 396.550232][ T29] audit: type=1400 audit(1734701956.552:925): avc: denied { write } for pid=14167 comm="syz.2.1090" name="net" dev="proc" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 396.795407][ T29] audit: type=1400 audit(1734701956.552:926): avc: denied { add_name } for pid=14167 comm="syz.2.1090" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 396.797285][T14213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.826140][T14213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.841145][ T29] audit: type=1400 audit(1734701956.552:927): avc: denied { create } for pid=14167 comm="syz.2.1090" name="pfkey" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 396.861741][ T29] audit: type=1400 audit(1734701956.562:928): avc: denied { associate } for pid=14167 comm="syz.2.1090" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 397.115584][T14168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.134700][T14168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.404084][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 397.410165][ T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 397.420031][ T59] usb 3-1: USB disconnect, device number 32 [ 397.553565][T14246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.588045][ T5866] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 397.740078][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 397.750717][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 397.791862][ T5866] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 397.888259][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.928846][ T5946] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 397.957838][ T5866] usb 1-1: config 0 descriptor?? [ 398.101053][ T5946] usb 2-1: Using ep0 maxpacket: 16 [ 398.107578][ T5946] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.117253][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.127668][ T5946] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.165029][ T5946] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.173074][ T5866] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 398.174480][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.208304][ T5946] usb 2-1: Product: syz [ 398.212900][ T5946] usb 2-1: Manufacturer: syz [ 398.217605][ T5946] usb 2-1: SerialNumber: syz [ 398.320084][ T5897] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 398.611927][T14285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.145560][ T5897] usb 7-1: Using ep0 maxpacket: 32 [ 399.747281][ T5897] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.760061][ T5897] usb 7-1: config 0 has no interface number 0 [ 399.782398][ T5897] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 399.792216][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.800571][ T5897] usb 7-1: Product: syz [ 399.805070][ T29] audit: type=1400 audit(1734701959.972:929): avc: denied { append } for pid=14221 comm="syz.1.1099" name="event3" dev="devtmpfs" ino=1014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 399.813286][ T5897] usb 7-1: Manufacturer: syz [ 399.838455][T14288] vlan2: entered promiscuous mode [ 399.872471][T14288] vlan2: entered allmulticast mode [ 399.915079][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1110'. [ 399.923737][T14288] vlan0: entered allmulticast mode [ 399.993584][T14288] veth0_vlan: entered allmulticast mode [ 400.003920][T14288] vlan0: entered promiscuous mode [ 400.108255][ T5897] usb 7-1: SerialNumber: syz [ 400.120297][ T5897] usb 7-1: config 0 descriptor?? [ 400.215450][T14288] team0: Port device vlan2 added [ 400.222905][ T5897] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 400.233369][ T5897] usb 7-1: selecting invalid altsetting 1 [ 400.239192][ T5897] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 400.282660][ T5897] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.294296][ T5897] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 400.304264][ T5897] usb 7-1: media controller created [ 400.334666][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.359354][T14294] could not allocate digest TFM handle cbcmac-aes-neon [ 400.496159][T14254] syz.6.1104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 400.614228][ T865] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 401.000094][ T5866] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 401.180094][ T5866] usb 5-1: Using ep0 maxpacket: 32 [ 401.188339][ T5866] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 401.272683][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.285350][ T5866] usb 5-1: config 0 has no interface number 0 [ 401.297524][ T59] usb 1-1: USB disconnect, device number 43 [ 401.309764][ T5866] usb 5-1: New USB device found, idVendor=0582, idProduct=0048, bcdDevice=46.f4 [ 401.319032][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.327058][ T5866] usb 5-1: Product: syz [ 401.331270][ T5866] usb 5-1: Manufacturer: syz [ 401.332126][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 401.335883][ T5866] usb 5-1: SerialNumber: syz [ 401.365026][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1104'. [ 401.380642][ T5866] usb 5-1: config 0 descriptor?? [ 401.416495][ T5946] usb 2-1: 0:2 : does not exist [ 401.424518][ T5946] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 401.450620][ T5897] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 401.465943][ T5897] zl10353_read_register: readreg error (reg=127, ret==-110) [ 401.479834][ T865] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 401.504649][ T865] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 401.530450][ T5946] usb 2-1: USB disconnect, device number 34 [ 401.568328][ T865] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 401.651922][ T865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.664621][T14302] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 401.675435][ T865] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.055669][T14357] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.064011][T14357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 402.073713][T14357] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.081570][T14357] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 402.199623][ T865] usb 3-1: USB disconnect, device number 33 [ 402.220432][ T29] audit: type=1400 audit(1734701962.222:930): avc: denied { create } for pid=14355 comm="syz.0.1114" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 402.460312][ T29] audit: type=1326 audit(1734701962.612:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.2.1109" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x0 [ 402.560186][ T29] audit: type=1400 audit(1734701962.722:932): avc: denied { unlink } for pid=5831 comm="syz-executor" name="file0" dev="tmpfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 402.591443][ T25] usb 7-1: USB disconnect, device number 13 [ 402.628123][T14403] random: crng reseeded on system resumption [ 402.921003][ T5946] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 403.118346][T14408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14408 comm=syz.1.1119 [ 403.143675][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'. [ 403.153054][ T5946] usb 1-1: Using ep0 maxpacket: 32 [ 403.162160][ T5946] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 403.170844][ T5946] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 403.190260][ T5946] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 403.200252][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 403.210101][ T5946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 403.219829][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 403.232955][ T5946] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 403.242150][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.260625][ T5946] usb 1-1: config 0 descriptor?? [ 403.276737][T14408] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.299874][T14425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.326319][T14425] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 403.369713][T14452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.727824][ T25] usb 5-1: USB disconnect, device number 29 [ 403.887995][T14425] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 403.900122][ T5946] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 403.929347][ T29] audit: type=1400 audit(1734701964.092:933): avc: denied { execute } for pid=14460 comm="syz.4.1121" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=28407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 404.101424][ T5946] usb 1-1: USB disconnect, device number 44 [ 404.109465][ T5946] usblp0: removed [ 404.132715][T14482] netlink: 'syz.1.1123': attribute type 4 has an invalid length. [ 404.908177][T14490] loop8: detected capacity change from 0 to 7 [ 404.940553][T14490] Dev loop8: unable to read RDB block 7 [ 404.946780][T14490] loop8: unable to read partition table [ 404.956225][T14490] loop8: partition table beyond EOD, truncated [ 404.962750][T14490] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 404.962750][T14490] ) failed (rc=-5) [ 405.334696][ T29] audit: type=1400 audit(1734701965.502:934): avc: denied { setopt } for pid=14496 comm="syz.4.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 405.571422][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.000282][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 406.039482][T14514] random: crng reseeded on system resumption [ 406.181479][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.196576][ T25] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 406.206060][ T5821] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 406.213887][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.224288][ T25] usb 3-1: config 0 descriptor?? [ 406.369653][T14518] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.378890][T14518] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.387864][ T5821] usb 5-1: Using ep0 maxpacket: 32 [ 406.393124][T14518] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.402134][T14518] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.412062][ T5821] usb 5-1: config 6 has an invalid interface number: 41 but max is 0 [ 406.420527][ T5821] usb 5-1: config 6 has no interface number 0 [ 406.429427][ T5821] usb 5-1: New USB device found, idVendor=187f, idProduct=0600, bcdDevice=ba.95 [ 406.438731][ T5821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.447002][ T5821] usb 5-1: Product: syz [ 406.451450][ T5821] usb 5-1: Manufacturer: syz [ 406.456030][ T5821] usb 5-1: SerialNumber: syz [ 406.466150][ T5821] smsusb:smsusb_probe: board id=18, interface number 41 [ 406.491386][T14518] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.500739][T14518] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.510103][T14518] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.519149][T14518] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 406.534310][T14518] hsr_slave_1: left allmulticast mode [ 406.539841][T14518] vlan2: left promiscuous mode [ 406.545574][T14518] vlan2: left allmulticast mode [ 406.581645][ T865] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 406.647645][T14498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.662543][T14498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.740798][ T59] usb 5-1: USB disconnect, device number 30 [ 406.751195][ T25] keytouch 0003:0926:3333.0012: fixing up Keytouch IEC report descriptor [ 406.763813][ T25] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0012/input/input43 [ 406.780676][ T865] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 406.933896][T14551] rtc_cmos 00:00: Alarms can be up to one day in the future [ 407.032260][ T25] keytouch 0003:0926:3333.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 407.218277][ T865] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 407.228186][ T865] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 407.237278][ T865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.316835][ T25] usb 3-1: USB disconnect, device number 34 [ 407.501991][T14522] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 407.522181][ T865] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 408.124213][ T865] usb 1-1: USB disconnect, device number 45 [ 408.319386][ T29] audit: type=1326 audit(1734701968.482:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14521 comm="syz.0.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x0 [ 408.397598][T14627] netlink: 'syz.4.1141': attribute type 2 has an invalid length. [ 408.695176][T14641] random: crng reseeded on system resumption [ 409.089855][ T25] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 409.181921][T14649] netlink: 'syz.6.1145': attribute type 1 has an invalid length. [ 409.192004][T14649] netlink: 'syz.6.1145': attribute type 4 has an invalid length. [ 409.310659][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 409.429365][ T25] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=c8.43 [ 409.493538][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.585084][ T25] usb 3-1: Product: syz [ 409.589371][ T25] usb 3-1: Manufacturer: syz [ 409.594155][ T25] usb 3-1: SerialNumber: syz [ 409.602066][ T25] usb 3-1: config 0 descriptor?? [ 409.901356][ T865] usb 3-1: USB disconnect, device number 35 [ 410.218055][T14668] rtc_cmos 00:00: Alarms can be up to one day in the future [ 411.638564][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 411.790008][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 412.320020][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 412.329736][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 412.339692][ T59] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 412.348916][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.370079][ T59] usb 7-1: config 0 descriptor?? [ 412.378824][ T59] gspca_main: spca561-2.14.0 probing abcd:cdee [ 412.705235][T14713] random: crng reseeded on system resumption [ 413.121007][ T59] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 413.133037][ T59] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 413.140257][ T59] usb 7-1: MIDIStreaming interface descriptor not found [ 413.618897][T14721] Unrecognized hibernate image header format! [ 413.625103][T14721] PM: hibernation: Image mismatch: architecture specific data [ 413.800069][ T29] audit: type=1400 audit(1734701973.942:936): avc: denied { ioctl } for pid=14678 comm="syz.6.1153" path="socket:[28777]" dev="sockfs" ino=28777 ioctlcmd=0xaf12 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 415.046524][T14758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1165'. [ 415.261273][ T59] usb 7-1: USB disconnect, device number 14 [ 416.053139][T14785] FAULT_INJECTION: forcing a failure. [ 416.053139][T14785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.066510][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.0.1169 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 416.077256][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 416.087288][T14785] Call Trace: [ 416.090547][T14785] [ 416.093455][T14785] dump_stack_lvl+0x16c/0x1f0 [ 416.098116][T14785] should_fail_ex+0x497/0x5b0 [ 416.102783][T14785] _copy_from_user+0x2e/0xd0 [ 416.107355][T14785] kstrtouint_from_user+0xd7/0x1c0 [ 416.112441][T14785] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 416.118137][T14785] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 416.123752][T14785] proc_fail_nth_write+0x84/0x250 [ 416.128766][T14785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 416.134383][T14785] ? ksys_write+0x12b/0x250 [ 416.138889][T14785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 416.144523][T14785] vfs_write+0x24c/0x1150 [ 416.148851][T14785] ? __fget_files+0x1fc/0x3a0 [ 416.153522][T14785] ? __pfx___mutex_lock+0x10/0x10 [ 416.158560][T14785] ? __pfx_vfs_write+0x10/0x10 [ 416.163327][T14785] ? __fget_files+0x206/0x3a0 [ 416.168003][T14785] ksys_write+0x12b/0x250 [ 416.172327][T14785] ? __pfx_ksys_write+0x10/0x10 [ 416.177172][T14785] do_syscall_64+0xcd/0x250 [ 416.181665][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.187543][T14785] RIP: 0033:0x7f303c1847df [ 416.191943][T14785] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 416.211554][T14785] RSP: 002b:00007f303d04b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 416.219960][T14785] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f303c1847df [ 416.227917][T14785] RDX: 0000000000000001 RSI: 00007f303d04b0a0 RDI: 0000000000000004 [ 416.235870][T14785] RBP: 00007f303d04b090 R08: 0000000000000000 R09: 0000000000000000 [ 416.243820][T14785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 416.251770][T14785] R13: 0000000000000000 R14: 00007f303c375fa0 R15: 00007ffe3e8d4218 [ 416.259733][T14785] [ 416.262841][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.357323][T14789] random: crng reseeded on system resumption [ 416.820002][T14793] Unrecognized hibernate image header format! [ 416.826182][T14793] PM: hibernation: Image mismatch: architecture specific data [ 417.050530][ T59] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 417.390212][ T59] usb 7-1: device descriptor read/64, error -71 [ 417.407641][T14794] rtc_cmos 00:00: Alarms can be up to one day in the future [ 417.650054][ T59] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 417.790173][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 417.802312][ T59] usb 7-1: device descriptor read/64, error -71 [ 417.930280][ T5895] usb 3-1: device descriptor read/64, error -71 [ 417.950255][ T59] usb usb7-port1: attempt power cycle [ 418.190231][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 418.320029][ T5895] usb 3-1: device descriptor read/64, error -71 [ 418.328133][T14816] bio_check_eod: 2 callbacks suppressed [ 418.328149][T14816] syz.0.1176: attempt to access beyond end of device [ 418.328149][T14816] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 418.340045][ T59] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 418.346696][T14816] befs: (nbd0): unable to read superblock [ 418.382887][T14718] net_ratelimit: 3 callbacks suppressed [ 418.382906][T14718] Set syz1 is full, maxelem 65536 reached [ 418.430649][ T59] usb 7-1: device descriptor read/8, error -71 [ 418.533521][ T5895] usb usb3-port1: attempt power cycle [ 419.249216][T14830] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1178'. [ 419.510147][ T5895] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 419.554918][ T5895] usb 3-1: device descriptor read/8, error -71 [ 419.843847][T14845] siw: device registration error -23 [ 419.944601][ T5821] IPVS: starting estimator thread 0... [ 420.041403][T14847] IPVS: using max 25 ests per chain, 60000 per kthread [ 420.275842][ T5946] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 420.283551][ T5895] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 420.310468][ T5895] usb 3-1: device descriptor read/8, error -71 [ 420.478229][ T5895] usb usb3-port1: unable to enumerate USB device [ 420.526201][ T5946] usb 1-1: not running at top speed; connect to a high speed hub [ 420.534869][ T5946] usb 1-1: config 11 has an invalid interface number: 95 but max is 0 [ 420.543133][ T5946] usb 1-1: config 11 has no interface number 0 [ 420.549315][ T5946] usb 1-1: config 11 interface 95 has no altsetting 0 [ 420.559951][ T29] audit: type=1326 audit(1734701980.722:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 420.733201][ T29] audit: type=1326 audit(1734701980.722:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 420.757712][ T29] audit: type=1326 audit(1734701980.722:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 420.807277][ T29] audit: type=1326 audit(1734701980.722:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 420.830873][ T29] audit: type=1326 audit(1734701980.722:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 420.973901][T14867] rtc_cmos 00:00: Alarms can be up to one day in the future [ 421.836702][ T29] audit: type=1326 audit(1734701980.722:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 421.867499][ T29] audit: type=1326 audit(1734701980.722:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 421.891055][ T29] audit: type=1326 audit(1734701980.722:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 421.914604][ T29] audit: type=1326 audit(1734701980.722:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 421.939749][ T29] audit: type=1326 audit(1734701980.722:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.1.1186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 422.061462][ T5946] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 422.071131][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.079128][ T5946] usb 1-1: Product: syz [ 422.083926][ T5946] usb 1-1: SerialNumber: syz [ 422.221966][T14875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.206602][T14891] FAULT_INJECTION: forcing a failure. [ 423.206602][T14891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.219845][T14891] CPU: 1 UID: 0 PID: 14891 Comm: syz.4.1193 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 423.230606][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 423.240655][T14891] Call Trace: [ 423.243927][T14891] [ 423.246852][T14891] dump_stack_lvl+0x16c/0x1f0 [ 423.251536][T14891] should_fail_ex+0x497/0x5b0 [ 423.256232][T14891] strncpy_from_user+0x3b/0x2d0 [ 423.261089][T14891] getname_flags.part.0+0x8f/0x550 [ 423.266208][T14891] getname+0x8d/0xe0 [ 423.270099][T14891] io_linkat_prep+0x254/0x3f0 [ 423.274779][T14891] io_submit_sqes+0x853/0x25c0 [ 423.279566][T14891] __do_sys_io_uring_enter+0xd43/0x1620 [ 423.285120][T14891] ? __fget_files+0x206/0x3a0 [ 423.289793][T14891] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 423.295778][T14891] ? fput+0x67/0x440 [ 423.299672][T14891] ? ksys_write+0x1ba/0x250 [ 423.304181][T14891] ? __pfx_ksys_write+0x10/0x10 [ 423.309049][T14891] do_syscall_64+0xcd/0x250 [ 423.313570][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.319471][T14891] RIP: 0033:0x7fb7cfb85d29 [ 423.323886][T14891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.343493][T14891] RSP: 002b:00007fb7cd9d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 423.351904][T14891] RAX: ffffffffffffffda RBX: 00007fb7cfd76160 RCX: 00007fb7cfb85d29 [ 423.359869][T14891] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000005 [ 423.367835][T14891] RBP: 00007fb7cd9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 423.375801][T14891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.383765][T14891] R13: 0000000000000000 R14: 00007fb7cfd76160 R15: 00007fffb1e480c8 [ 423.391744][T14891] [ 423.619019][T14900] netlink: 'syz.0.1196': attribute type 7 has an invalid length. [ 423.626927][T14900] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1196'. [ 423.644193][ T5946] usb 1-1: USB disconnect, device number 46 [ 425.581590][T14937] tipc: Can't bind to reserved service type 1 [ 425.601456][ T5895] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 425.753213][T14940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.304848][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 426.304864][ T29] audit: type=1400 audit(1734701986.472:960): avc: denied { create } for pid=14943 comm="syz.4.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 426.431230][ T5895] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 426.450750][ T5895] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 426.479952][ T5895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 426.509599][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.574833][T14921] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 426.587792][ T5895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 427.206625][T14937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1202'. [ 427.240207][T14939] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1202'. [ 427.263570][ T5821] usb 1-1: USB disconnect, device number 47 [ 427.323290][ T29] audit: type=1400 audit(1734701987.492:961): avc: denied { audit_write } for pid=14963 comm="syz.2.1205" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 427.438381][ T29] audit: type=1400 audit(1734701987.602:962): avc: denied { read } for pid=14963 comm="syz.2.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 427.595319][ T5946] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 427.742506][ T29] audit: type=1326 audit(1734701987.902:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14920 comm="syz.0.1198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x0 [ 428.010894][ T5946] usb 5-1: not running at top speed; connect to a high speed hub [ 428.019511][ T5946] usb 5-1: config 11 has an invalid interface number: 95 but max is 0 [ 428.029974][ T5946] usb 5-1: config 11 has no interface number 0 [ 428.036169][ T5946] usb 5-1: config 11 interface 95 has no altsetting 0 [ 428.119576][ T5946] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 428.146246][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.187134][ T5946] usb 5-1: Product: syz [ 428.291988][ T5946] usb 5-1: SerialNumber: syz [ 428.566370][ T29] audit: type=1400 audit(1734701988.732:964): avc: denied { nlmsg_write } for pid=14990 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 429.229641][T15000] 9pnet_fd: Insufficient options for proto=fd [ 429.717393][T14998] 9pnet_fd: Insufficient options for proto=fd [ 430.545981][ T5946] usb 5-1: USB disconnect, device number 31 [ 430.574997][ T29] audit: type=1400 audit(1734701990.732:965): avc: denied { ioctl } for pid=15015 comm="syz.1.1214" path="socket:[30016]" dev="sockfs" ino=30016 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 431.010142][T15044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.330138][T15050] random: crng reseeded on system resumption [ 432.520736][T15056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16144 sclass=netlink_route_socket pid=15056 comm=syz.1.1221 [ 432.655642][T15065] 9pnet_fd: Insufficient options for proto=fd [ 432.965280][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 432.996622][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 433.118042][ T29] audit: type=1400 audit(1734701993.282:966): avc: denied { setattr } for pid=15071 comm="syz.4.1224" name="vhost-net" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 433.163729][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 433.190628][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 433.351587][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 433.390151][T15072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1224'. [ 434.150252][T15107] fuse: Bad value for 'fd' [ 436.050485][T15118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.513722][ T29] audit: type=1400 audit(1734701996.672:967): avc: denied { accept } for pid=15121 comm="syz.6.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 436.730685][T15131] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1235'. [ 437.009434][ T59] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 437.181683][ T29] audit: type=1400 audit(1734701997.352:968): avc: denied { read } for pid=15126 comm="syz.1.1236" path="socket:[30275]" dev="sockfs" ino=30275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 437.206011][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.328354][T15138] 9pnet_fd: Insufficient options for proto=fd [ 437.420115][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 437.432214][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 437.444746][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.685274][ T59] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.694760][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.722828][ T59] usb 7-1: Product: syz [ 437.778703][ T59] usb 7-1: Manufacturer: syz [ 437.783923][ T59] usb 7-1: SerialNumber: syz [ 437.842738][ T59] usb 7-1: config 0 descriptor?? [ 437.883677][ T59] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.903469][ T59] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 438.082415][ T29] audit: type=1400 audit(1734701998.252:969): avc: denied { getopt } for pid=15145 comm="syz.0.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 438.221113][T15151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.629719][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 439.752416][ T59] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 439.759034][ T59] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 439.767597][ T59] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 439.776621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.783013][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.790719][ T59] em28xx 7-1:0.0: No AC97 audio processor [ 440.355130][ T59] usb 7-1: USB disconnect, device number 19 [ 440.362932][ T59] em28xx 7-1:0.0: Disconnecting em28xx [ 440.425673][ T59] em28xx 7-1:0.0: Freeing device [ 441.338881][T15183] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 441.357466][T15191] fuse: Unknown parameter 'max_Ηq' [ 441.449529][T15194] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 441.525279][ T29] audit: type=1326 audit(1734702001.692:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.567921][ T29] audit: type=1326 audit(1734702001.692:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.567960][ T29] audit: type=1326 audit(1734702001.722:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.567992][ T29] audit: type=1326 audit(1734702001.722:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568021][ T29] audit: type=1326 audit(1734702001.722:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568049][ T29] audit: type=1326 audit(1734702001.732:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568077][ T29] audit: type=1326 audit(1734702001.732:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568105][ T29] audit: type=1326 audit(1734702001.732:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568131][ T29] audit: type=1326 audit(1734702001.732:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.568157][ T29] audit: type=1326 audit(1734702001.732:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15196 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303c185d29 code=0x7ffc0000 [ 441.586335][T15201] tunl0: entered promiscuous mode [ 441.810721][T15201] vlan3: entered promiscuous mode [ 441.815945][T15201] vlan3: entered allmulticast mode [ 441.821122][T15201] tunl0: entered allmulticast mode [ 441.954205][T15207] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 443.306640][T15226] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 443.526058][T15235] FAULT_INJECTION: forcing a failure. [ 443.526058][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.589115][T15235] CPU: 0 UID: 0 PID: 15235 Comm: syz.4.1262 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 443.599916][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 443.609982][T15235] Call Trace: [ 443.613267][T15235] [ 443.616197][T15235] dump_stack_lvl+0x16c/0x1f0 [ 443.620895][T15235] should_fail_ex+0x497/0x5b0 [ 443.625598][T15235] _copy_to_user+0x32/0xd0 [ 443.630026][T15235] drm_ioctl+0x5fe/0xc00 [ 443.634287][T15235] ? __pfx_drm_mode_obj_get_properties_ioctl+0x10/0x10 [ 443.641156][T15235] ? __pfx_drm_ioctl+0x10/0x10 [ 443.645937][T15235] ? __pfx_lock_release+0x10/0x10 [ 443.650979][T15235] ? selinux_file_ioctl+0x180/0x270 [ 443.656179][T15235] ? selinux_file_ioctl+0xb4/0x270 [ 443.661294][T15235] ? __pfx_drm_ioctl+0x10/0x10 [ 443.666055][T15235] __x64_sys_ioctl+0x190/0x200 [ 443.670813][T15235] do_syscall_64+0xcd/0x250 [ 443.675304][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.681183][T15235] RIP: 0033:0x7fb7cfb85d29 [ 443.685583][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.705186][T15235] RSP: 002b:00007fb7d08da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.713605][T15235] RAX: ffffffffffffffda RBX: 00007fb7cfd75fa0 RCX: 00007fb7cfb85d29 [ 443.721570][T15235] RDX: 00000000200002c0 RSI: 00000000c02064b9 RDI: 0000000000000004 [ 443.729529][T15235] RBP: 00007fb7d08da090 R08: 0000000000000000 R09: 0000000000000000 [ 443.737483][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.745438][T15235] R13: 0000000000000000 R14: 00007fb7cfd75fa0 R15: 00007fffb1e480c8 [ 443.753404][T15235] [ 443.859528][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1268'. [ 444.058783][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 444.212563][ T59] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 444.670637][ T865] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 444.690043][ T59] usb 5-1: Using ep0 maxpacket: 32 [ 444.701414][ T59] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.712372][ T59] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.724352][ T59] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 444.737741][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 444.749123][ T59] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 444.759280][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 444.862100][ T59] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 444.874018][ T59] usb 5-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 444.875342][ T865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.891041][ T59] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 444.907245][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.913112][ T865] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.915264][ T59] usb 5-1: Product: syz [ 444.930612][ T59] usb 5-1: Manufacturer: syz [ 444.935419][ T59] usb 5-1: SerialNumber: syz [ 444.948583][ T59] usb 5-1: config 0 descriptor?? [ 444.961767][T15259] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 445.002404][T15288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.398544][ T865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.436280][ T865] usb 7-1: config 0 descriptor?? [ 445.465493][ T59] cxacru 5-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 445.473424][ T59] cxacru 5-1:0.0: probe with driver cxacru failed with error -22 [ 445.485250][ T59] usb 5-1: USB disconnect, device number 32 [ 445.552153][T15298] lo speed is unknown, defaulting to 1000 [ 445.863974][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.875668][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.898557][ T865] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor [ 445.912026][ T865] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0013/input/input48 [ 445.945903][T15333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 446.166251][ T865] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 447.321485][ T5895] usb 7-1: USB disconnect, device number 20 [ 447.416148][T15363] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 447.599382][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 447.599399][ T29] audit: type=1400 audit(1734702007.762:1034): avc: denied { read } for pid=15396 comm="syz.2.1289" name="mouse0" dev="devtmpfs" ino=1013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 447.884267][ T29] audit: type=1400 audit(1734702008.042:1035): avc: denied { ioctl } for pid=15396 comm="syz.2.1289" path="/dev/input/mouse0" dev="devtmpfs" ino=1013 ioctlcmd=0x5442 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 448.573972][T15412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.723637][T15428] set match dimension is over the limit! [ 450.126353][T15443] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 450.248010][T15447] xt_l2tp: invalid flags combination: c [ 451.399521][T15467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.324703][T15470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.560509][ T29] audit: type=1400 audit(1734702013.722:1036): avc: denied { getopt } for pid=15500 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 453.888906][ T29] audit: type=1400 audit(1734702014.052:1037): avc: denied { map } for pid=15507 comm="syz.6.1323" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 455.642095][T15530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.278104][ T6547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.316422][ T6547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.582382][ T5895] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 456.726142][T15542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1329'. [ 456.771350][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.784074][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.806164][ T5895] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 456.815807][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.040150][T15562] netlink: 'syz.0.1333': attribute type 2 has an invalid length. [ 457.130913][T15563] netlink: 'syz.4.1332': attribute type 2 has an invalid length. [ 457.211614][ T5895] usb 3-1: config 0 descriptor?? [ 459.917429][T15609] rtc_cmos 00:00: Alarms can be up to one day in the future [ 461.022664][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 461.029069][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 461.062001][ T5895] usb 3-1: USB disconnect, device number 40 [ 461.657913][T15642] netlink: 'syz.2.1346': attribute type 4 has an invalid length. [ 462.623920][T15645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 462.830310][T15653] netlink: 'syz.0.1352': attribute type 2 has an invalid length. [ 463.218104][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 463.592489][T15673] random: crng reseeded on system resumption [ 464.390773][T15675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.516305][ T865] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 464.550854][ T29] audit: type=1400 audit(1734702024.702:1038): avc: denied { write } for pid=15674 comm="syz.1.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 464.791801][ T865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.802931][ T865] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 464.812148][ T865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.821313][ T865] usb 7-1: config 0 descriptor?? [ 466.427389][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.436049][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.510577][ T865] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 466.521167][ T865] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0014/input/input49 [ 466.640203][ T865] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 466.676805][T15685] Unrecognized hibernate image header format! [ 466.683448][T15685] PM: hibernation: Image mismatch: architecture specific data [ 466.779483][T15719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.317982][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1364'. [ 467.390343][ T59] usb 7-1: USB disconnect, device number 21 [ 468.057632][ T29] audit: type=1400 audit(1734702028.222:1039): avc: denied { associate } for pid=15755 comm="syz.0.1370" name="nullb0" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 468.162516][T15763] rtc_cmos 00:00: Alarms can be up to one day in the future [ 468.171691][T15765] netlink: 'syz.0.1372': attribute type 2 has an invalid length. [ 468.719510][T15774] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[15774] [ 470.700390][T15800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.131824][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.230105][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.257557][ T5821] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 471.399995][ T5821] usb 3-1: device descriptor read/64, error -71 [ 472.347559][ T5821] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 472.550013][ T5821] usb 3-1: device descriptor read/64, error -71 [ 472.661295][ T5821] usb usb3-port1: attempt power cycle [ 473.149966][ T5821] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 473.290163][ T5821] usb 3-1: device descriptor read/8, error -71 [ 473.318576][T15837] netlink: 'syz.2.1391': attribute type 2 has an invalid length. [ 473.652197][T15838] binder: 15835:15838 ioctl c0306201 0 returned -14 [ 475.200411][T15855] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 475.675693][T15863] 9pnet_fd: Insufficient options for proto=fd [ 475.878318][T15878] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 478.975640][T15908] 9pnet_fd: Insufficient options for proto=fd [ 479.330597][T15915] fuse: Bad value for 'fd' [ 479.349832][T15915] 9pnet_fd: Insufficient options for proto=fd [ 479.431294][T15928] lo speed is unknown, defaulting to 1000 [ 479.485597][T15937] netlink: 'syz.6.1420': attribute type 2 has an invalid length. [ 479.720172][T15935] overlayfs: failed to clone upperpath [ 480.648474][T13759] bond0 (unregistering): Released all slaves [ 480.987060][T16019] netlink: 'syz.0.1423': attribute type 4 has an invalid length. [ 481.399217][T16018] fuse: Bad value for 'fd' [ 481.417119][T16018] 9pnet_fd: Insufficient options for proto=fd [ 481.437721][T16005] 9pnet_fd: Insufficient options for proto=fd [ 482.014879][T16030] lo speed is unknown, defaulting to 1000 [ 482.036158][T16036] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 482.060099][T16036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.090256][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 482.540574][ T29] audit: type=1400 audit(1734702042.692:1040): avc: denied { create } for pid=16073 comm="syz.1.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 482.583761][ T29] audit: type=1400 audit(1734702042.692:1041): avc: denied { sys_admin } for pid=16073 comm="syz.1.1436" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 482.756763][ T29] audit: type=1400 audit(1734702042.922:1042): avc: denied { ioctl } for pid=16077 comm="syz.6.1439" path="socket:[32517]" dev="sockfs" ino=32517 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 483.018240][ T29] audit: type=1400 audit(1734702043.152:1043): avc: denied { shutdown } for pid=16077 comm="syz.6.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 483.054387][T16088] fuse: Bad value for 'fd' [ 483.114842][T16089] 9pnet_fd: Insufficient options for proto=fd [ 484.095345][T16103] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1445'. [ 484.258288][T16111] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 464 [ 484.700020][ T5895] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 484.871167][ T5895] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 485.205077][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.450208][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.475372][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.597113][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.629710][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.675760][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.722575][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.760104][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.772283][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.006749][T16179] fuse: Bad value for 'fd' [ 486.044462][T16179] 9pnet_fd: Insufficient options for proto=fd [ 486.295991][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.305026][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.316478][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.324555][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.390056][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.410060][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.420770][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.434106][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.456197][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.468950][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.493939][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.531864][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.552407][ T5895] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 486.554190][T16189] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 486.561529][ T5895] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 486.561561][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 486.566971][ T5895] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 486.573902][T16189] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 486.584497][ T5895] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 486.667285][ T29] audit: type=1326 audit(1734702046.822:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.696315][ T5895] usb 7-1: Product: syz [ 486.701107][ T5895] usb 7-1: Manufacturer: syz [ 486.705705][ T5895] usb 7-1: SerialNumber: syz [ 486.716255][ T29] audit: type=1326 audit(1734702046.822:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.741435][ T5895] usb 7-1: config 0 descriptor?? [ 486.757931][ T5895] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 486.778042][ T29] audit: type=1326 audit(1734702046.822:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.801910][ T29] audit: type=1326 audit(1734702046.822:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.825646][ T29] audit: type=1326 audit(1734702046.822:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.850187][ T29] audit: type=1326 audit(1734702046.822:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 486.900111][ T865] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 486.964833][ T5895] usb 7-1: USB disconnect, device number 22 [ 486.981436][ T5895] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 487.200131][ T865] usb 3-1: Using ep0 maxpacket: 32 [ 487.206831][ T865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.217300][ T865] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 487.228234][ T865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 487.241047][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33307, setting to 1024 [ 487.254038][ T865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 487.265589][ T865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 487.278188][ T865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 487.287952][ T865] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 487.304025][ T865] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 487.313140][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.321255][ T865] usb 3-1: Product: syz [ 487.325439][ T865] usb 3-1: Manufacturer: syz [ 487.330108][ T865] usb 3-1: SerialNumber: syz [ 487.335992][ T865] usb 3-1: config 0 descriptor?? [ 487.344182][T16190] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 487.552484][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 487.552498][ T29] audit: type=1326 audit(1734702047.722:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 487.560481][ T865] cxacru 3-1:0.0: submit of write urb for cm 0x90 failed (-2) [ 487.588989][ T29] audit: type=1326 audit(1734702047.722:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 487.602599][ T865] cxacru 3-1:0.0: usbatm_usb_probe: invalid endpoint 02! [ 487.621986][ T865] cxacru 3-1:0.0: probe with driver cxacru failed with error -22 [ 487.639714][ T865] usb 3-1: USB disconnect, device number 45 [ 487.656575][ T29] audit: type=1326 audit(1734702047.722:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 487.683616][ T29] audit: type=1326 audit(1734702047.722:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 487.707807][ T29] audit: type=1326 audit(1734702047.722:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16185 comm="syz.2.1459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 487.946995][T16230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.170659][ T29] audit: type=1400 audit(1734702048.322:1088): avc: denied { getopt } for pid=16229 comm="syz.0.1467" lport=38575 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 488.545449][T16241] fuse: Bad value for 'fd' [ 488.564654][T16241] 9pnet_fd: Insufficient options for proto=fd [ 488.599679][T16242] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 489.816072][T16259] lo speed is unknown, defaulting to 1000 [ 490.527677][ T29] audit: type=1400 audit(1734702050.112:1089): avc: denied { read write } for pid=16261 comm="syz.2.1477" name="usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 490.563744][ T29] audit: type=1400 audit(1734702050.112:1090): avc: denied { open } for pid=16261 comm="syz.2.1477" path="/dev/usbmon9" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 492.625124][T16320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.581249][T16346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1496'. [ 493.628196][T16346] gretap0: entered promiscuous mode [ 493.666207][T16346] gretap0: left promiscuous mode [ 493.822349][T16360] No such timeout policy "syz0" [ 493.960145][ T29] audit: type=1400 audit(1734702054.122:1091): avc: denied { setopt } for pid=16345 comm="syz.0.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 493.997734][T16356] lo speed is unknown, defaulting to 1000 [ 494.978892][T16401] random: crng reseeded on system resumption [ 496.447620][T16408] tunl0: entered promiscuous mode [ 496.457736][T16408] vlan3: entered promiscuous mode [ 496.463835][T16408] vlan3: entered allmulticast mode [ 496.469200][T16408] tunl0: entered allmulticast mode [ 496.534878][T16411] Unrecognized hibernate image header format! [ 496.541202][T16411] PM: hibernation: Image mismatch: architecture specific data [ 498.280286][T16444] trusted_key: encrypted_key: insufficient parameters specified [ 498.570151][ T5821] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 498.867280][T16449] xt_CT: No such helper "snmp" [ 498.893576][ T29] audit: type=1400 audit(1734702059.032:1092): avc: denied { getopt } for pid=16447 comm="syz.1.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 498.939412][ T5821] usb 3-1: not running at top speed; connect to a high speed hub [ 498.948283][ T5821] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 498.956805][ T5821] usb 3-1: config 11 has no interface number 0 [ 498.976654][ T5821] usb 3-1: config 11 interface 95 has no altsetting 0 [ 500.106022][ T5821] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 500.120102][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.128107][ T5821] usb 3-1: Product: syz [ 500.416851][ T5821] usb 3-1: SerialNumber: syz [ 500.716608][ T5821] usb 3-1: can't set config #11, error -71 [ 500.734051][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 500.769345][ T5821] usb 3-1: USB disconnect, device number 46 [ 500.863910][T16477] devtmpfs: Cannot enable quota on remount [ 500.896584][T16482] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[16482] [ 501.967325][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.975012][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.430986][T16489] syz.1.1525 (16489) used greatest stack depth: 20896 bytes left [ 506.383210][ T29] audit: type=1400 audit(1734702066.552:1093): avc: denied { accept } for pid=16533 comm="syz.0.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 506.799133][T16545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.417048][ T29] audit: type=1400 audit(1734702067.582:1094): avc: denied { mounton } for pid=16544 comm="syz.6.1539" path="/142/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 507.536719][T16554] xt_ipcomp: unknown flags 12 [ 508.930221][T16588] random: crng reseeded on system resumption [ 509.105520][ T865] libceph: connect (1)[c::]:6789 error -101 [ 509.111796][ T865] libceph: mon0 (1)[c::]:6789 connect error [ 509.214099][T16596] Unrecognized hibernate image header format! [ 509.220428][T16596] PM: hibernation: Image mismatch: architecture specific data [ 509.655454][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 509.661545][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 509.801169][T16585] ceph: No mds server is up or the cluster is laggy [ 509.803230][T16600] 9pnet_virtio: no channels available for device syz [ 510.194450][T16622] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 510.212500][T16622] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1561'. [ 510.280005][ T5821] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 511.340223][ T5821] usb 7-1: Using ep0 maxpacket: 16 [ 511.352378][ T5821] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 511.361341][ T5821] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.387430][ T5821] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 511.447156][ T5821] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 511.495185][ T5821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.611607][T16635] random: crng reseeded on system resumption [ 511.693664][ T5821] usb 7-1: Product: syz [ 511.697934][ T5821] usb 7-1: Manufacturer: syz [ 511.702975][ T5821] usb 7-1: SerialNumber: syz [ 512.895171][ T29] audit: type=1400 audit(1734702073.062:1095): avc: denied { read } for pid=16654 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 512.929512][T16650] vlan4: entered promiscuous mode [ 512.937433][T16650] vlan4: entered allmulticast mode [ 513.247771][T16657] could not allocate digest TFM handle cbcmac-aes-neon [ 513.276018][T16673] 9pnet_fd: Insufficient options for proto=fd [ 513.362178][T16674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.686174][ T5821] usb 7-1: 0:2 : does not exist [ 515.011159][T16694] loop8: detected capacity change from 0 to 7 [ 515.044497][T16694] Dev loop8: unable to read RDB block 7 [ 515.050992][T16694] loop8: unable to read partition table [ 515.058521][T16694] loop8: partition table beyond EOD, truncated [ 515.065024][T16694] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 515.065024][T16694] ) failed (rc=-5) [ 515.117659][ T5821] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 515.145693][T16648] Unrecognized hibernate image header format! [ 515.151929][T16648] PM: hibernation: Image mismatch: architecture specific data [ 515.291476][ T5821] usb 7-1: USB disconnect, device number 23 [ 515.354919][T16705] rtc_cmos 00:00: Alarms can be up to one day in the future [ 516.857498][T16751] rtc_cmos 00:00: Alarms can be up to one day in the future [ 517.403750][T16754] 9pnet_fd: Insufficient options for proto=fd [ 519.295658][ T29] audit: type=1326 audit(1734702079.462:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.337637][T16777] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[16777] [ 519.348114][ T29] audit: type=1326 audit(1734702079.462:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.408271][ T29] audit: type=1326 audit(1734702079.462:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.417521][T16775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 519.441011][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1598'. [ 519.449845][T16775] netlink: 'syz.1.1598': attribute type 7 has an invalid length. [ 519.571038][ T29] audit: type=1326 audit(1734702079.462:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.594753][ T29] audit: type=1326 audit(1734702079.462:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.618253][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.625400][ T29] audit: type=1326 audit(1734702079.492:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.649143][ T29] audit: type=1326 audit(1734702079.492:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.672619][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.678831][ T29] audit: type=1326 audit(1734702079.492:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.702309][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.708502][ T29] audit: type=1326 audit(1734702079.582:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.732277][ T29] audit: type=1326 audit(1734702079.632:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16774 comm="syz.1.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa881b85d29 code=0x7ffc0000 [ 519.755754][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.027353][T16787] syz.6.1601: attempt to access beyond end of device [ 520.027353][T16787] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 520.040876][T16787] befs: (nbd6): unable to read superblock [ 520.126005][T16794] random: crng reseeded on system resumption [ 520.448035][T16800] Unrecognized hibernate image header format! [ 520.454329][T16800] PM: hibernation: Image mismatch: architecture specific data [ 521.837992][ T5862] kworker/1:5 (5862) used greatest stack depth: 20608 bytes left [ 522.131319][ T865] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 522.423236][T16824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.842241][ T865] usb 3-1: not running at top speed; connect to a high speed hub [ 522.861783][ T865] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 522.874348][ T865] usb 3-1: config 11 has no interface number 0 [ 522.884103][ T865] usb 3-1: config 11 interface 95 has no altsetting 0 [ 522.901201][ T865] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 522.914710][ T865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.931227][ T865] usb 3-1: Product: syz [ 522.940700][ T865] usb 3-1: Manufacturer: syz [ 522.956288][ T865] usb 3-1: SerialNumber: syz [ 524.280496][T16845] random: crng reseeded on system resumption [ 525.086757][T16852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1619'. [ 525.106479][T16852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1619'. [ 525.536520][ T865] usb 3-1: USB disconnect, device number 47 [ 526.391067][T16876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.398306][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 527.398324][ T29] audit: type=1400 audit(1734702087.542:1119): avc: denied { lock } for pid=16881 comm="syz.0.1626" path="socket:[33782]" dev="sockfs" ino=33782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 528.441751][ T29] audit: type=1400 audit(1734702088.572:1120): avc: denied { mount } for pid=16906 comm="syz.4.1632" name="/" dev="hugetlbfs" ino=34444 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 528.591900][T16910] fuse: Bad value for 'fd' [ 528.780725][T16914] 9pnet_fd: Insufficient options for proto=fd [ 528.913299][T16910] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 529.098242][T16919] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1634'. [ 529.447894][ T29] audit: type=1400 audit(1734702089.612:1121): avc: denied { ioctl } for pid=16922 comm="syz.1.1635" path="socket:[34863]" dev="sockfs" ino=34863 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 529.472714][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.502266][T16923] trusted_key: encrypted_key: master key parameter '' is invalid [ 529.757589][T16935] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 529.772130][ T29] audit: type=1400 audit(1734702089.932:1122): avc: denied { create } for pid=16898 comm="syz.2.1630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 530.450989][T16945] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 532.085344][T16972] tunl0: entered promiscuous mode [ 532.103420][T16972] vlan3: entered promiscuous mode [ 532.118140][T16972] vlan3: entered allmulticast mode [ 532.135848][T16972] tunl0: entered allmulticast mode [ 532.283714][T16979] lo speed is unknown, defaulting to 1000 [ 532.749745][T16994] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 533.120222][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1660'. [ 534.892909][T17025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1662'. [ 535.009151][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 535.815820][T17042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1666'. [ 536.149544][T17048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1670'. [ 536.290202][T17048] batadv_slave_1: left promiscuous mode [ 536.410032][ T29] audit: type=1400 audit(1734702096.572:1123): avc: denied { accept } for pid=17049 comm="syz.6.1672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 536.605133][ T29] audit: type=1400 audit(1734702096.772:1124): avc: denied { ioctl } for pid=17059 comm="syz.4.1675" path="socket:[34605]" dev="sockfs" ino=34605 ioctlcmd=0xae89 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 538.387205][ T59] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 538.550235][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 538.561319][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.934497][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.945532][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 538.955325][ T59] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 538.965092][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.002464][ T59] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 539.011779][ T59] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 539.020103][ T59] usb 7-1: Manufacturer: syz [ 539.023433][T17089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1682'. [ 539.116234][ T59] usb 7-1: config 0 descriptor?? [ 539.452778][T17120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 540.230025][ T59] rc_core: IR keymap rc-hauppauge not found [ 540.235963][ T59] Registered IR keymap rc-empty [ 540.241017][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 540.319490][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 540.364110][ T59] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 540.376686][ T59] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input51 [ 541.656975][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.732378][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.760044][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.780728][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.801220][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.822248][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.840178][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.865071][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.904106][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.934789][ T59] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 541.967295][ T59] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 542.027428][ T59] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 542.069364][ T59] usb 7-1: USB disconnect, device number 24 [ 542.587361][T17177] overlay: Unknown parameter '/' [ 543.171304][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1699'. [ 543.192364][ T5897] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 543.500839][ T5897] usb 3-1: not running at top speed; connect to a high speed hub [ 543.509524][ T5897] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 543.517879][ T5897] usb 3-1: config 11 has no interface number 0 [ 543.525916][ T5897] usb 3-1: config 11 interface 95 has no altsetting 0 [ 544.048543][ T5897] usb 3-1: string descriptor 0 read error: -22 [ 544.055033][ T5897] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 544.064344][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.656869][ T5897] usb 3-1: USB disconnect, device number 48 [ 546.006833][T17243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1713'. [ 546.021105][T17243] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1713'. [ 546.076842][ T5897] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 546.157051][ T29] audit: type=1400 audit(1734702106.322:1125): avc: denied { map } for pid=17244 comm="syz.4.1715" path="socket:[35284]" dev="sockfs" ino=35284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.200016][ T29] audit: type=1400 audit(1734702106.322:1126): avc: denied { read accept } for pid=17244 comm="syz.4.1715" path="socket:[35284]" dev="sockfs" ino=35284 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 546.258389][T17251] random: crng reseeded on system resumption [ 546.285941][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 546.297558][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.312641][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.327328][ T5897] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 546.344123][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.361012][ T5897] usb 3-1: config 0 descriptor?? [ 546.729596][ T29] audit: type=1400 audit(1734702106.882:1127): avc: denied { wake_alarm } for pid=17260 comm="syz.0.1720" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 546.910446][ T5897] hid (null): unknown global tag 0xd [ 546.918382][ T5897] corsair-psu 0003:1B1C:1C0D.0015: unknown global tag 0xd [ 546.925861][ T5897] corsair-psu 0003:1B1C:1C0D.0015: item 0 4 1 13 parsing failed [ 547.214892][ T5897] corsair-psu 0003:1B1C:1C0D.0015: probe with driver corsair-psu failed with error -22 [ 547.313851][T17274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1722'. [ 547.383990][ T865] usb 3-1: USB disconnect, device number 49 [ 548.959018][T17320] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[17320] [ 549.647020][T17339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.829231][T17340] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1739'. [ 550.905050][T17363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1749'. [ 553.837911][T17401] xt_nfacct: accounting object `syz1' does not exists [ 554.284379][T17420] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 554.993161][T17429] tipc: Enabling of bearer rejected, failed to enable media [ 555.381863][T17442] netlink: 'syz.4.1780': attribute type 10 has an invalid length. [ 555.410283][T17442] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1780'. [ 556.060945][ T865] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 556.213638][ T865] usb 7-1: Using ep0 maxpacket: 32 [ 556.222724][ T865] usb 7-1: config 4 has an invalid interface number: 84 but max is 3 [ 556.243323][ T865] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 556.272051][ T865] usb 7-1: config 4 has an invalid interface number: 133 but max is 3 [ 556.287380][ T865] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 556.307877][ T865] usb 7-1: config 4 has 2 interfaces, different from the descriptor's value: 4 [ 556.317473][ T865] usb 7-1: config 4 has no interface number 0 [ 556.326848][ T865] usb 7-1: config 4 has no interface number 1 [ 556.337201][ T865] usb 7-1: config 4 interface 84 altsetting 251 endpoint 0xA has invalid maxpacket 759, setting to 64 [ 556.353070][ T865] usb 7-1: config 4 interface 84 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 556.365476][ T865] usb 7-1: config 4 interface 84 altsetting 251 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 556.376841][ T865] usb 7-1: config 4 interface 133 altsetting 6 has a duplicate endpoint with address 0x4, skipping [ 556.390115][ T865] usb 7-1: config 4 interface 133 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 556.409187][ T865] usb 7-1: config 4 interface 84 has no altsetting 0 [ 556.416058][ T865] usb 7-1: config 4 interface 133 has no altsetting 0 [ 556.590992][ T865] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=2c.ee [ 556.600245][ T865] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.608232][ T865] usb 7-1: Product: syz [ 556.612524][ T865] usb 7-1: Manufacturer: syz [ 556.617117][ T865] usb 7-1: SerialNumber: syz [ 556.828231][ T865] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 556.874411][ T865] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 556.902902][ T865] dib0700: firmware download failed at 7 with -22 [ 556.935921][ T865] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 556.969246][ T865] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 557.001673][ T865] dib0700: firmware download failed at 7 with -22 [ 557.031121][ T865] usb 7-1: USB disconnect, device number 25 [ 557.047423][ T29] audit: type=1326 audit(1734702117.212:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17497 comm="syz.0.1788" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303c185d29 code=0x0 [ 557.070285][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.102142][T17514] IPVS: Error joining to the multicast group [ 559.827127][T17551] fuse: Bad value for 'fd' [ 559.838709][T17551] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1804'. [ 560.024427][T17551] 9pnet_fd: Insufficient options for proto=fd [ 560.059106][T17545] orangefs_mount: mount request failed with -4 [ 561.194561][T17591] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 561.272097][T17593] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 561.607870][T17595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1817'. [ 562.010162][T17605] bridge_slave_1: left allmulticast mode [ 562.016542][T17605] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.288626][T17605] netlink: 'syz.1.1818': attribute type 2 has an invalid length. [ 562.296529][T17605] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 562.662625][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.668981][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.866992][T17618] binder: Unknown parameter 'max80000000000000000000003' [ 562.929007][ T29] audit: type=1400 audit(1734702123.032:1129): avc: denied { mounton } for pid=17617 comm="syz.6.1822" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 562.952065][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.036037][T17620] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1824'. [ 564.560123][T17629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.255696][T17681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.662083][T17686] orangefs_mount: mount request failed with -4 [ 567.724838][T17689] tipc: Started in network mode [ 567.737373][ T29] audit: type=1400 audit(1734702127.752:1130): avc: denied { listen } for pid=17683 comm="syz.6.1843" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 567.767334][T17689] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 567.787443][T17689] tipc: Enabled bearer , priority 0 [ 567.806336][ T29] audit: type=1400 audit(1734702127.782:1131): avc: denied { accept } for pid=17683 comm="syz.6.1843" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 567.828241][ T29] audit: type=1400 audit(1734702127.942:1132): avc: denied { write } for pid=17691 comm="syz.4.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 568.140068][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1851'. [ 568.162571][ T5895] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 568.323485][ T5895] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.337801][ T5895] usb 7-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.348162][ T5895] usb 7-1: config 0 interface 0 has no altsetting 0 [ 568.359603][ T5895] usb 7-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 568.369256][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.379066][ T5895] usb 7-1: config 0 descriptor?? [ 568.737776][T17725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1854'. [ 568.768329][T17727] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 568.904229][ T865] tipc: Node number set to 11578026 [ 569.229594][T17698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.308481][ T5895] cypress 0003:04B4:BCA1.0016: unknown main item tag 0x0 [ 569.367465][T17698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.379617][ T5895] cypress 0003:04B4:BCA1.0016: item fetching failed at offset 2/3 [ 569.390067][ T5895] cypress 0003:04B4:BCA1.0016: parse failed [ 569.396082][ T5895] cypress 0003:04B4:BCA1.0016: probe with driver cypress failed with error -22 [ 569.566963][ T5821] usb 7-1: USB disconnect, device number 26 [ 569.668310][T17752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1859'. [ 570.747913][T17773] netlink: 'syz.0.1867': attribute type 1 has an invalid length. [ 570.770164][ T5895] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 570.823776][T17777] lo speed is unknown, defaulting to 1000 [ 570.921529][ T5895] usb 7-1: config 64 has an invalid interface number: 184 but max is 0 [ 570.930725][ T5895] usb 7-1: config 64 has no interface number 0 [ 570.937030][ T5895] usb 7-1: config 64 interface 184 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 570.955563][ T5895] usb 7-1: config 64 interface 184 altsetting 6 endpoint 0x88 has invalid maxpacket 55457, setting to 64 [ 570.967141][ T5895] usb 7-1: config 64 interface 184 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 570.980664][ T5895] usb 7-1: config 64 interface 184 has no altsetting 0 [ 570.989806][ T5895] usb 7-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=b2.a8 [ 570.999352][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.323401][ T5895] usb 7-1: Product: syz [ 571.327608][ T5895] usb 7-1: Manufacturer: syz [ 571.332252][ T5895] usb 7-1: SerialNumber: syz [ 571.341337][T17766] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 571.351276][T17806] 9pnet_fd: Insufficient options for proto=fd [ 571.449349][T17777] geneve0: entered promiscuous mode [ 571.454861][T17777] geneve0: entered allmulticast mode [ 572.133256][T17836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.737346][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1880'. [ 572.809112][T17843] 9pnet_fd: Insufficient options for proto=fd [ 573.380437][T17862] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.389508][T17862] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.398254][T17862] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.406951][T17862] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 573.415705][T17862] vxlan0: entered promiscuous mode [ 573.420867][T17862] vxlan0: entered allmulticast mode [ 573.468129][T17862] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.478400][T17862] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.487911][T17862] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.496824][T17862] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.924541][ T5895] pl2303 7-1:64.184: required interrupt-in endpoint missing [ 573.937009][ T5895] usb 7-1: USB disconnect, device number 27 [ 574.425420][T17894] lo speed is unknown, defaulting to 1000 [ 575.074589][T17919] tmpfs: Bad value for 'mpol' [ 575.079780][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 575.091480][T17921] vlan2: entered allmulticast mode [ 575.096590][T17921] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 575.216188][T17925] 9pnet_fd: Insufficient options for proto=fd [ 575.228580][ T29] audit: type=1400 audit(1734702135.382:1133): avc: denied { write } for pid=17922 comm="syz.6.1898" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 575.307852][T17925] cgroup: Bad value for 'name' [ 575.753336][T17935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.061204][T13759] Bluetooth: hci5: Frame reassembly failed (-84) [ 576.561834][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1906'. [ 576.574705][T17953] set match dimension is over the limit! [ 576.675290][T17955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42954 sclass=netlink_route_socket pid=17955 comm=syz.0.1907 [ 576.795975][T17960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=17960 comm=syz.0.1907 [ 578.008448][ T29] audit: type=1400 audit(1734702138.172:1134): avc: denied { execute } for pid=17979 comm="syz.1.1915" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=37198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 578.158834][T17939] Bluetooth: hci5: command 0x1003 tx timeout [ 578.192540][ T5819] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 578.776128][T17991] batadv_slave_1: entered promiscuous mode [ 578.786741][T17991] batadv_slave_1: left promiscuous mode [ 581.041236][T18014] syz.0.1920[18014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.041319][T18014] syz.0.1920[18014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.068061][T18019] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1922'. [ 581.098893][T18014] syz.0.1920[18014] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.099284][T18019] netlink: 'syz.1.1922': attribute type 3 has an invalid length. [ 581.518752][ T29] audit: type=1400 audit(1734702141.682:1135): avc: denied { getopt } for pid=18031 comm="syz.2.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 582.015627][T18039] SELinux: Context unconfined is not valid (left unmapped). [ 582.031888][ T29] audit: type=1400 audit(1734702142.192:1136): avc: denied { relabelto } for pid=18033 comm="syz.6.1929" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 582.068593][ T29] audit: type=1400 audit(1734702142.222:1137): avc: denied { associate } for pid=18033 comm="syz.6.1929" name="msr" dev="devtmpfs" ino=87 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="unconfined" [ 583.352586][T18061] ptrace attach of "./syz-executor exec"[5820] was attempted by "./syz-executor exec"[18061] [ 583.459150][ T29] audit: type=1400 audit(1734702143.612:1138): avc: denied { ioctl } for pid=18064 comm="syz.6.1937" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 583.564930][ T29] audit: type=1400 audit(1734702143.662:1139): avc: denied { ioctl } for pid=18059 comm="syz.1.1936" path="socket:[37284]" dev="sockfs" ino=37284 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 584.407608][T18090] 9pnet_fd: Insufficient options for proto=fd [ 584.632559][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1943'. [ 584.644549][T18088] veth2: entered promiscuous mode [ 585.082335][ T29] audit: type=1800 audit(1734702145.232:1140): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1945" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 585.413374][T18110] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.1947'. [ 585.540510][T18110] openvswitch: netlink: Key type 29 is not supported [ 585.742836][T18111] netlink: 'syz.4.1947': attribute type 16 has an invalid length. [ 585.751654][T18111] netlink: 'syz.4.1947': attribute type 17 has an invalid length. [ 586.948704][T18147] random: crng reseeded on system resumption [ 587.272437][T18153] Unrecognized hibernate image header format! [ 587.278656][T18153] PM: hibernation: Image mismatch: architecture specific data [ 587.969541][T18157] fuse: Bad value for 'fd' [ 587.993372][ T29] audit: type=1400 audit(1734702148.162:1141): avc: denied { read } for pid=18156 comm="syz.6.1963" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 588.032562][ T29] audit: type=1400 audit(1734702148.162:1142): avc: denied { open } for pid=18156 comm="syz.6.1963" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="unconfined" [ 588.131261][T18168] 9pnet_fd: Insufficient options for proto=fd [ 589.793916][T18189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.166418][ T29] audit: type=1400 audit(1734702152.332:1143): avc: denied { read } for pid=18240 comm="syz.0.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 593.817718][ T29] audit: type=1400 audit(1734702153.982:1144): avc: denied { accept } for pid=18262 comm="syz.1.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 593.904546][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1994'. [ 594.040081][ T59] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 594.200051][ T59] usb 7-1: Using ep0 maxpacket: 16 [ 594.212108][ T59] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.227269][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 594.245623][ T59] usb 7-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 594.255319][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.270700][ T59] usb 7-1: config 0 descriptor?? [ 594.287784][ T59] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 595.136490][T18302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.160781][T18302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.310240][T18324] netlink: 'syz.4.2010': attribute type 4 has an invalid length. [ 597.667655][ T865] usb 7-1: USB disconnect, device number 28 [ 598.514775][T18365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2021'. [ 599.921912][T18387] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 600.376599][T18413] lo speed is unknown, defaulting to 1000 [ 600.816025][ T29] audit: type=1400 audit(1734702160.392:1145): avc: denied { map } for pid=18410 comm="syz.0.2032" path="socket:[37623]" dev="sockfs" ino=37623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 601.763718][T18456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.403392][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2043'. [ 604.719731][ T29] audit: type=1400 audit(1734702164.572:1146): avc: denied { setopt } for pid=18477 comm="syz.0.2046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 604.887347][T18497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2051'. [ 605.520048][ T59] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 605.680138][ T59] usb 7-1: Using ep0 maxpacket: 32 [ 605.688229][ T59] usb 7-1: New USB device found, idVendor=0413, idProduct=6029, bcdDevice=b2.3d [ 605.704001][ T59] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.712127][ T59] usb 7-1: Product: syz [ 605.716338][ T59] usb 7-1: Manufacturer: syz [ 605.721071][ T59] usb 7-1: SerialNumber: syz [ 605.727294][ T59] usb 7-1: config 0 descriptor?? [ 606.049521][T18528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.090361][T18528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.139749][ T59] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 606.155139][ T59] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 606.166616][ T59] usb 7-1: USB disconnect, device number 29 [ 607.139668][T18548] could not allocate digest TFM handle cbcmac-aes-neon [ 607.149294][ T29] audit: type=1326 audit(1734702167.312:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.213826][T18560] lo speed is unknown, defaulting to 1000 [ 607.216566][ T29] audit: type=1326 audit(1734702167.312:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.258733][ T29] audit: type=1326 audit(1734702167.312:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.288533][ T29] audit: type=1326 audit(1734702167.312:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.592449][ T29] audit: type=1326 audit(1734702167.312:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.653786][ T29] audit: type=1326 audit(1734702167.312:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.688747][ T29] audit: type=1326 audit(1734702167.312:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.717677][ T29] audit: type=1326 audit(1734702167.312:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.758023][ T29] audit: type=1326 audit(1734702167.312:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 607.931221][ T29] audit: type=1326 audit(1734702167.342:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18552 comm="syz.2.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff988985d29 code=0x7ffc0000 [ 608.011438][T18601] siw: device registration error -23 [ 608.198211][ C0] ------------[ cut here ]------------ [ 608.204120][ C0] WARNING: CPU: 0 PID: 18600 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x14ac/0x16b0 [ 608.214238][ C0] Modules linked in: [ 608.218127][ C0] CPU: 0 UID: 0 PID: 18600 Comm: syz.1.2068 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 608.228881][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 608.238946][ C0] RIP: 0010:__ieee80211_beacon_get+0x14ac/0x16b0 [ 608.245275][ C0] Code: 00 89 df 44 89 e6 e8 f3 54 ee f6 44 38 e3 72 a1 e8 c9 53 ee f6 48 89 ef e8 51 25 46 f7 31 ed e9 9c fe ff ff e8 b5 53 ee f6 90 <0f> 0b 90 e9 86 f6 ff ff 48 89 c6 48 c7 c7 20 20 2d 90 48 89 04 24 [ 608.264914][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 608.270998][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8aabb822 [ 608.278955][ C0] RDX: ffff888025708000 RSI: ffffffff8aabc19b RDI: 0000000000000001 [ 608.286925][ C0] RBP: ffffc90000007c20 R08: 0000000000000001 R09: 0000000000000000 [ 608.294928][ C0] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888025398000 [ 608.302908][ C0] R13: 0000000000000041 R14: ffff888035a68d80 R15: ffff888035a6a9d0 [ 608.310876][ C0] FS: 00007fa882a076c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 608.319786][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.326367][ C0] CR2: 000000110c3a428d CR3: 000000005c4a4000 CR4: 00000000003526f0 [ 608.334339][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.342303][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.350265][ C0] Call Trace: [ 608.353524][ C0] [ 608.356348][ C0] ? __warn+0xea/0x3c0 [ 608.360414][ C0] ? __ieee80211_beacon_get+0x14ac/0x16b0 [ 608.366121][ C0] ? report_bug+0x3c0/0x580 [ 608.370618][ C0] ? handle_bug+0x54/0xa0 [ 608.374927][ C0] ? exc_invalid_op+0x17/0x50 [ 608.379584][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 608.384604][ C0] ? __ieee80211_beacon_get+0xb32/0x16b0 [ 608.390232][ C0] ? __ieee80211_beacon_get+0x14ab/0x16b0 [ 608.395931][ C0] ? __ieee80211_beacon_get+0x14ac/0x16b0 [ 608.401681][ C0] ieee80211_beacon_get_tim+0xa7/0x280 [ 608.407128][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 608.413194][ C0] ? psi_trigger_destroy+0x320/0x9d0 [ 608.418460][ C0] mac80211_hwsim_beacon_tx+0x4ea/0xa10 [ 608.424005][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 608.429615][ C0] ? rcu_is_watching+0x12/0xc0 [ 608.434386][ C0] __iterate_interfaces+0x2e5/0x640 [ 608.439565][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 608.445624][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 608.451682][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 608.457467][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 608.464491][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 608.469757][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 608.474956][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 608.480665][ C0] ? read_tsc+0x9/0x20 [ 608.484717][ C0] hrtimer_run_softirq+0x17d/0x350 [ 608.489808][ C0] handle_softirqs+0x213/0x8f0 [ 608.494569][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 608.499834][ C0] __irq_exit_rcu+0x109/0x170 [ 608.504531][ C0] irq_exit_rcu+0x9/0x30 [ 608.508752][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 608.514384][ C0] [ 608.517295][ C0] [ 608.520217][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 608.526192][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 608.532601][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 92 4a f6 48 89 df e8 8e 11 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f6 3b f6 65 8b 05 a6 b2 d7 74 85 c0 74 16 5b [ 608.552201][ C0] RSP: 0018:ffffc9000bdf7738 EFLAGS: 00000246 [ 608.558247][ C0] RAX: 0000000000000002 RBX: ffff888037817480 RCX: 1ffffffff2dd37c4 [ 608.566212][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1eba0 [ 608.574175][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff2dca1af [ 608.582138][ C0] R10: ffffffff96e50d7f R11: 0000000000000001 R12: ffff888037817468 [ 608.590100][ C0] R13: ffff8880633a3140 R14: 0000000000000246 R15: ffffc9000bdf78d8 [ 608.598059][ C0] __skb_try_recv_datagram+0x177/0x4f0 [ 608.603551][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 608.608944][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 608.614971][ C0] __unix_dgram_recvmsg+0x1d1/0xe50 [ 608.620168][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 608.625863][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 608.631055][ C0] ? find_held_lock+0x2d/0x110 [ 608.635798][ C0] ? __might_fault+0x13b/0x190 [ 608.640554][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 608.645472][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 608.650228][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 608.655492][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 608.660679][ C0] ___sys_recvmsg+0x115/0x1a0 [ 608.665332][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 608.670543][ C0] ? find_held_lock+0x2d/0x110 [ 608.675290][ C0] ? __pfx___might_resched+0x10/0x10 [ 608.680565][ C0] ? __might_fault+0xe3/0x190 [ 608.685224][ C0] do_recvmmsg+0x2f8/0x740 [ 608.689614][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 608.694539][ C0] ? __pfx_lock_release+0x10/0x10 [ 608.699538][ C0] ? do_futex+0x123/0x350 [ 608.703859][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 608.708773][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 608.713793][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 608.719318][ C0] do_syscall_64+0xcd/0x250 [ 608.723814][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.729686][ C0] RIP: 0033:0x7fa881b85d29 [ 608.734104][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.753726][ C0] RSP: 002b:00007fa882a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 608.762138][ C0] RAX: ffffffffffffffda RBX: 00007fa881d76080 RCX: 00007fa881b85d29 [ 608.770098][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 608.778045][ C0] RBP: 00007fa881c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 608.786006][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 608.793969][ C0] R13: 0000000000000000 R14: 00007fa881d76080 R15: 00007ffdc1568ea8 [ 608.801937][ C0] [ 608.804932][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 608.812190][ C0] CPU: 0 UID: 0 PID: 18600 Comm: syz.1.2068 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 608.822937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 608.832966][ C0] Call Trace: [ 608.836221][ C0] [ 608.839040][ C0] dump_stack_lvl+0x3d/0x1f0 [ 608.843624][ C0] panic+0x71d/0x800 [ 608.847509][ C0] ? __pfx_panic+0x10/0x10 [ 608.851905][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 608.857100][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 608.862190][ C0] ? __ieee80211_beacon_get+0x14ac/0x16b0 [ 608.867885][ C0] check_panic_on_warn+0xab/0xb0 [ 608.873316][ C0] __warn+0xf6/0x3c0 [ 608.877181][ C0] ? __ieee80211_beacon_get+0x14ac/0x16b0 [ 608.882877][ C0] report_bug+0x3c0/0x580 [ 608.887181][ C0] handle_bug+0x54/0xa0 [ 608.891315][ C0] exc_invalid_op+0x17/0x50 [ 608.895796][ C0] asm_exc_invalid_op+0x1a/0x20 [ 608.900622][ C0] RIP: 0010:__ieee80211_beacon_get+0x14ac/0x16b0 [ 608.906927][ C0] Code: 00 89 df 44 89 e6 e8 f3 54 ee f6 44 38 e3 72 a1 e8 c9 53 ee f6 48 89 ef e8 51 25 46 f7 31 ed e9 9c fe ff ff e8 b5 53 ee f6 90 <0f> 0b 90 e9 86 f6 ff ff 48 89 c6 48 c7 c7 20 20 2d 90 48 89 04 24 [ 608.926512][ C0] RSP: 0018:ffffc90000007b70 EFLAGS: 00010246 [ 608.932569][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8aabb822 [ 608.940513][ C0] RDX: ffff888025708000 RSI: ffffffff8aabc19b RDI: 0000000000000001 [ 608.948460][ C0] RBP: ffffc90000007c20 R08: 0000000000000001 R09: 0000000000000000 [ 608.956404][ C0] R10: 0000000000000000 R11: 0000000000000002 R12: ffff888025398000 [ 608.964359][ C0] R13: 0000000000000041 R14: ffff888035a68d80 R15: ffff888035a6a9d0 [ 608.972857][ C0] ? __ieee80211_beacon_get+0xb32/0x16b0 [ 608.978485][ C0] ? __ieee80211_beacon_get+0x14ab/0x16b0 [ 608.984207][ C0] ieee80211_beacon_get_tim+0xa7/0x280 [ 608.989648][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 608.995705][ C0] ? psi_trigger_destroy+0x320/0x9d0 [ 609.000983][ C0] mac80211_hwsim_beacon_tx+0x4ea/0xa10 [ 609.006520][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 609.012137][ C0] ? rcu_is_watching+0x12/0xc0 [ 609.016893][ C0] __iterate_interfaces+0x2e5/0x640 [ 609.022093][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 609.028175][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 609.034216][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 609.040001][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 609.047004][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 609.052267][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 609.057448][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 609.063145][ C0] ? read_tsc+0x9/0x20 [ 609.067196][ C0] hrtimer_run_softirq+0x17d/0x350 [ 609.072810][ C0] handle_softirqs+0x213/0x8f0 [ 609.077555][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 609.082817][ C0] __irq_exit_rcu+0x109/0x170 [ 609.087469][ C0] irq_exit_rcu+0x9/0x30 [ 609.091688][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 609.097296][ C0] [ 609.100204][ C0] [ 609.103113][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 609.109075][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 609.115468][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 92 4a f6 48 89 df e8 8e 11 4b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 f6 3b f6 65 8b 05 a6 b2 d7 74 85 c0 74 16 5b [ 609.135053][ C0] RSP: 0018:ffffc9000bdf7738 EFLAGS: 00000246 [ 609.141095][ C0] RAX: 0000000000000002 RBX: ffff888037817480 RCX: 1ffffffff2dd37c4 [ 609.149045][ C0] RDX: 0000000000000000 RSI: ffffffff8b6cd860 RDI: ffffffff8bd1eba0 [ 609.156989][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: fffffbfff2dca1af [ 609.164947][ C0] R10: ffffffff96e50d7f R11: 0000000000000001 R12: ffff888037817468 [ 609.172907][ C0] R13: ffff8880633a3140 R14: 0000000000000246 R15: ffffc9000bdf78d8 [ 609.180868][ C0] __skb_try_recv_datagram+0x177/0x4f0 [ 609.186313][ C0] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 609.191676][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 609.197636][ C0] __unix_dgram_recvmsg+0x1d1/0xe50 [ 609.202817][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 609.208512][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 609.213692][ C0] ? find_held_lock+0x2d/0x110 [ 609.218435][ C0] ? __might_fault+0x13b/0x190 [ 609.223184][ C0] unix_dgram_recvmsg+0xd0/0x110 [ 609.228101][ C0] ____sys_recvmsg+0x5f8/0x6b0 [ 609.232850][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 609.238121][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 609.243297][ C0] ___sys_recvmsg+0x115/0x1a0 [ 609.247949][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 609.253136][ C0] ? find_held_lock+0x2d/0x110 [ 609.257884][ C0] ? __pfx___might_resched+0x10/0x10 [ 609.263145][ C0] ? __might_fault+0xe3/0x190 [ 609.267803][ C0] do_recvmmsg+0x2f8/0x740 [ 609.272210][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 609.277124][ C0] ? __pfx_lock_release+0x10/0x10 [ 609.282125][ C0] ? do_futex+0x123/0x350 [ 609.286434][ C0] ? __x64_sys_futex+0x1e1/0x4c0 [ 609.291346][ C0] __x64_sys_recvmmsg+0x239/0x290 [ 609.296342][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 609.301864][ C0] do_syscall_64+0xcd/0x250 [ 609.306345][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.312228][ C0] RIP: 0033:0x7fa881b85d29 [ 609.316628][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.336222][ C0] RSP: 002b:00007fa882a07038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 609.344622][ C0] RAX: ffffffffffffffda RBX: 00007fa881d76080 RCX: 00007fa881b85d29 [ 609.352569][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000005 [ 609.360515][ C0] RBP: 00007fa881c01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 609.368458][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 609.376403][ C0] R13: 0000000000000000 R14: 00007fa881d76080 R15: 00007ffdc1568ea8 [ 609.384356][ C0] [ 609.387560][ C0] Kernel Offset: disabled [ 609.391906][ C0] Rebooting in 86400 seconds..