last executing test programs: 18m25.706612595s ago: executing program 32 (id=258): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) close_range(r0, r0, 0x0) 18m19.835683515s ago: executing program 33 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0x94}, {&(0x7f00000001c0)=""/206, 0xce}], 0x2}, 0x65}], 0x1, 0x10000, 0x0) 18m0.502181978s ago: executing program 34 (id=1235): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2940, 0x2, 0x10}, 0x18) 17m6.393434857s ago: executing program 35 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 11m53.192729497s ago: executing program 36 (id=3825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0100000008000000010000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) 9m41.424982137s ago: executing program 5 (id=3923): openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101000, 0x1d5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) gettid() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) keyctl$setperm(0x5, 0x0, 0x10000004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r7, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc49308130164446263b8c5362e6945357672b6adba20f3d42d8944d591a43357a50b06550a624636737a29b6a95a5c93d0b1474fa5bfe67c0e609eaf5186d58ec4351bb0c422cfafa798a1346f6b07beec2d4fc63d99c26f"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x3000000, 0x0, {0x0, 0x0, 0x0, r7, 0x192, 0x9e}}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x40010, r3, 0x2000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x2010, r2, 0xf68a1000) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) 9m40.040724326s ago: executing program 5 (id=3925): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) syz_open_dev$radio(0x0, 0x0, 0x2) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000500)=0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f046}) preadv(0xffffffffffffffff, &(0x7f00000033c0)=[{0x0}], 0x1, 0x6, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) openat$sequencer2(0xffffff9c, &(0x7f0000000200), 0x143240, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x2f, &(0x7f0000000400)=ANY=[], 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) 9m39.102109738s ago: executing program 5 (id=3930): socket$inet(0x2, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2f, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x9, 0x20000009, 0x40, {0x200000000006, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x0, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x0) dup3(r2, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x40045431, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r4, 0x1, 0xea, 0x25dfdbfd, {{}, {0x0, 0x3}, {0x14}}}, 0x30}, 0x1, 0x0, 0x0, 0x4004018}, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000040)) syz_open_pts(r3, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9m37.283950747s ago: executing program 5 (id=3937): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000fffe07000800020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a36a0b0e004000"/28], 0x50) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x64, 0x2b}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x8, 0x17, 0xffff}}}, 0x49) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0xfff, 0x6}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 9m35.385116631s ago: executing program 5 (id=3942): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) r1 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000003c0), 0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) accept$inet(r3, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000200)=0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x13, r2, 0x59967000) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') ioctl$TCXONC(r0, 0x540a, 0x1) 9m34.576196463s ago: executing program 5 (id=3945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x76, 0x1}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x80, 0x3, 0x0, 0x0, {0xc00, 0x2, 0x0, 0xac, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x9, 0x59}}]}]]}, 0x88}}, 0x0) 9m23.835792599s ago: executing program 8 (id=3993): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2000, 0x2, 0x1}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file2\x00', 0x200500, 0xb) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r3, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xb, "ff00f7000000000000000000af88008300"}) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x1400037e) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r8 = fsopen(&(0x7f0000000440)='gfs2\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 9m23.02575883s ago: executing program 8 (id=3996): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r1, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) 9m22.909403847s ago: executing program 8 (id=3997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ustat(0x7, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4882, 0x4}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 9m22.67239327s ago: executing program 8 (id=3999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000440)='./file0/file0\x00', 0x1000405) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getrlimit(0xd, &(0x7f0000000340)) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5, 0x1}}]}]}]}, 0x48}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x3}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9m22.402780414s ago: executing program 8 (id=4001): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@in={0x2, 0x4e24, @remote}, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) (fail_nth: 1) 9m22.045395994s ago: executing program 8 (id=4005): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000000355ba395d1e8aeb0f0629737ae4b37f92987a1380ea8e199212820f395a1c93534122163897afe8e51c142c24c442cc5a036659c6adfe3a1b34b3b293703441573e123c2d182476d60a4af25344fd3f65a97871f27e7db00004459ec95381c62e399d0caab901d02630a8b5990c3fc68e7fcd45f7f3c7ce953bd8181daee5f8642ff8b20c5a09d057eeccfa9fed43a871dfc5aa842d326df562ef56c12e77fc38429e787bc285a4f30207bce20edd94b9b772d218e1172e878bf20ad200758684cb95b661c1dbf17f36797e9c324fcc0506d858ccaed8068cd59ea05ec2898ea40a55057eb0d8bf665b31c"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x8b, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xc0, 0xd6, 0x25, 0x40, 0x1b80, 0xe396, 0x5b6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x3, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0xd4, 0x9, 0x5, 0x3b, 0x7d, 0x37, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x9], 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0x1, "106fea"}]}, @generic={0x9, 0xd, "6c5cb09e7b5591"}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x0, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x81, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xec, 0xac5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x7c, 0xe, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0xfffe}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xd1, 0x4e, 0xf2, 0xff, 0x9}, 0x3a, &(0x7f0000000300)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0xdccb7fbe09ce479a, 0x5, 0x3, 0x8, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7, 0xff00, 0x5, [0xc000, 0xff3f, 0xc05f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x61, 0x9, 0xe, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0xfe, &(0x7f0000000340)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000000)=""/172, &(0x7f0000000100)=0xac) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 9m21.521088855s ago: executing program 37 (id=4005): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0xc, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x20, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0800000000000000355ba395d1e8aeb0f0629737ae4b37f92987a1380ea8e199212820f395a1c93534122163897afe8e51c142c24c442cc5a036659c6adfe3a1b34b3b293703441573e123c2d182476d60a4af25344fd3f65a97871f27e7db00004459ec95381c62e399d0caab901d02630a8b5990c3fc68e7fcd45f7f3c7ce953bd8181daee5f8642ff8b20c5a09d057eeccfa9fed43a871dfc5aa842d326df562ef56c12e77fc38429e787bc285a4f30207bce20edd94b9b772d218e1172e878bf20ad200758684cb95b661c1dbf17f36797e9c324fcc0506d858ccaed8068cd59ea05ec2898ea40a55057eb0d8bf665b31c"]}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x1, 0x8b, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0xc0, 0xd6, 0x25, 0x40, 0x1b80, 0xe396, 0x5b6c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x1, 0x3, 0x9, 0x0, 0x8, [{{0x9, 0x4, 0xd4, 0x9, 0x5, 0x3b, 0x7d, 0x37, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x1}, [@feature_unit={0x9, 0x24, 0x6, 0x5, 0x4, 0x1, [0x9], 0x2}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0x9, 0x1, "106fea"}]}, @generic={0x9, 0xd, "6c5cb09e7b5591"}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0x3, 0x2}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x0, 0x6, 0x7}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x81, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xec, 0xac5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x40, 0x7c, 0xe, 0x71, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0xfffe}]}}]}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0xd1, 0x4e, 0xf2, 0xff, 0x9}, 0x3a, &(0x7f0000000300)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x0, 0xdccb7fbe09ce479a, 0x5, 0x3, 0x8, 0x5}, @ssp_cap={0x1c, 0x10, 0xa, 0x7, 0x4, 0x7, 0xff00, 0x5, [0xc000, 0xff3f, 0xc05f, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x61, 0x9, 0xe, 0x9}, @ptm_cap={0x3}]}, 0x1, [{0xfe, &(0x7f0000000340)=@string={0xfe, 0x3, "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"}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x1) syz_usb_disconnect(r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000000)=""/172, &(0x7f0000000100)=0xac) syz_usb_disconnect(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0xd, 0x0, "50e482af8a3b3953d7d2ddc26f6d7fcfdcef78b3bb7ca71d37000667e0b8dd3a89446b04761c340f273410ad620a1d1d1e8e3d5d07cb37da86503ff8eadd32f0fc9a56bcd7a401a991c216437633b722"}, 0xd8) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 9m18.884989959s ago: executing program 38 (id=3945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x88, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x76, 0x1}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x80, 0x3, 0x0, 0x0, {0xc00, 0x2, 0x0, 0xac, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x9, 0x59}}]}]]}, 0x88}}, 0x0) 8m52.66635843s ago: executing program 2 (id=4159): geteuid() mount$bpf(0x0, 0x0, 0x0, 0x40080, 0x0) io_setup(0x8, &(0x7f0000000540)=0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_submit(r0, 0x1, &(0x7f0000000cc0)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f00000003c0)="0000a043", 0x4, 0x2a25}]) 8m52.48508937s ago: executing program 2 (id=4161): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 8m52.432664047s ago: executing program 2 (id=4163): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x230, 0x298, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0xc2, 0x3, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x8000, 0xc}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x20, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0xdf, 0x3, 0x0, 0x3, {[@timestamp={0x8, 0xa, 0x7, 0x1}]}}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2e, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x1000c}, [@FRA_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x24, 0x1, 0x15, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0]}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x8) 8m52.354614559s ago: executing program 2 (id=4165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x122) 8m52.205065077s ago: executing program 2 (id=4168): unshare(0x2000400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) 8m51.914059279s ago: executing program 2 (id=4173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d9}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {0x0, 0xfff1}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4009084) 8m51.575965587s ago: executing program 39 (id=4173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40488d9}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0xa6, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x1}, {0x0, 0xfff1}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4009084) 8m47.832672582s ago: executing program 9 (id=4232): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5d56879bffda847b, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0xe5, 0x70bd2a, 0xffffffff, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x3, 0x3, {@ip4=@loopback}}}]}, 0x38}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 8m47.752463555s ago: executing program 9 (id=4234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x31, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m47.568529249s ago: executing program 9 (id=4236): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x2000003, 0x0, 0x0, 0x11, 0x3, 0xfffffffd}]}}, 0x0, 0x2a}, 0x28) 8m47.501240967s ago: executing program 9 (id=4237): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x385010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 8m47.390555649s ago: executing program 9 (id=4240): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001400)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0xa}}, 0x20) shutdown(r1, 0x1) 8m47.197282557s ago: executing program 9 (id=4243): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$P9_RSTATu(r0, &(0x7f0000000680)=ANY=[], 0x1f1) write(r0, &(0x7f00000000c0)="673aaa44fa73c2d18f929b3e9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x55) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000004c0)={0x2, 0x800, 0x6, 0x6, 0x8, "1d4ab83637370f2d2afca433dcb36307484c97", 0x7fffffff, 0x1}) 8m46.945216157s ago: executing program 40 (id=4243): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$P9_RSTATu(r0, &(0x7f0000000680)=ANY=[], 0x1f1) write(r0, &(0x7f00000000c0)="673aaa44fa73c2d18f929b3e9c4f483461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513c58bba87aeb73c75144e4c3ed16c852112472af5d7ae09d2016a306c0ffd644c4d15", 0x55) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000004c0)={0x2, 0x800, 0x6, 0x6, 0x8, "1d4ab83637370f2d2afca433dcb36307484c97", 0x7fffffff, 0x1}) 8m6.19656487s ago: executing program 0 (id=4738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000085000000d000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m6.1203438s ago: executing program 0 (id=4739): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) 8m3.552981375s ago: executing program 0 (id=4748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e5d, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x78}, 0x9c) 8m3.466292863s ago: executing program 0 (id=4750): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 8m3.233236466s ago: executing program 0 (id=4751): syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x7) 8m2.621311162s ago: executing program 0 (id=4754): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 8m2.298614651s ago: executing program 41 (id=4754): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 13.633021921s ago: executing program 3 (id=6512): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setuid(0xee01) syz_emit_vhci(0x0, 0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) syz_clone3(&(0x7f0000000080)={0x100801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x21, 0x0, 0x0) process_mrelease(r2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@private1, @in6=@mcast2}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) keyctl$read(0x1f, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000002c40)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000400)={r4, &(0x7f00000007c0), &(0x7f0000000100)}) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f00000003c0)={r4}) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r5, &(0x7f0000001d00)={0x2020}, 0x2020) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xffffff2b}, 0x1, 0x0, 0x0, 0x20046808}, 0x8000) syz_clone(0x9880000, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r6 = socket(0x1a, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x807, @empty, 'veth0\x00'}}, 0x1e) sendmmsg(r7, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) 12.865878362s ago: executing program 7 (id=6517): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000001780)) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 12.597067303s ago: executing program 3 (id=6519): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_io_uring_setup(0x7447, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x2}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd70000000007b280000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) recvfrom$ax25(r8, 0x0, 0x0, 0x100, 0x0, 0x0) close(0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x2400c890) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r11 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000200)=0x10) read$msr(r10, &(0x7f0000032680)=""/102392, 0x18ff8) r12 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0) readv(r12, 0x0, 0x0) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r13, 0x112, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) 12.17183549s ago: executing program 7 (id=6520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e29, @empty}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x6}, 0x20) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="20009800003a783438c27b4da9596bb65d6734000000000a000000770c000200"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0xfffffffffffffe87}, {&(0x7f0000000480)=""/4083, 0xfffffd75}], 0x3}}], 0x1, 0x121e2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfstransmute}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@obj_type={'obj_type', 0x3d, 'upperdir'}}, {@subj_role={'subj_role', 0x3d, 'workdir'}}, {@audit}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '},'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 10.353240378s ago: executing program 1 (id=6523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xf, 0x0, 0x8}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4084010}, 0xc000) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0xd, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40010) 10.296588917s ago: executing program 1 (id=6525): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) prlimit64(0x0, 0x8, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xfc, 0x0, 0x0, 0x9, 0x0, 0x4, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3}, 0xe) syz_emit_ethernet(0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000f3d000/0x1000)=nil, 0x1000, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, 0x0) 10.163907868s ago: executing program 4 (id=6526): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x5}}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r2}, 0x18) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 10.080321298s ago: executing program 4 (id=6527): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000fffe07000800020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a36a0b0e004000"/28], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x64, 0x2b}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x8, 0x17, 0xffff}}}, 0x49) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0xfff, 0x6}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 8.603717642s ago: executing program 1 (id=6530): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000001780)) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xfec8}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 7.856844019s ago: executing program 6 (id=6531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r2, r3, 0x0, 0xc01) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000900)={0x0, 0xd, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d40)={0x1, 0x0, {0x5, @struct={0x3, 0x8}, 0x0, 0x8, 0x7ff, 0x6, 0x80, 0x9, 0x0, @struct={0x0, 0xffff}, 0x161, 0xffffffff, [0xfffffffffffffffe, 0x4, 0x4, 0x4, 0x8, 0xa8]}, {0xffffffffffffffff, @usage=0xaa, 0x0, 0x5, 0x5, 0xfffffffffffffff0, 0x10000, 0x3, 0x400, @struct={0x1c, 0xfffffff2}, 0xfffffff8, 0x10001, [0x8000000000000000, 0x1000, 0x3, 0x7, 0x2, 0x7fffffff]}, {0x78c0, @struct={0x2, 0x6}, r8, 0x9, 0x9, 0x1, 0x20, 0x51, 0xc, @usage=0x9, 0x2, 0x7, [0x40, 0x3, 0x4d9, 0x8000000000000000, 0x31e6, 0x7]}, {0x501, 0x0, 0x4}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 7.805004256s ago: executing program 7 (id=6532): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendfile(r2, r3, 0x0, 0xc01) socket(0x10, 0x803, 0x0) r4 = openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000280)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000900)={0x0, 0xd, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000d40)={0x1, 0x0, {0x5, @struct={0x3, 0x8}, 0x0, 0x8, 0x7ff, 0x6, 0x80, 0x9, 0x0, @struct={0x0, 0xffff}, 0x161, 0xffffffff, [0xfffffffffffffffe, 0x4, 0x4, 0x4, 0x8, 0xa8]}, {0xffffffffffffffff, @usage=0xaa, 0x0, 0x5, 0x5, 0xfffffffffffffff0, 0x10000, 0x3, 0x400, @struct={0x1c, 0xfffffff2}, 0xfffffff8, 0x10001, [0x8000000000000000, 0x1000, 0x3, 0x7, 0x2, 0x7fffffff]}, {0x78c0, @struct={0x2, 0x6}, r8, 0x9, 0x9, 0x1, 0x20, 0x51, 0xc, @usage=0x9, 0x2, 0x7, [0x40, 0x3, 0x4d9, 0x8000000000000000, 0x31e6, 0x7]}, {0x501, 0x0, 0x4}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 7.464926646s ago: executing program 1 (id=6533): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) r1 = io_uring_setup(0x5f5c, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x80, 0xffffffff, 0x4800024, 0x0, r0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d2f2fb3cd7368b222cad673cfa6", @ANYRESHEX, @ANYBLOB=',smackfshat=\'}^-[,},:^,subj_role=}).[,dont_measure,\x00']) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000006c0)="98", 0x1}], 0x1) r4 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) read$FUSE(r2, &(0x7f0000006840)={0x2020}, 0x2020) fcntl$setpipe(r0, 0x407, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) fstat(r5, &(0x7f00000005c0)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000380), 0x4) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 7.139769464s ago: executing program 3 (id=6534): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) gettid() socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r3}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000080)=[{0x0, 0x7, 0x6c, 0x80000000}, {0x401, 0xbf, 0x9}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000200)={0xa8, 0x0, 0x1}) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r5, 0x0, 0x0, 0x8000000, 0x800) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x48}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x0, 0x1fff, r7, 0x0, 0x0, 0x6}]) socket$nl_generic(0x10, 0x3, 0x10) write(r6, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.314583375s ago: executing program 1 (id=6535): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = syz_io_uring_setup(0x83a, &(0x7f00000000c0)={0x0, 0x5076, 0x941abf1465dfa669, 0x6, 0x271}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECVMSG={0xa, 0x65, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1, {0x3}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x82800, 0x100, 0x4}, 0x18) getdents64(r4, &(0x7f00000002c0)=""/78, 0x4e) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x8000000) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000a00)={0xa, 0x4}, 0xc) r6 = socket$inet_icmp(0x2, 0x2, 0x1) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000840)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x5, 0x0, r6, 0x0, &(0x7f00000007c0)="77ca09f9d8173ac8881d0f8271e017ba1f18f027e2f8a8de5687b652815e7328261952d1136e33957c612d5ac95f3d290d41cca5f3b69245c5b0689b293b56e71df885", 0x43, 0x0, 0x1, {0x0, r7}}) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffff75}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x68}}, 0x1) r10 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8/\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x10000003}, 0x80) r7 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0xb1, 0x7fffffffffffffff, 0x3, 0x1, 0x10001, 0x3, 0x200, 0x2}, &(0x7f0000000280)={0xe000000000000, 0x100, 0x3, 0x5, 0xbc, 0x8, 0x6, 0x6}, &(0x7f0000000300)={0x7075, 0x2, 0x7, 0x4, 0xe, 0x100000001, 0xff, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x401]}, 0x8}) syz_emit_ethernet(0x96, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaaa6dd6000000000603afffe8000000000000000000000000000aaff020000000000000000000000000001860090780000040000000000000000000309bd3e6d4706598080a8030037ffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0001000000050000"], 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 5.680750319s ago: executing program 3 (id=6538): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}]}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.196852686s ago: executing program 3 (id=6539): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r5, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r7, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r6, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r2, r3, 0x6700000000000000) socket$nl_route(0x10, 0x3, 0x0) 5.164578574s ago: executing program 7 (id=6540): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x1, 0x0, 0x5}}, 0x28) fanotify_init(0xf00, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.681888976s ago: executing program 1 (id=6541): syz_open_dev$vim2m(0x0, 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea000002bf7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0) r8 = open(&(0x7f0000000180)='./file0\x00', 0x6440, 0x81) mmap$snddsp(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x13, r8, 0xd000) ioctl$SCSI_IOCTL_PROBE_HOST(r8, 0x5385, &(0x7f0000000240)={0xde, ""/222}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) 2.680020746s ago: executing program 6 (id=6542): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x2}, 0x28) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) write$binfmt_register(r8, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'stdrng\x00', 0x3a, 'syz0\x00', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x43]}, 0x36) ioctl$RTC_PIE_ON(r8, 0x7005) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2.573304339s ago: executing program 4 (id=6543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 1.653633557s ago: executing program 4 (id=6544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket$inet(0x2, 0xa, 0xcaa) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f000091d000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x45) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) 1.467544271s ago: executing program 6 (id=6545): r0 = socket$netlink(0x10, 0x3, 0x8000000004) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000380)={0x200, "9980605e44a3bfbad4acab13bc10a64ab02519862501a4bdaecbb2b9f552bab3", 0x1, 0x5a52afbf, 0x4, 0x10003, 0x4050804, 0x8}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105000000ffff0058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x7d}], 0x1) 1.334621104s ago: executing program 3 (id=6546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_io_uring_setup(0x2046, &(0x7f0000000400)={0x0, 0x39bf, 0x20000, 0x3, 0x221}, &(0x7f0000000240)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x24) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x4, 0x0, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x8) timer_delete(r4) gettid() timer_create(0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$vhost_msg_v2(r6, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000040)=""/118, 0x76, &(0x7f0000000380)=""/244, 0x2, 0x4}}, 0x48) r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="080403000021000008001b000000000034001a800800028004000180200002801c00018008001a00"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x100000000) 577.2385ms ago: executing program 7 (id=6547): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r2 = userfaultfd(0x80801) (async) bind$tipc(0xffffffffffffffff, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x667}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) (async) connect$pptp(r4, &(0x7f0000000380)={0x18, 0x2, {0x2, @local}}, 0x1e) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x14, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="3ab9c9689d71966b6956e384450d84ea127d275f66addae184afa01a382251cd00409fd6e504476fd3f8527a5cdef49ea9d297bee274b8f49de9989b8ab2ae5be986cf50db9b26a11062a6ee46cf62eb427df0aef8fc646b880cb6c75d6753a77190784ef9fb10f8d9c6510148841f5ef511348c75504c22fa4136bdef81a47d33db10563dcb1c32737f8b0f3cfae02957384fd017395c1f02dec80c8736f9e16abe57f46c9f5eb4", @ANYRES16=r2, @ANYBLOB="2b8e293df2d86502617431345637ced5138ee5501285a14fb9f2c0ec38e64fd2216a8f0672c54a76f0ac4390c19648c9e4b1385a73407bffe5971b957c2a631fe6cd2b8f3ffab4fe1ea4e67ae4cd76eb0b2aae6a82a3c35a8930ecebafaa1f73b6a90b6bbde549abf726260ea00b257278b6dacd58e86fc1dc9b0b4ca0f54845acfbca1ecf6d889966ded5a29d61edebef36724fac42de527bb29e1b90366fbee8382eb26529b852100e3415c37731b1384ba0cdeb1d055f10a34337b710ff6e81fbba1a19c8b359935a6eacad2d039116d4152c67ab1ccfa24ab94b1f6819066004dd8126"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) (async) write$binfmt_aout(r7, &(0x7f00000002c0)=ANY=[], 0x13) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000140)={&(0x7f00008fd000/0x4000)=nil, &(0x7f0000339000/0x1000)=nil, 0x4000, 0x7}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r10 = syz_open_procfs(r9, &(0x7f0000000000)='mountinfo\x00') sendfile(r8, r10, 0x0, 0x1000) 507.767879ms ago: executing program 4 (id=6548): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000fffe07000800020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a36a0b0e004000"/28], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x64, 0x2b}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x8, 0x17, 0xffff}}}, 0x49) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0xfff, 0x6}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 92.943344ms ago: executing program 7 (id=6549): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000000000000fffe07000800020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a36a0b0e004000"/28], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x4000042) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000000c0)=0x2) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r6, 0x5008, 0x0) socket$key(0xf, 0x3, 0x2) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000580)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xe}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x64, 0x2b}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x9, 0x8, 0x17, 0xffff}}}, 0x49) prlimit64(0x0, 0x1, &(0x7f00000003c0)={0xfff, 0x6}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 45.826419ms ago: executing program 6 (id=6550): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000100)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}]}}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 6 (id=6551): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = socket$inet(0x2, 0xa, 0xcaa) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x2c, &(0x7f0000000140)={0x0, 0x0}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='U', 0x1}], 0x1) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r5, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f000091d000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x45) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r6) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 1009.758894][ T30] audit: type=1400 audit(1754803962.094:2197): avc: denied { ioctl } for pid=30925 comm="syz.6.5916" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1009.841491][T30926] syz.6.5916: attempt to access beyond end of device [ 1009.841491][T30926] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1009.873961][T30926] XFS (nbd6): SB validate failed with error -5. [ 1009.885334][T16078] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.902754][T16078] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1009.912086][T16078] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1009.921411][T16078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.937779][T16078] usb 5-1: config 0 descriptor?? [ 1009.950981][T16078] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1009.957761][T16078] dvb-usb: bulk message failed: -22 (3/0) [ 1009.963844][ T30] audit: type=1326 audit(1754803962.294:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30941 comm="syz.1.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317f78ebe9 code=0x7fc00000 [ 1009.968114][T30948] tipc: Enabling of bearer rejected, already enabled [ 1009.995520][ T30] audit: type=1326 audit(1754803962.334:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30941 comm="syz.1.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317f78ebe9 code=0x7fc00000 [ 1010.005370][T30948] tipc: Enabling of bearer rejected, already enabled [ 1010.019943][T16078] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1010.036337][T16078] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1010.043425][T16078] usb 5-1: media controller created [ 1010.049992][T16078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1010.060293][ T30] audit: type=1326 audit(1754803962.404:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30941 comm="syz.1.5918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317f78ebe9 code=0x7fc00000 [ 1010.060812][T30952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5918'. [ 1010.102710][T16078] dvb-usb: bulk message failed: -22 (6/0) [ 1010.108487][T16078] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1010.117908][T16078] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 1010.138829][T16078] dvb-usb: schedule remote query interval to 150 msecs. [ 1010.183027][T16078] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1010.335731][T30863] FAULT_INJECTION: forcing a failure. [ 1010.335731][T30863] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.452389][T30863] CPU: 1 UID: 0 PID: 30863 Comm: syz.4.5911 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1010.452416][T30863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.452427][T30863] Call Trace: [ 1010.452433][T30863] [ 1010.452441][T30863] dump_stack_lvl+0x16c/0x1f0 [ 1010.452464][T30863] should_fail_ex+0x512/0x640 [ 1010.452483][T30863] ? fs_reclaim_acquire+0xae/0x150 [ 1010.452509][T30863] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1010.452534][T30863] should_failslab+0xc2/0x120 [ 1010.452555][T30863] __kmalloc_noprof+0xd2/0x510 [ 1010.452580][T30863] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1010.452608][T30863] ? tomoyo_profile+0x47/0x60 [ 1010.452628][T30863] tomoyo_path_number_perm+0x245/0x580 [ 1010.452649][T30863] ? tomoyo_path_number_perm+0x237/0x580 [ 1010.452679][T30863] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1010.452728][T30863] ? find_held_lock+0x2b/0x80 [ 1010.452750][T30863] ? hook_file_ioctl_common+0x145/0x410 [ 1010.452774][T30863] ? __fget_files+0x20e/0x3c0 [ 1010.452799][T30863] security_file_ioctl+0x9b/0x240 [ 1010.452825][T30863] __x64_sys_ioctl+0xb7/0x210 [ 1010.452854][T30863] do_syscall_64+0xcd/0x4c0 [ 1010.452876][T30863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.452894][T30863] RIP: 0033:0x7fcc1778ebe9 [ 1010.452909][T30863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.452925][T30863] RSP: 002b:00007fcc18641038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.452942][T30863] RAX: ffffffffffffffda RBX: 00007fcc179b5fa0 RCX: 00007fcc1778ebe9 [ 1010.452954][T30863] RDX: 0000200000000100 RSI: 0000000040084504 RDI: 0000000000000004 [ 1010.452965][T30863] RBP: 00007fcc18641090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.452975][T30863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.452986][T30863] R13: 00007fcc179b6038 R14: 00007fcc179b5fa0 R15: 00007ffec7c3c6f8 [ 1010.453014][T30863] [ 1010.570636][T16078] dvb-usb: bulk message failed: -22 (1/0) [ 1010.572889][T30863] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1010.576634][T16078] dvb-usb: error while querying for an remote control event. [ 1010.678925][ T43] usb 5-1: USB disconnect, device number 33 [ 1010.827131][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1011.032563][T30984] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5924'. [ 1012.093036][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1012.093051][ T30] audit: type=1326 audit(1754803964.424:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30994 comm="syz.6.5927" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6b78ebe9 code=0x0 [ 1012.615058][T16078] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1012.624690][T31015] tipc: Enabling of bearer rejected, already enabled [ 1012.636211][T31015] tipc: Enabling of bearer rejected, already enabled [ 1012.638196][ T30] audit: type=1326 audit(1754803964.904:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31014 comm="syz.4.5930" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc1778ebe9 code=0x0 [ 1012.726833][T31022] tipc: Enabling of bearer rejected, already enabled [ 1012.738858][T31022] tipc: Enabling of bearer rejected, already enabled [ 1012.780684][T16078] usb 4-1: Using ep0 maxpacket: 8 [ 1012.787697][T16078] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.799481][T16078] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1012.813331][T16078] usb 4-1: config 0 has no interface number 0 [ 1012.825934][T16078] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1012.874724][ T30] audit: type=1400 audit(1754803965.194:2210): avc: denied { read } for pid=31023 comm="syz.1.5934" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1012.897885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1012.910380][T16078] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1012.921479][T16078] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1013.364004][ T30] audit: type=1400 audit(1754803965.194:2211): avc: denied { open } for pid=31023 comm="syz.1.5934" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1013.400543][T16078] usb 4-1: string descriptor 0 read error: -22 [ 1013.406954][T16078] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1013.410914][ T30] audit: type=1400 audit(1754803965.194:2212): avc: denied { ioctl } for pid=31023 comm="syz.1.5934" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1013.445203][T16078] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1013.458621][T31028] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1013.788491][T16078] usb 4-1: config 0 descriptor?? [ 1013.804618][T16078] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input28 [ 1014.375216][T16078] usb 4-1: USB disconnect, device number 52 [ 1014.486450][ T30] audit: type=1400 audit(1754803966.744:2213): avc: denied { read } for pid=31050 comm="syz.4.5939" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1014.712005][ T30] audit: type=1400 audit(1754803966.744:2214): avc: denied { open } for pid=31050 comm="syz.4.5939" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1014.800035][ T30] audit: type=1400 audit(1754803966.754:2215): avc: denied { ioctl } for pid=31050 comm="syz.4.5939" path="/dev/usbmon2" dev="devtmpfs" ino=722 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1014.842296][ T30] audit: type=1400 audit(1754803966.914:2216): avc: denied { setopt } for pid=31050 comm="syz.4.5939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1014.936452][ T30] audit: type=1400 audit(1754803967.034:2217): avc: denied { connect } for pid=31050 comm="syz.4.5939" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1015.240534][T31075] block nbd0: server does not support multiple connections per device. [ 1015.270446][T31081] Invalid source name [ 1015.282691][T31075] block nbd0: shutting down sockets [ 1015.292103][T31081] UBIFS error (pid: 31081): cannot open "/dev/sg0", error -22 [ 1015.330598][T31079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5944'. [ 1015.811425][T31085] can: request_module (can-proto-0) failed. [ 1015.823257][T31092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1015.841508][T31092] tipc: Disabling bearer [ 1016.366357][T31088] befs: (nullb0): invalid magic header [ 1016.508981][T31103] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1017.134572][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1017.134587][ T30] audit: type=1400 audit(1754803969.474:2225): avc: denied { write } for pid=31129 comm="syz.7.5951" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1017.454567][ T30] audit: type=1400 audit(1754803969.784:2226): avc: denied { getopt } for pid=31135 comm="syz.6.5952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1017.488387][T31115] batman_adv: batadv0: Adding interface: macvlan5 [ 1017.495532][T31115] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.521438][T31115] batman_adv: batadv0: Interface activated: macvlan5 [ 1017.641892][T31147] fuse: Bad value for 'fd' [ 1018.695305][T31158] fuse: Unknown parameter 'fD' [ 1018.702102][T31156] JFS: charset not found [ 1019.334912][ T30] audit: type=1400 audit(1754803971.674:2227): avc: denied { create } for pid=31164 comm="syz.7.5960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1019.587979][T31168] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5960'. [ 1019.603549][T31167] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5960'. [ 1019.853398][ T30] audit: type=1400 audit(1754803972.194:2228): avc: denied { listen } for pid=31173 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1019.919503][ T30] audit: type=1400 audit(1754803972.214:2229): avc: denied { write } for pid=31173 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1019.941946][ T30] audit: type=1400 audit(1754803972.224:2230): avc: denied { accept } for pid=31173 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1020.045842][ T30] audit: type=1400 audit(1754803972.384:2231): avc: denied { associate } for pid=31179 comm="syz.3.5963" name="422" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1020.161998][T31189] tipc: Enabled bearer , priority 0 [ 1020.210044][ T975] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1020.218399][ T30] audit: type=1400 audit(1754803972.504:2232): avc: denied { relabelfrom } for pid=31179 comm="syz.3.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1020.245877][ T30] audit: type=1400 audit(1754803972.504:2233): avc: denied { relabelto } for pid=31179 comm="syz.3.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1020.744231][T31196] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1020.758264][T31196] bridge1: entered promiscuous mode [ 1020.765721][T31196] bridge1: entered allmulticast mode [ 1020.774797][ T975] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1020.784613][ T975] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.816361][ T975] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1020.830624][ T975] usb 7-1: config 1 has no interface number 1 [ 1020.836774][ T975] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1020.849675][ T975] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1020.872013][ T975] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.884801][T31179] tipc: Disabling bearer [ 1020.890523][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.890546][ T975] usb 7-1: Product: syz [ 1020.890561][ T975] usb 7-1: Manufacturer: syz [ 1020.890575][ T975] usb 7-1: SerialNumber: syz [ 1021.043936][T31206] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5967'. [ 1022.741829][ T30] audit: type=1400 audit(1754803975.004:2234): avc: denied { sys_module } for pid=31171 comm="syz.6.5962" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1022.814488][ T975] usb 7-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1023.740529][ T975] usb 7-1: MIDIStreaming interface descriptor not found [ 1023.813932][T31222] batman_adv: batadv0: Adding interface: macvlan6 [ 1023.820410][T31222] batman_adv: batadv0: The MTU of interface macvlan6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.846073][T31222] batman_adv: batadv0: Interface activated: macvlan6 [ 1024.175305][ T975] usb 7-1: USB disconnect, device number 13 [ 1025.025782][T31273] binder_alloc: 31268: binder_alloc_buf, no vma [ 1026.286609][T31300] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1026.455170][ T30] audit: type=1400 audit(1754803978.774:2235): avc: denied { map } for pid=31305 comm="syz.4.5982" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1027.203199][ T30] audit: type=1400 audit(1754803978.784:2236): avc: denied { execute } for pid=31305 comm="syz.4.5982" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1028.483247][T31316] batman_adv: batadv0: Adding interface: macvlan7 [ 1028.489741][T31316] batman_adv: batadv0: The MTU of interface macvlan7 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1028.515305][T31316] batman_adv: batadv0: Interface activated: macvlan7 [ 1028.717087][T31337] macvlan4: left promiscuous mode [ 1028.723388][T31337] bridge0: left promiscuous mode [ 1028.735116][T31334] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1029.168860][T31342] geneve2: left promiscuous mode [ 1030.320480][ T30] audit: type=1400 audit(1754803982.534:2237): avc: denied { read } for pid=31347 comm="syz.3.5992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1031.929735][ T30] audit: type=1400 audit(1754803984.124:2238): avc: denied { append } for pid=31367 comm="syz.4.5997" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1031.977383][ T30] audit: type=1400 audit(1754803984.154:2239): avc: denied { connect } for pid=31367 comm="syz.4.5997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1032.064794][T31376] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1033.006235][T31393] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1033.220349][ T43] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1033.446935][ T43] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1033.468865][ T43] usb 7-1: config 127 has no interface number 0 [ 1033.490576][ T43] usb 7-1: config 127 interface 124 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1033.506591][ T30] audit: type=1400 audit(1754803985.844:2240): avc: denied { read write } for pid=31404 comm="syz.4.6008" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1033.520320][ T43] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1034.057788][ T30] audit: type=1400 audit(1754803985.844:2241): avc: denied { open } for pid=31404 comm="syz.4.6008" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1034.223187][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.238754][T31414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1034.274492][T31414] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1034.470742][ T30] audit: type=1400 audit(1754803986.814:2242): avc: denied { setopt } for pid=31387 comm="syz.6.6002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1034.561975][ T43] peak_usb 7-1:127.124 can0: unable to request usb[type=0 value=1] err=-71 [ 1035.115831][T31431] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6010'. [ 1035.991345][ T43] peak_usb 7-1:127.124: unable to read PCAN-Chip USB firmware info (err -71) [ 1038.097948][T31439] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1039.142697][ T43] peak_usb 7-1:127.124: probe with driver peak_usb failed with error -71 [ 1039.295811][ T43] usb 7-1: USB disconnect, device number 14 [ 1040.553521][T31482] netlink: 'syz.3.6022': attribute type 64 has an invalid length. [ 1040.561521][T31482] netlink: 'syz.3.6022': attribute type 4 has an invalid length. [ 1040.569285][T31482] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1041.867325][ T30] audit: type=1400 audit(1754803994.204:2243): avc: denied { listen } for pid=31494 comm="syz.6.6027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1041.957556][T31500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.059930][T31498] binder: BINDER_SET_CONTEXT_MGR already set [ 1042.120698][T31498] binder: 31493:31498 ioctl 4018620d 2000000001c0 returned -16 [ 1042.483254][ T30] audit: type=1400 audit(1754803994.724:2244): avc: denied { getopt } for pid=31535 comm="syz.7.6030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1043.550395][ T30] audit: type=1400 audit(1754803995.884:2245): avc: denied { write } for pid=31547 comm="syz.3.6032" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1043.637043][ T30] audit: type=1400 audit(1754803995.884:2246): avc: denied { open } for pid=31547 comm="syz.3.6032" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1043.676789][ T30] audit: type=1400 audit(1754803995.884:2247): avc: denied { ioctl } for pid=31547 comm="syz.3.6032" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1044.565021][ T30] audit: type=1400 audit(1754803996.894:2248): avc: denied { read write } for pid=31557 comm="syz.4.6035" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1044.934180][ T30] audit: type=1400 audit(1754803996.894:2249): avc: denied { open } for pid=31557 comm="syz.4.6035" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1044.981814][T31567] overlay: Unknown parameter 'obj_role' [ 1045.150224][ T30] audit: type=1400 audit(1754803997.394:2250): avc: denied { map } for pid=31566 comm="syz.1.6037" path="socket:[96264]" dev="sockfs" ino=96264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1045.195505][ T30] audit: type=1400 audit(1754803997.394:2251): avc: denied { map } for pid=31566 comm="syz.1.6037" path="socket:[96263]" dev="sockfs" ino=96263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1045.229459][ T30] audit: type=1400 audit(1754803997.394:2252): avc: denied { read accept } for pid=31566 comm="syz.1.6037" path="socket:[96263]" dev="sockfs" ino=96263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1045.370465][T31578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.454132][T31585] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1046.293768][T31596] batman_adv: batadv0: Adding interface: macvlan8 [ 1046.300189][T31596] batman_adv: batadv0: The MTU of interface macvlan8 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.358485][T31596] batman_adv: batadv0: Interface activated: macvlan8 [ 1046.614185][T31613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6044'. [ 1047.869917][T31631] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1047.996442][T31635] 9pnet_fd: Insufficient options for proto=fd [ 1048.155665][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1048.155681][ T30] audit: type=1400 audit(1754804000.334:2256): avc: denied { mounton } for pid=31628 comm="syz.1.6046" path="/414/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1048.449070][ T30] audit: type=1400 audit(1754804000.784:2257): avc: denied { mount } for pid=31643 comm="syz.3.6050" name="/" dev="autofs" ino=96349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1048.516007][ T30] audit: type=1400 audit(1754804000.814:2258): avc: denied { read } for pid=31643 comm="syz.3.6050" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1048.539728][ T30] audit: type=1400 audit(1754804000.814:2259): avc: denied { open } for pid=31643 comm="syz.3.6050" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1048.563538][ T30] audit: type=1400 audit(1754804000.814:2260): avc: denied { ioctl } for pid=31643 comm="syz.3.6050" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1048.593645][ T30] audit: type=1400 audit(1754804000.934:2261): avc: denied { unmount } for pid=26915 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1049.165513][T16078] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1049.325312][T16078] usb 5-1: Using ep0 maxpacket: 16 [ 1049.409979][T31663] overlayfs: missing 'workdir' [ 1049.467344][T16078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.573177][T16078] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1049.593211][T16078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.603903][T16078] usb 5-1: config 0 descriptor?? [ 1050.895384][T16078] usbhid 5-1:0.0: can't add hid device: -71 [ 1050.901949][T16078] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1050.912443][T16078] usb 5-1: USB disconnect, device number 34 [ 1051.610465][T16272] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1051.831839][T16272] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1052.300292][T16272] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1052.316050][T16272] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1052.370533][T16272] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1052.370920][T31706] binder: BINDER_SET_CONTEXT_MGR already set [ 1052.385680][T31706] binder: 31697:31706 ioctl 4018620d 200000004a80 returned -16 [ 1052.601308][T16272] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.639120][T31684] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1052.900459][ T30] audit: type=1400 audit(1754804005.234:2262): avc: denied { ioctl } for pid=31708 comm="syz.4.6062" path="socket:[95181]" dev="sockfs" ino=95181 ioctlcmd=0x48ca scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1053.111134][T31717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1053.117722][T31717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1053.125579][T31717] vhci_hcd vhci_hcd.0: Device attached [ 1053.153088][T31726] syz_tun: entered allmulticast mode [ 1053.193154][ T5920] IPVS: starting estimator thread 0... [ 1053.310312][T16078] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1053.390607][ T5927] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1053.923329][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.929675][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.543328][T16078] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=b7.de [ 1054.556286][T16078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.565271][T16078] usb 5-1: Product: syz [ 1054.569462][T16078] usb 5-1: Manufacturer: syz [ 1054.574455][T16078] usb 5-1: SerialNumber: syz [ 1054.580598][T31729] IPVS: using max 53 ests per chain, 127200 per kthread [ 1054.581202][T16078] usb 5-1: config 0 descriptor?? [ 1054.600078][T16078] ttusb_dec_send_command: command bulk message failed: error -22 [ 1054.608095][T16272] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1054.615196][ T43] usb 40-1: SetAddress Request (2) to port 0 [ 1054.623827][T16078] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 1054.630387][ T43] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1054.643309][T16272] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input29 [ 1054.676135][ T30] audit: type=1400 audit(1754804007.004:2263): avc: denied { connect } for pid=31689 comm="syz.7.6057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1054.714371][ T5927] usb 4-1: device descriptor read/64, error -71 [ 1054.798056][T16272] usb 7-1: USB disconnect, device number 15 [ 1054.804301][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1054.848585][ T975] usb 5-1: USB disconnect, device number 35 [ 1054.859142][T31708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1054.990358][ T5927] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 1055.220373][ T5927] usb 4-1: device descriptor read/64, error -71 [ 1055.614880][ T5927] usb usb4-port1: attempt power cycle [ 1055.889910][ T30] audit: type=1400 audit(1754804008.224:2264): avc: denied { create } for pid=31789 comm="syz.4.6073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1055.893027][T31790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6073'. [ 1055.924953][ T30] audit: type=1400 audit(1754804008.264:2265): avc: denied { ioctl } for pid=31789 comm="syz.4.6073" path="socket:[97466]" dev="sockfs" ino=97466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1056.037992][ T30] audit: type=1400 audit(1754804008.374:2266): avc: denied { name_bind } for pid=31789 comm="syz.4.6073" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1056.096911][ T5920] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1056.116163][T31719] vhci_hcd: connection reset by peer [ 1056.123240][ T36] vhci_hcd: stop threads [ 1056.127507][ T36] vhci_hcd: release socket [ 1056.137115][ T36] vhci_hcd: disconnect device [ 1056.150909][ T5927] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 1056.266481][T31804] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6075'. [ 1056.300663][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 1056.319643][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.347735][ T5920] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1056.360546][ T5927] usb 4-1: device not accepting address 55, error -71 [ 1056.367458][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.453374][ T5920] usb 7-1: config 0 descriptor?? [ 1057.347298][T31811] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1057.643922][ T5920] usbhid 7-1:0.0: can't add hid device: -71 [ 1057.651254][ T5920] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1057.668871][ T5920] usb 7-1: USB disconnect, device number 16 [ 1057.739955][ T30] audit: type=1400 audit(1754804010.074:2267): avc: denied { create } for pid=31820 comm="syz.4.6077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1057.980620][T16078] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1058.210304][T16078] usb 5-1: Using ep0 maxpacket: 16 [ 1058.217038][T16078] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1058.225337][T16078] usb 5-1: config 0 has no interface number 0 [ 1058.231455][T16078] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1058.242901][T16078] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1058.254845][T16078] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1058.264023][T16078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.272051][T16078] usb 5-1: Product: syz [ 1058.276293][T16078] usb 5-1: Manufacturer: syz [ 1058.280954][T16078] usb 5-1: SerialNumber: syz [ 1058.287694][T16078] usb 5-1: config 0 descriptor?? [ 1058.360636][T31823] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1058.368097][T31823] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1058.548686][T31839] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6082'. [ 1058.557916][T31839] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6082'. [ 1058.714450][T31823] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1058.809302][T31823] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1058.824250][T31854] FAULT_INJECTION: forcing a failure. [ 1058.824250][T31854] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.836969][T31854] CPU: 1 UID: 0 PID: 31854 Comm: syz.1.6083 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1058.836992][T31854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1058.837001][T31854] Call Trace: [ 1058.837007][T31854] [ 1058.837013][T31854] dump_stack_lvl+0x16c/0x1f0 [ 1058.837035][T31854] should_fail_ex+0x512/0x640 [ 1058.837053][T31854] ? fs_reclaim_acquire+0xae/0x150 [ 1058.837076][T31854] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1058.837099][T31854] should_failslab+0xc2/0x120 [ 1058.837113][T31854] __kmalloc_noprof+0xd2/0x510 [ 1058.837127][T31854] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1058.837146][T31854] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1058.837160][T31854] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1058.837204][T31854] ? do_raw_spin_lock+0x12c/0x2b0 [ 1058.837228][T31854] tomoyo_file_open+0x6b/0x90 [ 1058.837244][T31854] security_file_open+0x84/0x1e0 [ 1058.837261][T31854] do_dentry_open+0x596/0x1530 [ 1058.837276][T31854] vfs_open+0x82/0x3f0 [ 1058.837292][T31854] path_openat+0x1de4/0x2cb0 [ 1058.837310][T31854] ? __pfx_path_openat+0x10/0x10 [ 1058.837335][T31854] do_filp_open+0x20b/0x470 [ 1058.837353][T31854] ? __pfx_do_filp_open+0x10/0x10 [ 1058.837388][T31854] ? alloc_fd+0x471/0x7d0 [ 1058.837403][T31854] do_sys_openat2+0x11b/0x1d0 [ 1058.837418][T31854] ? __pfx_do_sys_openat2+0x10/0x10 [ 1058.837434][T31854] ? __fget_files+0x20e/0x3c0 [ 1058.837447][T31854] __x64_sys_openat+0x174/0x210 [ 1058.837468][T31854] ? __pfx___x64_sys_openat+0x10/0x10 [ 1058.837488][T31854] ? ksys_write+0x1ac/0x250 [ 1058.837517][T31854] do_syscall_64+0xcd/0x4c0 [ 1058.837534][T31854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.837545][T31854] RIP: 0033:0x7f317f78ebe9 [ 1058.837554][T31854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.837565][T31854] RSP: 002b:00007f317d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1058.837575][T31854] RAX: ffffffffffffffda RBX: 00007f317f9b6090 RCX: 00007f317f78ebe9 [ 1058.837582][T31854] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1058.837588][T31854] RBP: 00007f317d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.837595][T31854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.837605][T31854] R13: 00007f317f9b6128 R14: 00007f317f9b6090 R15: 00007ffd2d89b1f8 [ 1058.837627][T31854] [ 1058.837735][ T30] audit: type=1400 audit(1754804011.164:2268): avc: denied { read } for pid=31843 comm="syz.1.6083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1058.840380][T31854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1059.697292][ T43] usb 40-1: device descriptor read/8, error -110 [ 1059.709645][ T30] audit: type=1400 audit(1754804012.044:2269): avc: denied { name_bind } for pid=31843 comm="syz.1.6083" src=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1059.748094][T31853] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1059.748094][T31853] The task syz.6.6085 (31853) triggered the difference, watch for misbehavior. [ 1059.803539][ T30] audit: type=1400 audit(1754804012.134:2270): avc: denied { read append } for pid=31850 comm="syz.6.6085" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1059.827332][ T30] audit: type=1400 audit(1754804012.134:2271): avc: denied { open } for pid=31850 comm="syz.6.6085" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1059.850422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.857281][ T30] audit: type=1400 audit(1754804012.174:2272): avc: denied { ioctl } for pid=31850 comm="syz.6.6085" path="socket:[98423]" dev="sockfs" ino=98423 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1059.881967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1060.006559][T16078] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1060.017243][T16078] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -32 [ 1060.041910][T16078] asix 5-1:0.251: probe with driver asix failed with error -32 [ 1060.049964][T31823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.058853][T31823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.161275][ T43] usb usb40-port1: attempt power cycle [ 1060.269012][ T5927] usb 5-1: USB disconnect, device number 36 [ 1060.408575][ T30] audit: type=1400 audit(1754804012.744:2273): avc: denied { create } for pid=31883 comm="syz.3.6090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1060.441261][T31884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1060.466980][T31884] binder: 31883:31884 ioctl c018620c 200000000280 returned -22 [ 1060.477185][ T30] audit: type=1400 audit(1754804012.774:2274): avc: denied { bind } for pid=31883 comm="syz.3.6090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1060.500712][T31884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6090'. [ 1060.748715][ T30] audit: type=1400 audit(1754804012.914:2275): avc: denied { remount } for pid=31885 comm="syz.6.6091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1060.750557][T31884] binder: 31883:31884 ioctl 89f1 200000000300 returned -22 [ 1061.058038][ T43] usb usb40-port1: unable to enumerate USB device [ 1061.484910][T31900] tipc: Enabling of bearer rejected, already enabled [ 1061.493422][T31900] tipc: Enabling of bearer rejected, already enabled [ 1061.750792][T31903] Invalid ELF section header size [ 1061.756797][ T30] audit: type=1400 audit(1754804014.094:2276): avc: denied { module_load } for pid=31901 comm="syz.4.6096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1061.807087][ T30] audit: type=1400 audit(1754804014.144:2277): avc: denied { read } for pid=31902 comm="syz.1.6098" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1061.831246][ T30] audit: type=1400 audit(1754804014.144:2278): avc: denied { open } for pid=31902 comm="syz.1.6098" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1063.200435][ T975] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1063.444320][T31928] batman_adv: batadv0: Adding interface: macvlan9 [ 1063.450871][T31928] batman_adv: batadv0: The MTU of interface macvlan9 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.476778][T31928] batman_adv: batadv0: Interface activated: macvlan9 [ 1064.524403][ T975] usb 7-1: New USB device found, idVendor=0b48, idProduct=0c08, bcdDevice=b7.de [ 1064.583573][ T975] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.600512][ T975] usb 7-1: Product: syz [ 1064.617494][ T975] usb 7-1: Manufacturer: syz [ 1064.622143][ T975] usb 7-1: SerialNumber: syz [ 1064.645924][ T975] usb 7-1: config 0 descriptor?? [ 1064.874547][ T975] usb 7-1: USB disconnect, device number 17 [ 1064.880892][T31913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.339799][ T36] tipc: Disabling bearer [ 1065.405034][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1065.405047][ T30] audit: type=1400 audit(1754804017.744:2282): avc: denied { write } for pid=31945 comm="syz.4.6103" name="cgroup.subtree_control" dev="cgroup2" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1065.445016][ T30] audit: type=1400 audit(1754804017.744:2283): avc: denied { open } for pid=31945 comm="syz.4.6103" path="" dev="cgroup2" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1065.687888][ T36] bond0 (unregistering): Released all slaves [ 1065.703698][ T36] bond1 (unregistering): Released all slaves [ 1065.718491][ T36] bond2 (unregistering): Released all slaves [ 1066.366753][ T30] audit: type=1400 audit(1754804018.694:2284): avc: denied { shutdown } for pid=31974 comm="syz.4.6108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1066.574402][ T36] bond3 (unregistering): Released all slaves [ 1066.592409][T31964] tipc: Enabling of bearer rejected, already enabled [ 1066.605171][T31967] tipc: Enabling of bearer rejected, already enabled [ 1066.647980][ T36] bridge: left promiscuous mode [ 1066.740395][ T36] tipc: Disabling bearer [ 1067.896637][ T36] tipc: Disabling bearer [ 1067.939706][ T36] tipc: Left network mode [ 1068.230992][T32003] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 1068.320532][T18856] Bluetooth: hci4: command 0x0406 tx timeout [ 1068.470392][ T30] audit: type=1326 audit(1754804020.694:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.3.6113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1068.927104][ T36] hsr_slave_0: left promiscuous mode [ 1068.939614][T32035] FAULT_INJECTION: forcing a failure. [ 1068.939614][T32035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.061216][T32035] CPU: 1 UID: 0 PID: 32035 Comm: syz.6.6116 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1069.061241][T32035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1069.061248][T32035] Call Trace: [ 1069.061252][T32035] [ 1069.061257][T32035] dump_stack_lvl+0x16c/0x1f0 [ 1069.061271][T32035] should_fail_ex+0x512/0x640 [ 1069.061285][T32035] strncpy_from_user+0x3b/0x2e0 [ 1069.061297][T32035] getname_flags.part.0+0x8f/0x550 [ 1069.061316][T32035] getname_flags+0x93/0xf0 [ 1069.061327][T32035] __x64_sys_link+0x58/0xa0 [ 1069.061340][T32035] do_syscall_64+0xcd/0x4c0 [ 1069.061352][T32035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.061363][T32035] RIP: 0033:0x7f4f6b78ebe9 [ 1069.061373][T32035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.061383][T32035] RSP: 002b:00007f4f6c622038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1069.061394][T32035] RAX: ffffffffffffffda RBX: 00007f4f6b9b6090 RCX: 00007f4f6b78ebe9 [ 1069.061401][T32035] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1069.061408][T32035] RBP: 00007f4f6c622090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.061414][T32035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.061420][T32035] R13: 00007f4f6b9b6128 R14: 00007f4f6b9b6090 R15: 00007fffa607f478 [ 1069.061433][T32035] [ 1069.240003][ T36] hsr_slave_1: left promiscuous mode [ 1069.253859][ T36] pim6reg (unregistering): left allmulticast mode [ 1070.369800][T32058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1070.690741][ T30] audit: type=1400 audit(1754804023.014:2286): avc: denied { write } for pid=32063 comm="syz.7.6122" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1070.713591][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.983490][ T30] audit: type=1400 audit(1754804023.014:2287): avc: denied { append } for pid=32063 comm="syz.7.6122" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.856169][T32046] tipc: Enabling of bearer rejected, already enabled [ 1072.013848][T32051] tipc: Enabling of bearer rejected, already enabled [ 1072.490293][ T975] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1073.390623][ T975] usb 4-1: Using ep0 maxpacket: 32 [ 1073.772061][ T975] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1073.780908][ T975] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1073.791972][ T975] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1073.803305][ T975] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1073.816902][ T975] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1073.842756][ T975] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1073.854171][ T36] IPVS: stop unused estimator thread 0... [ 1073.870542][ T975] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1073.879221][ T975] usb 4-1: Product: syz [ 1073.883422][ T975] usb 4-1: Manufacturer: syz [ 1073.888100][ T975] usb 4-1: SerialNumber: syz [ 1073.909888][ T975] usb 4-1: config 0 descriptor?? [ 1073.942358][ T30] audit: type=1326 audit(1754804026.284:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32092 comm="syz.1.6129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f317f78ebe9 code=0x0 [ 1073.992864][ T975] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1074.090845][ T975] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1074.388312][T16078] usb 4-1: USB disconnect, device number 57 [ 1074.407048][T16078] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1074.477152][T32144] tipc: Resetting bearer [ 1074.489623][T32144] tipc: Resetting bearer [ 1074.508757][T32149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1074.528311][ T3523] tipc: Resetting bearer [ 1075.513728][T32159] gretap0: entered promiscuous mode [ 1075.524403][T32159] gretap0: left promiscuous mode [ 1076.453346][ T30] audit: type=1400 audit(1754804028.794:2289): avc: denied { view } for pid=32165 comm="syz.4.6136" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1077.190814][T32185] fuse: blksize only supported for fuseblk [ 1078.712345][ T30] audit: type=1326 audit(1754804031.054:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32196 comm="syz.6.6144" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6b78ebe9 code=0x0 [ 1078.915890][T32207] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1080.130181][T32223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1080.930345][T22618] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1081.102065][T22618] usb 7-1: Using ep0 maxpacket: 32 [ 1081.121073][T22618] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1081.129237][T22618] usb 7-1: config 0 has no interface number 0 [ 1081.152307][T22618] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1081.171606][T22618] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.180391][T22618] usb 7-1: Product: syz [ 1081.210289][T22618] usb 7-1: Manufacturer: syz [ 1081.225070][T22618] usb 7-1: SerialNumber: syz [ 1081.237579][T22618] usb 7-1: config 0 descriptor?? [ 1081.251909][T22618] smsc95xx v2.0.0 [ 1081.255956][T22618] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1081.266610][T22618] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 1081.617696][T32228] input: syz0 as /devices/virtual/input/input30 [ 1082.153071][ T30] audit: type=1400 audit(1754804034.074:2291): avc: denied { connect } for pid=32241 comm="syz.7.6153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1082.210914][ T30] audit: type=1400 audit(1754804034.224:2292): avc: denied { write } for pid=32241 comm="syz.7.6153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1082.260008][T32276] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6151'. [ 1082.462287][T22618] usb 7-1: USB disconnect, device number 18 [ 1083.122631][ T30] audit: type=1400 audit(1754804035.424:2293): avc: denied { ioctl } for pid=32305 comm="syz.1.6159" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1083.148741][T32303] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6158'. [ 1083.676163][T32326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6160'. [ 1084.587182][T22618] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1084.688549][ T30] audit: type=1400 audit(1754804037.024:2294): avc: denied { create } for pid=32334 comm="syz.7.6164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1084.972888][T32335] trusted_key: encrypted_key: insufficient parameters specified [ 1084.980741][T22618] usb 7-1: Using ep0 maxpacket: 32 [ 1084.986447][T32335] trusted_key: encrypted_key: insufficient parameters specified [ 1084.996096][T22618] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1085.004868][T22618] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1085.015863][T22618] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1085.036517][T22618] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1085.068652][T22618] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1085.085690][T22618] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1085.094830][T16078] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1085.109967][T22618] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1085.241785][ T30] audit: type=1400 audit(1754804037.524:2295): avc: denied { mount } for pid=32341 comm="syz.3.6166" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1085.357297][T16078] usb 5-1: device descriptor read/64, error -71 [ 1085.458624][T22618] usb 7-1: Product: syz [ 1085.462919][T22618] usb 7-1: Manufacturer: syz [ 1085.467602][T22618] usb 7-1: SerialNumber: syz [ 1085.512129][T22618] usb 7-1: config 0 descriptor?? [ 1085.542198][T22618] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1085.556475][T22618] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1086.208824][T16078] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1086.340192][T22620] usb 7-1: USB disconnect, device number 19 [ 1086.350308][T16078] usb 5-1: device descriptor read/64, error -71 [ 1086.370790][T22620] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1086.480884][T16078] usb usb5-port1: attempt power cycle [ 1087.240752][T16078] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1087.270931][T16078] usb 5-1: device descriptor read/8, error -71 [ 1087.277197][ T30] audit: type=1400 audit(1754804039.614:2296): avc: denied { unmount } for pid=26915 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1087.422549][ T30] audit: type=1400 audit(1754804039.764:2297): avc: denied { read } for pid=32395 comm="syz.3.6170" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1087.764587][ T30] audit: type=1400 audit(1754804039.764:2298): avc: denied { open } for pid=32395 comm="syz.3.6170" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1088.832517][T16078] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1088.896522][T16078] usb 5-1: device descriptor read/8, error -71 [ 1089.080705][T16078] usb usb5-port1: unable to enumerate USB device [ 1090.131970][T12717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.138350][ T30] audit: type=1400 audit(1754804042.374:2299): avc: denied { write } for pid=32404 comm="syz.7.6172" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1090.163609][T12717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.325323][T32414] overlayfs: failed to get inode (-116) [ 1090.331626][T32414] overlayfs: failed to get inode (-116) [ 1090.488001][T32434] tipc: Resetting bearer [ 1090.941534][T32437] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.562808][T32450] netlink: 'syz.4.6183': attribute type 30 has an invalid length. [ 1092.844693][T32480] net_ratelimit: 8 callbacks suppressed [ 1092.844708][T32480] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1092.925354][ T30] audit: type=1400 audit(1754804045.264:2300): avc: denied { connect } for pid=32479 comm="syz.7.6185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1094.139874][T32495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6192'. [ 1094.239624][T32484] tipc: Resetting bearer [ 1094.704099][T32500] netlink: 'syz.4.6192': attribute type 10 has an invalid length. [ 1094.760402][T32500] tipc: Resetting bearer [ 1094.795436][T32500] tipc: Resetting bearer [ 1094.832766][T32500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.863292][T32495] binder: 32494:32495 ioctl c0306201 200000000540 returned -22 [ 1094.865188][T32500] bond0: (slave team0): Enslaving as an active interface with an up link [ 1094.991010][T32508] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.328563][ T30] audit: type=1400 audit(1754804047.614:2301): avc: denied { setopt } for pid=32519 comm="syz.7.6197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1097.122112][T32538] Invalid source name [ 1097.126098][T32538] UBIFS error (pid: 32538): cannot open "./file0", error -22 [ 1097.131043][ T30] audit: type=1400 audit(1754804049.464:2302): avc: denied { create } for pid=32536 comm="syz.3.6199" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1097.194145][ T30] audit: type=1400 audit(1754804049.464:2303): avc: denied { mounton } for pid=32536 comm="syz.3.6199" path="/171/file0" dev="tmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1097.357283][T32540] netlink: 'syz.1.6200': attribute type 27 has an invalid length. [ 1098.494216][ T30] audit: type=1400 audit(1754804050.654:2304): avc: denied { mounton } for pid=32554 comm="syz.6.6205" path="/396/file0" dev="tmpfs" ino=2135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1099.275983][T32569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.304644][ T30] audit: type=1400 audit(1754804051.514:2305): avc: denied { create } for pid=32559 comm="syz.1.6206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1099.366876][T32573] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1099.676538][ T30] audit: type=1400 audit(1754804051.564:2306): avc: denied { sys_admin } for pid=32559 comm="syz.1.6206" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1100.866571][ T30] audit: type=1400 audit(1754804053.204:2307): avc: denied { mount } for pid=32587 comm="syz.4.6210" name="/" dev="ramfs" ino=101544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1100.889052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.011549][ T30] audit: type=1400 audit(1754804053.314:2308): avc: denied { execute } for pid=32587 comm="syz.4.6210" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=102964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1101.035219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.540116][ T30] audit: type=1400 audit(1754804053.874:2309): avc: denied { name_connect } for pid=32601 comm="syz.4.6216" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1102.408923][T32602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6216'. [ 1102.419465][ T30] audit: type=1400 audit(1754804054.744:2310): avc: denied { setopt } for pid=32601 comm="syz.4.6216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1102.682449][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1102.688932][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.696783][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.704593][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.712493][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.720305][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.728141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.735954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.743803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.751661][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.759515][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.767323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.775162][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.782964][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.790831][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.798634][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.806481][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.814299][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.822141][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.829940][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.837836][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.845651][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.853486][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.861306][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.869171][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.877016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.884876][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.892681][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.900667][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.908546][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.916590][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.924472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.932504][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.940399][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.948440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.956311][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.964325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.972198][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.980244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1102.988094][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1102.996157][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.004025][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.011976][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.019787][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.027625][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.035433][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.043329][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.051139][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.058977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.066803][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.074698][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.082513][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.090358][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.098167][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.106029][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.113839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.121673][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.129478][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.137485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.145366][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.153421][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.161307][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.169175][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.176979][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.184816][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.192629][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.200467][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.208267][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.216116][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.223921][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.231754][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.239555][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.247409][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.255215][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.263047][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.270852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.278680][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.286485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.294322][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.302128][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.309954][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.317761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.325598][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.333408][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.341244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1103.349039][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1103.428259][ T30] audit: type=1400 audit(1754804055.724:2311): avc: denied { shutdown } for pid=32605 comm="syz.1.6217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1103.498627][T32609] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1103.923297][T32617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.061759][ T30] audit: type=1326 audit(1754804056.404:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32620 comm="syz.3.6221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1105.795524][ T30] audit: type=1400 audit(1754804058.134:2313): avc: denied { ioctl } for pid=32644 comm="syz.6.6227" path="socket:[101761]" dev="sockfs" ino=101761 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1105.807936][T32646] tipc: Resetting bearer [ 1107.816807][T32684] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1107.887163][T32685] overlayfs: missing 'workdir' [ 1108.459744][T32704] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940219855 (504348141440 ns) > initial count (172531652224 ns). Using initial count to start timer. [ 1108.624719][T32706] netlink: 'syz.6.6238': attribute type 39 has an invalid length. [ 1110.502844][T32730] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1112.946080][T32758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.364667][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.371181][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.870875][ T336] tipc: Resetting bearer [ 1116.143306][ T336] geneve2: left promiscuous mode [ 1116.148722][ T336] bridge1: left promiscuous mode [ 1116.584041][ T331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6252'. [ 1116.660281][T16078] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1116.710670][ T356] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1116.971594][T16078] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1116.981932][T16078] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1116.995319][T16078] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1117.009307][T16078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1117.023821][T16078] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1117.673716][T16078] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1117.696550][T16078] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1117.714987][T16078] usb 5-1: Product: syz [ 1117.746735][T16078] usb 5-1: Manufacturer: syz [ 1117.764990][T16078] cdc_wdm 5-1:1.0: skipping garbage [ 1117.770343][T16078] cdc_wdm 5-1:1.0: skipping garbage [ 1117.776290][T16078] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1117.786577][T16078] cdc_wdm 5-1:1.0: Unknown control protocol [ 1120.346678][ T30] audit: type=1400 audit(1754804072.564:2314): avc: denied { bind } for pid=395 comm="syz.6.6263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1120.513482][ T30] audit: type=1400 audit(1754804072.564:2315): avc: denied { node_bind } for pid=395 comm="syz.6.6263" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1120.667080][T16078] usb 5-1: USB disconnect, device number 41 [ 1121.220434][ T401] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1123.126369][ T30] audit: type=1400 audit(1754804075.464:2316): avc: denied { listen } for pid=416 comm="syz.6.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1123.146238][ T421] tipc: Enabled bearer , priority 0 [ 1123.627033][ T30] audit: type=1400 audit(1754804075.964:2317): avc: denied { accept } for pid=416 comm="syz.6.6267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1123.646883][ T424] syzkaller0: entered promiscuous mode [ 1123.656775][ T424] syzkaller0: entered allmulticast mode [ 1123.670608][ T423] tipc: Enabled bearer , priority 0 [ 1123.679459][ T423] syzkaller0: entered promiscuous mode [ 1123.691551][ T423] syzkaller0: entered allmulticast mode [ 1123.743653][ T423] tipc: Resetting bearer [ 1123.749623][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.768784][ T423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.880461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.888896][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.150334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.158500][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.680338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.688486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.205999][ T420] tipc: Resetting bearer [ 1125.492163][ T420] tipc: Disabling bearer [ 1125.509389][ T416] tipc: Resetting bearer [ 1125.528777][ T416] tipc: Disabling bearer [ 1125.789459][ T30] audit: type=1400 audit(1754804078.124:2318): avc: denied { append } for pid=477 comm="syz.6.6276" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1125.819485][ T481] tipc: Enabling of bearer rejected, already enabled [ 1127.112293][ T502] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6280'. [ 1131.887578][ T30] audit: type=1400 audit(1754804084.224:2319): avc: denied { getopt } for pid=556 comm="syz.3.6292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1131.994215][ T30] audit: type=1400 audit(1754804084.334:2320): avc: denied { setattr } for pid=564 comm="syz.3.6294" name="dsp1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 1132.472665][ T577] binder: 576:577 ioctl c0306201 0 returned -14 [ 1133.345915][ T583] netlink: 'syz.7.6293': attribute type 10 has an invalid length. [ 1133.410141][ T588] binder: BC_ACQUIRE_RESULT not supported [ 1133.416906][ T588] binder: 585:588 ioctl c0306201 200000000640 returned -22 [ 1133.480119][ T583] batman_adv: batadv0: Adding interface: wlan0 [ 1133.507270][ T583] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.533091][ T583] batman_adv: batadv0: Interface activated: wlan0 [ 1133.777389][ T605] tipc: Resetting bearer [ 1133.794856][ T30] audit: type=1400 audit(1754804086.054:2321): avc: denied { read } for pid=599 comm="syz.4.6303" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1133.819300][ T30] audit: type=1400 audit(1754804086.054:2322): avc: denied { open } for pid=599 comm="syz.4.6303" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1133.873696][ T30] audit: type=1400 audit(1754804086.124:2323): avc: denied { ioctl } for pid=599 comm="syz.4.6303" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1133.965088][ T603] sp0: Synchronizing with TNC [ 1133.988461][ T30] audit: type=1400 audit(1754804086.184:2324): avc: denied { ioctl } for pid=554 comm="syz.7.6293" path="socket:[105494]" dev="sockfs" ino=105494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1134.055685][ T30] audit: type=1400 audit(1754804086.184:2325): avc: denied { create } for pid=602 comm="syz.6.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1134.075247][ T30] audit: type=1400 audit(1754804086.184:2326): avc: denied { getopt } for pid=602 comm="syz.6.6304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1134.095140][ T30] audit: type=1400 audit(1754804086.194:2327): avc: denied { module_request } for pid=597 comm="syz.1.6302" kmod="net-pf-10-proto-132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1134.117857][ T30] audit: type=1400 audit(1754804086.374:2328): avc: denied { read write } for pid=597 comm="syz.1.6302" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1134.683657][ T647] tipc: Enabling of bearer rejected, already enabled [ 1135.778302][ T671] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1135.843778][ T673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.874943][ T678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6316'. [ 1136.110763][ T685] gretap0: entered promiscuous mode [ 1136.121929][ T685] batman_adv: batadv0: Adding interface: macvlan2 [ 1136.128387][ T685] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.154009][ T685] batman_adv: batadv0: Interface activated: macvlan2 [ 1137.260615][ T598] [U] è [ 1137.414871][T16078] libceph: connect (1)[c::]:6789 error -101 [ 1137.468376][T16078] libceph: mon0 (1)[c::]:6789 connect error [ 1137.511223][ T698] ceph: No mds server is up or the cluster is laggy [ 1137.935191][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 1137.935282][ T30] audit: type=1326 audit(1754804090.274:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=720 comm="syz.3.6322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1138.462218][ T30] audit: type=1400 audit(1754804090.794:2400): avc: denied { read } for pid=729 comm="syz.1.6325" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1138.516438][ T30] audit: type=1400 audit(1754804090.794:2401): avc: denied { open } for pid=729 comm="syz.1.6325" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1138.571419][ T30] audit: type=1400 audit(1754804090.914:2402): avc: denied { write } for pid=729 comm="syz.1.6325" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1138.571449][ T734] PKCS7: Unknown OID: [5] (bad) [ 1138.606314][ T734] PKCS7: Only support pkcs7_signedData type [ 1138.652971][ T30] audit: type=1400 audit(1754804090.994:2403): avc: denied { append } for pid=729 comm="syz.1.6325" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1138.698478][ T30] audit: type=1400 audit(1754804090.994:2404): avc: denied { map } for pid=729 comm="syz.1.6325" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1139.037324][ T30] audit: type=1400 audit(1754804090.994:2405): avc: denied { write } for pid=729 comm="syz.1.6325" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1139.107682][ T30] audit: type=1400 audit(1754804091.444:2406): avc: denied { bind } for pid=742 comm="syz.4.6328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1139.131540][ T741] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1139.227448][ T30] audit: type=1400 audit(1754804091.444:2407): avc: denied { name_bind } for pid=742 comm="syz.4.6328" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1139.249529][ T30] audit: type=1400 audit(1754804091.444:2408): avc: denied { node_bind } for pid=742 comm="syz.4.6328" saddr=fe88::105 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1141.520273][T22618] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1141.688600][ T767] batman_adv: batadv0: Adding interface: macvlan3 [ 1141.695556][ T767] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.721372][ T767] batman_adv: batadv0: Interface activated: macvlan3 [ 1141.923585][T22618] usb 5-1: Using ep0 maxpacket: 8 [ 1142.514915][T22618] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1142.542468][T22618] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1142.560235][T22618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.568457][T22618] usb 5-1: Product: syz [ 1142.572681][T22618] usb 5-1: Manufacturer: syz [ 1142.577305][T22618] usb 5-1: SerialNumber: syz [ 1142.592647][T22618] usb 5-1: config 0 descriptor?? [ 1142.601202][T22618] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1142.609322][T22618] usb 5-1: setting power ON [ 1142.619042][T22618] dvb-usb: bulk message failed: -22 (2/0) [ 1142.629710][T22618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1142.641612][T22618] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1142.650234][T22618] usb 5-1: media controller created [ 1142.672969][T22618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1142.689996][T22618] usb 5-1: selecting invalid altsetting 6 [ 1142.697532][T22618] usb 5-1: digital interface selection failed (-22) [ 1142.743352][ T785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1142.773147][T22618] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1142.799437][ T759] dvb-usb: bulk message failed: -22 (3/0) [ 1142.805345][ T759] dvb-usb: bulk message failed: -22 (3/0) [ 1142.825070][T22618] usb 5-1: setting power OFF [ 1142.842983][T22618] dvb-usb: bulk message failed: -22 (2/0) [ 1142.867613][T22618] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1142.903834][T22618] (NULL device *): no alternate interface [ 1142.976356][T22618] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1143.031703][ T798] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1143.043038][T22618] usb 5-1: USB disconnect, device number 42 [ 1143.167162][ T804] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1143.823244][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1143.823259][ T30] audit: type=1400 audit(1754804096.164:2422): avc: denied { setopt } for pid=816 comm="syz.3.6339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1144.264045][ T824] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1145.273484][ T30] audit: type=1400 audit(1754804097.614:2423): avc: denied { ioctl } for pid=825 comm="syz.7.6342" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1145.620591][ T833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1145.901800][ T843] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6344'. [ 1146.280263][ T30] audit: type=1400 audit(1754804098.234:2424): avc: denied { create } for pid=840 comm="syz.4.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1146.475535][ T30] audit: type=1400 audit(1754804098.254:2425): avc: denied { connect } for pid=840 comm="syz.4.6344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1146.504704][ T30] audit: type=1400 audit(1754804098.254:2426): avc: denied { name_connect } for pid=840 comm="syz.4.6344" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1146.880468][ T30] audit: type=1400 audit(1754804098.344:2427): avc: denied { mount } for pid=840 comm="syz.4.6344" name="/" dev="rpc_pipefs" ino=104909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1146.908391][ T30] audit: type=1400 audit(1754804098.624:2428): avc: denied { read write } for pid=825 comm="syz.7.6342" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1146.966210][ T30] audit: type=1400 audit(1754804098.624:2429): avc: denied { open } for pid=825 comm="syz.7.6342" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1146.990315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1147.296262][ T857] tipc: Enabling of bearer rejected, already enabled [ 1147.430566][ T30] audit: type=1400 audit(1754804098.704:2430): avc: denied { append } for pid=844 comm="syz.1.6345" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1147.453276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1147.502442][ T30] audit: type=1400 audit(1754804098.964:2431): avc: denied { bind } for pid=844 comm="syz.1.6345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1147.760399][ T5955] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1148.395607][ T5955] usb 5-1: device descriptor read/all, error -71 [ 1148.947516][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1148.947526][ T30] audit: type=1400 audit(1754804101.284:2436): avc: denied { create } for pid=888 comm="syz.6.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1150.013364][ T910] overlayfs: upper fs does not support tmpfile. [ 1150.047967][ T911] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1150.309143][ T30] audit: type=1400 audit(1754804102.614:2437): avc: denied { setopt } for pid=913 comm="syz.3.6358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1150.970040][ T923] tipc: Enabling of bearer rejected, already enabled [ 1151.027098][ T30] audit: type=1400 audit(1754804103.364:2438): avc: denied { create } for pid=925 comm="syz.3.6361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1151.340694][ T30] audit: type=1400 audit(1754804103.394:2439): avc: denied { write } for pid=925 comm="syz.3.6361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1151.468211][ T30] audit: type=1326 audit(1754804103.534:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=928 comm="syz.3.6363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1152.394244][ T955] tipc: Resetting bearer [ 1152.574478][ T30] audit: type=1400 audit(1754804104.894:2441): avc: denied { create } for pid=957 comm="syz.3.6368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1152.597096][ T30] audit: type=1400 audit(1754804104.894:2442): avc: denied { ioctl } for pid=957 comm="syz.3.6368" path="socket:[105073]" dev="sockfs" ino=105073 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1152.622046][ C1] vkms_vblank_simulate: vblank timer overrun [ 1153.259430][ T30] audit: type=1400 audit(1754804105.214:2443): avc: denied { mount } for pid=959 comm="syz.3.6369" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1153.318284][ T30] audit: type=1400 audit(1754804105.224:2444): avc: denied { mounton } for pid=959 comm="syz.3.6369" path="/204/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1153.336747][ T965] SELinux: failed to load policy [ 1153.402910][ T30] audit: type=1400 audit(1754804105.224:2445): avc: denied { mount } for pid=959 comm="syz.3.6369" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1153.580667][ T968] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20002 [ 1154.034028][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1154.034043][ T30] audit: type=1400 audit(1754804106.374:2453): avc: denied { block_suspend } for pid=979 comm="syz.6.6374" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1154.380481][ T30] audit: type=1400 audit(1754804106.414:2454): avc: denied { remount } for pid=979 comm="syz.6.6374" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1154.400120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.485011][ T30] audit: type=1400 audit(1754804106.424:2455): avc: denied { ioctl } for pid=979 comm="syz.6.6374" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1154.545965][ T30] audit: type=1326 audit(1754804106.674:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=982 comm="syz.1.6375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f317f78ebe9 code=0x0 [ 1154.549431][ T969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1154.568750][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.605465][ T30] audit: type=1400 audit(1754804106.694:2457): avc: denied { sys_module } for pid=969 comm="syz.7.6371" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1154.934657][ T30] audit: type=1326 audit(1754804107.114:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=995 comm="syz.6.6376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6b78ebe9 code=0x0 [ 1155.896652][ T1022] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1156.931435][ T1046] syz.3.6387: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1157.173374][ T30] audit: type=1400 audit(1754804109.274:2459): avc: denied { setopt } for pid=1038 comm="syz.3.6387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1157.213663][ T1046] CPU: 1 UID: 0 PID: 1046 Comm: syz.3.6387 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1157.213694][ T1046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1157.213706][ T1046] Call Trace: [ 1157.213713][ T1046] [ 1157.213721][ T1046] dump_stack_lvl+0x16c/0x1f0 [ 1157.213748][ T1046] warn_alloc+0x248/0x3a0 [ 1157.213771][ T1046] ? __pfx_warn_alloc+0x10/0x10 [ 1157.213790][ T1046] ? __pfx_stack_trace_save+0x10/0x10 [ 1157.213826][ T1046] ? kasan_save_stack+0x42/0x60 [ 1157.213845][ T1046] ? kasan_save_stack+0x33/0x60 [ 1157.213861][ T1046] ? kasan_save_track+0x14/0x30 [ 1157.213880][ T1046] ? xskq_create+0x52/0x1d0 [ 1157.213907][ T1046] ? xsk_setsockopt+0x74e/0x9a0 [ 1157.213931][ T1046] ? do_sock_setsockopt+0xf3/0x1d0 [ 1157.213956][ T1046] ? xskq_create+0xfb/0x1d0 [ 1157.213988][ T1046] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 1157.214026][ T1046] ? xskq_create+0xfb/0x1d0 [ 1157.214060][ T1046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1157.214095][ T1046] ? xskq_create+0xfb/0x1d0 [ 1157.214121][ T1046] vmalloc_user_noprof+0x9e/0xe0 [ 1157.214148][ T1046] ? xskq_create+0xfb/0x1d0 [ 1157.214176][ T1046] xskq_create+0xfb/0x1d0 [ 1157.214206][ T1046] xsk_setsockopt+0x74e/0x9a0 [ 1157.214234][ T1046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1157.214260][ T1046] ? find_held_lock+0x2b/0x80 [ 1157.214286][ T1046] ? selinux_socket_setsockopt+0x6a/0x80 [ 1157.214312][ T1046] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1157.214340][ T1046] do_sock_setsockopt+0xf3/0x1d0 [ 1157.214366][ T1046] __sys_setsockopt+0x1a0/0x230 [ 1157.214401][ T1046] __x64_sys_setsockopt+0xbd/0x160 [ 1157.214429][ T1046] ? do_syscall_64+0x91/0x4c0 [ 1157.214449][ T1046] ? lockdep_hardirqs_on+0x7c/0x110 [ 1157.214468][ T1046] do_syscall_64+0xcd/0x4c0 [ 1157.214489][ T1046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.214509][ T1046] RIP: 0033:0x7fc01658ebe9 [ 1157.214531][ T1046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.214550][ T1046] RSP: 002b:00007fc0173df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1157.214569][ T1046] RAX: ffffffffffffffda RBX: 00007fc0167b6090 RCX: 00007fc01658ebe9 [ 1157.214582][ T1046] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1157.214594][ T1046] RBP: 00007fc016611e19 R08: 0000000000000004 R09: 0000000000000000 [ 1157.214606][ T1046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.214618][ T1046] R13: 00007fc0167b6128 R14: 00007fc0167b6090 R15: 00007ffe610749f8 [ 1157.214646][ T1046] [ 1157.214699][ T1046] Mem-Info: [ 1157.224285][ T1035] batman_adv: batadv0: Adding interface: macvlan10 [ 1157.503422][ T1046] active_anon:3784 inactive_anon:0 isolated_anon:0 [ 1157.503422][ T1046] active_file:10870 inactive_file:51116 isolated_file:0 [ 1157.503422][ T1046] unevictable:768 dirty:255 writeback:0 [ 1157.503422][ T1046] slab_reclaimable:9237 slab_unreclaimable:107497 [ 1157.503422][ T1046] mapped:31268 shmem:1390 pagetables:972 [ 1157.503422][ T1046] sec_pagetables:0 bounce:0 [ 1157.503422][ T1046] kernel_misc_reclaimable:0 [ 1157.503422][ T1046] free:1285162 free_pcp:21686 free_cma:0 [ 1157.548656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.554716][ T1046] Node 0 active_anon:15136kB inactive_anon:0kB active_file:43480kB inactive_file:204260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125072kB dirty:1020kB writeback:0kB shmem:4024kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11756kB pagetables:3732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1157.586523][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.593115][ T1046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1157.622912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.629719][ T1046] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1157.658549][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.664590][ T1046] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1157.670557][ T1046] Node 0 DMA32 free:1241344kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15112kB inactive_anon:0kB active_file:43480kB inactive_file:202940kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2539408kB mlocked:0kB bounce:0kB free_pcp:63124kB local_pcp:22772kB free_cma:0kB [ 1157.702931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.709237][ T1046] lowmem_reserve[]: 0 0 1 1 1 [ 1157.714415][ T1046] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 1157.743462][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.749558][ T1046] lowmem_reserve[]: 0 0 0 0 0 [ 1157.754424][ T1046] Node 1 Normal free:3883936kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23584kB local_pcp:7744kB free_cma:0kB [ 1157.785575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1157.792404][ T1046] lowmem_reserve[]: 0 0 0 0 0 [ 1157.797135][ T1046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1157.810282][ T1046] Node 0 DMA32: 1457*4kB (UME) 153*8kB (UME) 416*16kB (UME) 475*32kB (UME) 151*64kB (UME) 129*128kB (UME) 110*256kB (UME) 48*512kB (UME) 25*1024kB (UME) 9*2048kB (UM) 266*4096kB (M) = 1241388kB [ 1157.829879][ T1046] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1157.842347][ T1046] Node 1 Normal: 196*4kB (UME) 54*8kB (UME) 48*16kB (UME) 231*32kB (UME) 102*64kB (UME) 19*128kB (UME) 6*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 941*4096kB (M) = 3883936kB [ 1157.861213][ T1046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.870778][ T1046] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1157.880094][ T1046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1157.889950][ T1046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1157.899487][ T1046] 63374 total pagecache pages [ 1157.904244][ T1046] 0 pages in swap cache [ 1157.908390][ T1046] Free swap = 124996kB [ 1157.912616][ T1046] Total swap = 124996kB [ 1157.916796][ T1046] 2097051 pages RAM [ 1157.920693][ T1046] 0 pages HighMem/MovableOnly [ 1157.925371][ T1046] 430237 pages reserved [ 1157.929537][ T1046] 0 pages cma reserved [ 1157.976539][ T1035] batman_adv: batadv0: The MTU of interface macvlan10 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.001975][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.017860][ T30] audit: type=1400 audit(1754804109.834:2460): avc: denied { ioctl } for pid=1038 comm="syz.3.6387" path="socket:[106110]" dev="sockfs" ino=106110 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1158.063482][ T30] audit: type=1400 audit(1754804109.844:2461): avc: denied { read write } for pid=1038 comm="syz.3.6387" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1158.087684][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.109402][ T1035] batman_adv: batadv0: Interface activated: macvlan10 [ 1158.148473][ T30] audit: type=1400 audit(1754804109.844:2462): avc: denied { open } for pid=1038 comm="syz.3.6387" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1158.173564][ C1] vkms_vblank_simulate: vblank timer overrun [ 1158.330856][ T1061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6388'. [ 1158.568564][ T1071] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6388'. [ 1159.380053][ T1061] nvme_fabrics: missing parameter 'transport=%s' [ 1159.388889][ T1061] nvme_fabrics: missing parameter 'nqn=%s' [ 1159.463978][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1159.463994][ T30] audit: type=1400 audit(1754804111.804:2466): avc: denied { bind } for pid=1066 comm="syz.3.6392" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1159.781483][ T1089] overlayfs: invalid redirect ((null)) [ 1159.793981][ T30] audit: type=1400 audit(1754804111.804:2467): avc: denied { name_bind } for pid=1066 comm="syz.3.6392" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1159.879737][ T30] audit: type=1400 audit(1754804111.804:2468): avc: denied { node_bind } for pid=1066 comm="syz.3.6392" saddr=100.1.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1159.901974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1159.911704][ T1093] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1159.950349][ T30] audit: type=1400 audit(1754804112.104:2469): avc: denied { setopt } for pid=1088 comm="syz.7.6397" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1160.115171][ T30] audit: type=1400 audit(1754804112.104:2470): avc: denied { append } for pid=1088 comm="syz.7.6397" name="nbd7" dev="devtmpfs" ino=686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1160.138731][ C1] vkms_vblank_simulate: vblank timer overrun [ 1160.606409][ T30] audit: type=1400 audit(1754804112.114:2471): avc: denied { unlink } for pid=1088 comm="syz.7.6397" name="#4c" dev="tmpfs" ino=2184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1160.628958][ T30] audit: type=1400 audit(1754804112.364:2472): avc: denied { mount } for pid=1099 comm="syz.7.6401" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1160.711572][ T30] audit: type=1400 audit(1754804112.504:2473): avc: denied { write } for pid=1095 comm="syz.6.6400" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1160.969332][ T30] audit: type=1400 audit(1754804113.304:2474): avc: denied { set_context_mgr } for pid=1115 comm="syz.3.6404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1161.107943][ T30] audit: type=1400 audit(1754804113.304:2475): avc: denied { map } for pid=1115 comm="syz.3.6404" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1162.112821][ T1132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1162.310903][ T1142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6411'. [ 1162.321655][ T1142] netlink: 'syz.1.6411': attribute type 1 has an invalid length. [ 1162.329390][ T1142] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6411'. [ 1162.580380][T16272] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1162.810836][T16272] usb 4-1: Using ep0 maxpacket: 16 [ 1162.824357][T16272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.048379][T16272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1163.067995][T16272] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1163.100471][T16272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.144662][T16272] usb 4-1: config 0 descriptor?? [ 1163.776764][ T1141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.832305][ T1141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.878859][T16272] nintendo 0003:057E:2019.000A: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 1164.610476][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1164.610506][ T30] audit: type=1400 audit(1754804116.934:2478): avc: denied { ioctl } for pid=1200 comm="syz.6.6419" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1165.151830][ T1207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.191766][ T1207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.292633][ T30] audit: type=1400 audit(1754804117.624:2479): avc: denied { mounton } for pid=1209 comm="syz.7.6420" path="/417/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1165.343505][T16272] nintendo 0003:057E:2019.000A: Failed to get joycon info; ret=-71 [ 1165.369332][ T1221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1165.387195][T16272] nintendo 0003:057E:2019.000A: Failed to retrieve controller info; ret=-71 [ 1165.418374][T16272] nintendo 0003:057E:2019.000A: Failed to initialize controller; ret=-71 [ 1165.498235][ T30] audit: type=1400 audit(1754804117.834:2480): avc: denied { create } for pid=1237 comm="syz.6.6424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1165.639763][T16272] nintendo 0003:057E:2019.000A: probe - fail = -71 [ 1165.666231][T16272] nintendo 0003:057E:2019.000A: probe with driver nintendo failed with error -71 [ 1165.742073][T16272] usb 4-1: USB disconnect, device number 58 [ 1166.954616][ T30] audit: type=1400 audit(1754804119.284:2481): avc: denied { write } for pid=1259 comm="syz.4.6428" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1167.994642][ T30] audit: type=1400 audit(1754804120.334:2482): avc: denied { map } for pid=1237 comm="syz.6.6424" path="socket:[106439]" dev="sockfs" ino=106439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1168.415019][ T30] audit: type=1400 audit(1754804120.334:2483): avc: denied { read accept } for pid=1237 comm="syz.6.6424" path="socket:[106439]" dev="sockfs" ino=106439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1169.252824][ T1289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1169.600143][ T30] audit: type=1326 audit(1754804121.824:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1294 comm="syz.3.6435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1169.937212][ T30] audit: type=1400 audit(1754804122.274:2485): avc: denied { write } for pid=1304 comm="syz.4.6432" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1170.001997][ T1305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6432'. [ 1170.280605][ T1309] fuse: Bad value for 'group_id' [ 1170.288578][ T1309] fuse: Bad value for 'group_id' [ 1170.412657][ T30] audit: type=1400 audit(1754804122.754:2486): avc: denied { create } for pid=1319 comm="syz.3.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1170.630305][ T30] audit: type=1400 audit(1754804122.784:2487): avc: denied { read } for pid=1319 comm="syz.3.6442" path="socket:[106485]" dev="sockfs" ino=106485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1170.816158][ T30] audit: type=1400 audit(1754804122.784:2488): avc: denied { connect } for pid=1319 comm="syz.3.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1170.926722][ T30] audit: type=1400 audit(1754804122.844:2489): avc: denied { read } for pid=1319 comm="syz.3.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1170.964135][ T30] audit: type=1400 audit(1754804122.844:2490): avc: denied { write } for pid=1319 comm="syz.3.6442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1171.085561][ T5955] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1171.240376][ T5955] usb 7-1: Using ep0 maxpacket: 16 [ 1171.262674][ T5955] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.276661][ T5955] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1171.300239][ T5955] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.321195][ T5955] usb 7-1: config 0 descriptor?? [ 1171.507609][ T1348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1171.747522][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.761236][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.785454][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.800391][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.810502][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.817541][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.826314][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.833322][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.840684][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.847542][ T5955] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 1171.874052][ T5955] kye 0003:0458:0087.000B: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0 [ 1171.961774][ T30] audit: type=1400 audit(1754804124.304:2491): avc: denied { create } for pid=1330 comm="syz.6.6444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1171.983446][ T5955] usb 7-1: USB disconnect, device number 20 [ 1172.180509][ T1369] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1173.280861][ T1392] FAULT_INJECTION: forcing a failure. [ 1173.280861][ T1392] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.339195][ T1392] CPU: 1 UID: 0 PID: 1392 Comm: syz.1.6452 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1173.339212][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1173.339218][ T1392] Call Trace: [ 1173.339222][ T1392] [ 1173.339227][ T1392] dump_stack_lvl+0x16c/0x1f0 [ 1173.339242][ T1392] should_fail_ex+0x512/0x640 [ 1173.339254][ T1392] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1173.339267][ T1392] should_failslab+0xc2/0x120 [ 1173.339280][ T1392] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1173.339291][ T1392] ? getname_flags.part.0+0x4c/0x550 [ 1173.339309][ T1392] getname_flags.part.0+0x4c/0x550 [ 1173.339326][ T1392] getname_flags+0x93/0xf0 [ 1173.339336][ T1392] __x64_sys_link+0x58/0xa0 [ 1173.339350][ T1392] do_syscall_64+0xcd/0x4c0 [ 1173.339362][ T1392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.339373][ T1392] RIP: 0033:0x7f317f78ebe9 [ 1173.339382][ T1392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.339393][ T1392] RSP: 002b:00007f317d9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 1173.339403][ T1392] RAX: ffffffffffffffda RBX: 00007f317f9b6090 RCX: 00007f317f78ebe9 [ 1173.339410][ T1392] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280 [ 1173.339417][ T1392] RBP: 00007f317d9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.339428][ T1392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.339434][ T1392] R13: 00007f317f9b6128 R14: 00007f317f9b6090 R15: 00007ffd2d89b1f8 [ 1173.339447][ T1392] [ 1173.959909][ T30] audit: type=1326 audit(1754804126.234:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1397 comm="syz.1.6454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f317f78ebe9 code=0x0 [ 1176.699089][ T975] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1176.806700][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.813195][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1176.900294][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 1176.910719][ T975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.927282][ T975] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1176.937698][ T975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.034691][ T975] usb 5-1: config 0 descriptor?? [ 1177.046896][ T30] audit: type=1400 audit(1754804129.384:2493): avc: denied { getopt } for pid=1455 comm="syz.1.6465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1177.131790][T16078] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1177.378636][ T30] audit: type=1400 audit(1754804129.414:2494): avc: denied { ioctl } for pid=1455 comm="syz.1.6465" path="socket:[108624]" dev="sockfs" ino=108624 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1177.538609][T16078] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1177.547746][T16078] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1177.564058][T16078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.586966][ T975] hid_parser_main: 145 callbacks suppressed [ 1177.586982][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.629451][T16078] usb 4-1: Product: syz [ 1177.629825][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.639534][T16078] usb 4-1: Manufacturer: syz [ 1177.660449][T16078] usb 4-1: SerialNumber: syz [ 1177.675032][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.783259][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.815655][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.827771][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.848010][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.867463][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.876204][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.887286][ T975] kye 0003:0458:0087.000C: unknown main item tag 0x0 [ 1177.917020][ T975] kye 0003:0458:0087.000C: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.4-1/input0 [ 1177.974826][ T975] usb 5-1: USB disconnect, device number 45 [ 1178.246303][T16078] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1178.932932][ T1506] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1179.854105][ T1518] batman_adv: batadv0: Adding interface: macvlan3 [ 1179.860879][ T1518] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1180.024852][ T30] audit: type=1326 audit(1754804132.254:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.6.6473" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4f6b78ebe9 code=0x0 [ 1180.049092][ T1518] batman_adv: batadv0: Interface activated: macvlan3 [ 1180.320617][ T5899] usb 4-1: USB disconnect, device number 59 [ 1180.333384][ T5899] usblp0: removed [ 1180.581675][ T1544] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1183.960264][T16078] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1184.110464][T16078] usb 7-1: Using ep0 maxpacket: 16 [ 1184.121829][T16078] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1184.136580][T16078] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1184.153092][T16078] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1184.169690][T16078] usb 7-1: config 0 descriptor?? [ 1184.323321][ T1608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6484'. [ 1184.585335][ T30] audit: type=1400 audit(1754804136.914:2496): avc: denied { read } for pid=1607 comm="syz.3.6484" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1184.608481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.833141][T16078] hid_parser_main: 145 callbacks suppressed [ 1184.833157][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.845839][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.860135][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.869111][ T30] audit: type=1400 audit(1754804136.924:2497): avc: denied { open } for pid=1607 comm="syz.3.6484" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1184.892667][ C0] vkms_vblank_simulate: vblank timer overrun [ 1184.901156][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.910174][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.922835][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.931846][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.938942][ T30] audit: type=1400 audit(1754804136.984:2498): avc: denied { ioctl } for pid=1607 comm="syz.3.6484" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1184.971823][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1184.978558][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1185.077564][T16078] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 1185.086437][T16078] kye 0003:0458:0087.000D: hidraw0: USB HID v0.09 Device [HID 0458:0087] on usb-dummy_hcd.6-1/input0 [ 1185.099946][T16078] usb 7-1: USB disconnect, device number 21 [ 1185.673683][ T1627] batman_adv: batadv0: Adding interface: macvlan3 [ 1185.686391][ T1627] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.722948][ T1627] batman_adv: batadv0: Interface activated: macvlan3 [ 1186.195881][ T30] audit: type=1326 audit(1754804138.474:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1648 comm="syz.1.6488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f317f78ebe9 code=0x0 [ 1186.312752][ T1655] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6489'. [ 1187.803600][ T1668] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6492'. [ 1188.124539][ T30] audit: type=1400 audit(1754804140.134:2500): avc: denied { setopt } for pid=1662 comm="syz.7.6492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1190.218391][ T1688] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6497'. [ 1191.639546][ T1730] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6501'. [ 1191.865990][ T30] audit: type=1400 audit(1754804144.204:2501): avc: denied { ioctl } for pid=1723 comm="syz.6.6501" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1191.899042][ T1737] input: syz1 as /devices/virtual/input/input33 [ 1191.971062][ T30] audit: type=1400 audit(1754804144.304:2502): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=3318 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1191.996276][ T30] audit: type=1400 audit(1754804144.304:2503): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3318 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1192.022392][ T30] audit: type=1400 audit(1754804144.314:2504): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3318 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1192.135198][ T1735] batman_adv: batadv0: Adding interface: macvlan4 [ 1192.156376][ T1735] batman_adv: batadv0: The MTU of interface macvlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.191237][ T1735] batman_adv: batadv0: Interface activated: macvlan4 [ 1192.270351][T22620] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1192.417507][ T1751] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1192.849077][ T1775] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1193.999876][T22620] usb 7-1: Using ep0 maxpacket: 16 [ 1194.099170][ T1787] tipc: Enabling of bearer rejected, already enabled [ 1194.108015][ T1787] tipc: Enabling of bearer rejected, already enabled [ 1194.166979][T22620] usb 7-1: config 0 has an invalid interface number: 17 but max is 0 [ 1194.231414][T22620] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.280437][T22620] usb 7-1: config 0 has no interface number 0 [ 1194.330656][T22620] usb 7-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1194.363380][T22620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.424815][T22620] usb 7-1: Product: syz [ 1194.586133][T22620] usb 7-1: Manufacturer: syz [ 1194.600256][ T30] audit: type=1400 audit(1754804146.934:2505): avc: denied { mount } for pid=1792 comm="syz.3.6511" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1194.601030][ T1794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.630227][T22620] usb 7-1: SerialNumber: syz [ 1194.675301][T22620] usb 7-1: config 0 descriptor?? [ 1194.704255][ T1794] overlayfs: failed to clone lowerpath [ 1194.709986][ T30] audit: type=1400 audit(1754804147.044:2506): avc: denied { mounton } for pid=1792 comm="syz.3.6511" path="/231/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1194.959719][ T30] audit: type=1400 audit(1754804147.294:2507): avc: denied { unmount } for pid=26915 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1195.109650][T22620] usb 7-1: can't set config #0, error -71 [ 1195.144185][ T1808] tipc: Enabling of bearer rejected, already enabled [ 1195.158029][ T1808] tipc: Enabling of bearer rejected, already enabled [ 1195.158614][T22620] usb 7-1: USB disconnect, device number 22 [ 1195.272108][ T30] audit: type=1400 audit(1754804147.614:2508): avc: denied { write } for pid=1807 comm="syz.3.6512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1195.565531][ T1827] batman_adv: batadv0: Adding interface: macvlan5 [ 1195.574417][ T1827] batman_adv: batadv0: The MTU of interface macvlan5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.606199][ T1827] batman_adv: batadv0: Interface activated: macvlan5 [ 1195.770397][ T1838] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1197.335929][ T30] audit: type=1400 audit(1754804149.674:2509): avc: denied { create } for pid=1847 comm="syz.3.6519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1197.369185][ T30] audit: type=1400 audit(1754804149.674:2510): avc: denied { read } for pid=1847 comm="syz.3.6519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1198.150585][ T1853] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1198.331323][ T1873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1199.697537][ T1891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1200.504067][ T1900] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1201.735011][ T30] audit: type=1326 audit(1754804154.014:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1917 comm="syz.3.6534" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc01658ebe9 code=0x0 [ 1202.595939][ T5955] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1202.735864][ T30] audit: type=1400 audit(1754804155.074:2512): avc: denied { create } for pid=1935 comm="syz.1.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1202.820301][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 1202.891901][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.921259][ T5955] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1203.348188][ T5955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.354232][ T1943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1203.377511][ T5955] usb 5-1: config 0 descriptor?? [ 1205.910802][ T5955] usbhid 5-1:0.0: can't add hid device: -71 [ 1205.920055][ T5955] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1206.092453][ T5955] usb 5-1: USB disconnect, device number 46 [ 1207.076561][ T1977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1207.095659][ T30] audit: type=1400 audit(1754804159.404:2513): avc: denied { write } for pid=1964 comm="syz.1.6541" name="sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1207.242729][ T1977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6541'. [ 1207.726895][ T30] audit: type=1400 audit(1754804159.404:2514): avc: denied { open } for pid=1964 comm="syz.1.6541" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1207.770432][ T30] audit: type=1400 audit(1754804159.414:2515): avc: denied { ioctl } for pid=1964 comm="syz.1.6541" path="/dev/sg0" dev="devtmpfs" ino=753 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1207.807474][ T30] audit: type=1400 audit(1754804160.134:2516): avc: denied { execute } for pid=1964 comm="syz.1.6541" path="/518/file0" dev="tmpfs" ino=2794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1207.834108][ T30] audit: type=1800 audit(1754804160.134:2517): pid=1979 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.6541" name="file0" dev="tmpfs" ino=2794 res=0 errno=0 [ 1208.163453][ T1999] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6547'. [ 1208.164180][ T1995] tipc: Resetting bearer [ 1208.235988][ T2002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1208.567694][ T2009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1208.631555][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1208.639543][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1208.673262][ C0] ------------[ cut here ]------------ [ 1208.678798][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 1208.689147][ C0] WARNING: CPU: 0 PID: 1989 at net/mac80211/rate.c:398 __rate_control_send_low+0x661/0x780 [ 1208.699197][ C0] Modules linked in: [ 1208.703345][ C0] CPU: 0 UID: 0 PID: 1989 Comm: syz.3.6546 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1208.715033][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1208.725149][ C0] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 1208.731425][ C0] Code: a4 a0 d4 00 00 00 e8 8e af b2 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 a0 de 08 8d e8 10 4e 71 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 8d 07 19 f7 e9 fb fc ff [ 1208.751102][ C0] RSP: 0000:ffffc900145e7878 EFLAGS: 00010282 [ 1208.757169][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 1208.765157][ C0] RDX: ffff888057fca440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1208.773145][ C0] RBP: ffff8880791ce028 R08: 0000000000000001 R09: 0000000000000000 [ 1208.781136][ C0] R10: 0000000000000000 R11: fffffffffffeccc0 R12: 00000000ffffffff [ 1208.789115][ C0] R13: 0000000000000000 R14: 000000000000000c R15: ffff8880791ce030 [ 1208.797100][ C0] FS: 000055556f741500(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 1208.806057][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1208.812669][ C0] CR2: 0000200000040030 CR3: 0000000066be8000 CR4: 00000000003526f0 [ 1208.820656][ C0] DR0: 0000000000005000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1208.828627][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1208.836609][ C0] Call Trace: [ 1208.839877][ C0] [ 1208.842806][ C0] rate_control_send_low+0x29a/0x820 [ 1208.848094][ C0] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 1208.854164][ C0] rate_control_get_rate+0x1be/0x5e0 [ 1208.859443][ C0] ieee80211_beacon_get_finish+0x467/0x670 [ 1208.865264][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1208.871604][ C0] __ieee80211_beacon_get+0xc56/0x1e40 [ 1208.877055][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1208.882021][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 1208.887478][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1208.893551][ C0] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 1208.899109][ C0] __iterate_interfaces+0x2e5/0x650 [ 1208.904313][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1208.910385][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1208.916453][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1208.922258][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1208.929277][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 1208.934564][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1208.939757][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1208.945479][ C0] ? read_tsc+0x9/0x20 [ 1208.949546][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1208.954659][ C0] handle_softirqs+0x216/0x8e0 [ 1208.959418][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1208.964706][ C0] __irq_exit_rcu+0x109/0x170 [ 1208.969377][ C0] irq_exit_rcu+0x9/0x30 [ 1208.973616][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1208.979257][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1208.985247][ C0] RIP: 0033:0x7fc01646ebfe [ 1208.989652][ C0] Code: 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca 80 3d bd 91 34 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 <89> c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 [ 1209.009311][ C0] RSP: 002b:00007ffe61074a80 EFLAGS: 00000202 [ 1209.015384][ C0] RAX: 0000000000002826 RBX: 00007fc0172e5720 RCX: 000000000001dde3 [ 1209.023361][ C0] RDX: ffffffff8b95d622 RSI: ffffffff8b95d1cc RDI: 000000000000000c [ 1209.031359][ C0] RBP: ffffffff8b95d622 R08: 00007fc0167b6038 R09: 00007fc0167a2000 [ 1209.039329][ C0] R10: 00007fc015fff008 R11: 000000000000000c R12: 000000000000000c [ 1209.047306][ C0] R13: 0000000000000000 R14: ffffffff8b95d622 R15: 000000000001dde3 [ 1209.055290][ C0] ? schedule_timeout+0x252/0x290 [ 1209.060322][ C0] ? schedule_timeout+0x252/0x290 [ 1209.065347][ C0] ? schedule_timeout+0x252/0x290 [ 1209.070372][ C0] ? do_nanosleep+0x51c/0x570 [ 1209.075041][ C0] [ 1209.078049][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1209.085304][ C0] CPU: 0 UID: 0 PID: 1989 Comm: syz.3.6546 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1209.096898][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1209.106920][ C0] Call Trace: [ 1209.110170][ C0] [ 1209.113082][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1209.117644][ C0] vpanic+0x6e8/0x7a0 [ 1209.121601][ C0] ? __pfx_vpanic+0x10/0x10 [ 1209.126087][ C0] ? __rate_control_send_low+0x661/0x780 [ 1209.131687][ C0] panic+0xca/0xd0 [ 1209.135381][ C0] ? __pfx_panic+0x10/0x10 [ 1209.139773][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1209.144858][ C0] check_panic_on_warn+0xab/0xb0 [ 1209.149769][ C0] __warn+0xf6/0x3c0 [ 1209.153634][ C0] ? __rate_control_send_low+0x661/0x780 [ 1209.159234][ C0] report_bug+0x3c3/0x580 [ 1209.163538][ C0] ? __rate_control_send_low+0x661/0x780 [ 1209.169139][ C0] handle_bug+0x184/0x210 [ 1209.173438][ C0] exc_invalid_op+0x17/0x50 [ 1209.177909][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1209.182727][ C0] RIP: 0010:__rate_control_send_low+0x661/0x780 [ 1209.188935][ C0] Code: a4 a0 d4 00 00 00 e8 8e af b2 f6 44 8b 44 24 24 45 89 e9 89 d9 48 8b 74 24 08 44 89 e2 48 c7 c7 a0 de 08 8d e8 10 4e 71 f6 90 <0f> 0b 90 90 e9 26 fd ff ff 48 8b 3c 24 e8 8d 07 19 f7 e9 fb fc ff [ 1209.208523][ C0] RSP: 0000:ffffc900145e7878 EFLAGS: 00010282 [ 1209.214561][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a3358 [ 1209.222500][ C0] RDX: ffff888057fca440 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1209.230441][ C0] RBP: ffff8880791ce028 R08: 0000000000000001 R09: 0000000000000000 [ 1209.238381][ C0] R10: 0000000000000000 R11: fffffffffffeccc0 R12: 00000000ffffffff [ 1209.246318][ C0] R13: 0000000000000000 R14: 000000000000000c R15: ffff8880791ce030 [ 1209.254264][ C0] ? __warn_printk+0x198/0x350 [ 1209.259003][ C0] ? __warn_printk+0x1a5/0x350 [ 1209.263740][ C0] ? __rate_control_send_low+0x660/0x780 [ 1209.269343][ C0] rate_control_send_low+0x29a/0x820 [ 1209.274595][ C0] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 1209.280633][ C0] rate_control_get_rate+0x1be/0x5e0 [ 1209.285889][ C0] ieee80211_beacon_get_finish+0x467/0x670 [ 1209.291673][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 1209.297982][ C0] __ieee80211_beacon_get+0xc56/0x1e40 [ 1209.303412][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1209.308324][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 1209.313751][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 1209.319790][ C0] mac80211_hwsim_beacon_tx+0x4d9/0xa40 [ 1209.325312][ C0] __iterate_interfaces+0x2e5/0x650 [ 1209.330497][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1209.336538][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1209.342574][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1209.348346][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1209.355342][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 1209.360600][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1209.365770][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1209.371456][ C0] ? read_tsc+0x9/0x20 [ 1209.375501][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1209.380583][ C0] handle_softirqs+0x216/0x8e0 [ 1209.385324][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1209.390582][ C0] __irq_exit_rcu+0x109/0x170 [ 1209.395228][ C0] irq_exit_rcu+0x9/0x30 [ 1209.399439][ C0] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1209.405046][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1209.410998][ C0] RIP: 0033:0x7fc01646ebfe [ 1209.415391][ C0] Code: 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca 80 3d bd 91 34 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 <89> c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 [ 1209.434965][ C0] RSP: 002b:00007ffe61074a80 EFLAGS: 00000202 [ 1209.440999][ C0] RAX: 0000000000002826 RBX: 00007fc0172e5720 RCX: 000000000001dde3 [ 1209.448939][ C0] RDX: ffffffff8b95d622 RSI: ffffffff8b95d1cc RDI: 000000000000000c [ 1209.456876][ C0] RBP: ffffffff8b95d622 R08: 00007fc0167b6038 R09: 00007fc0167a2000 [ 1209.464816][ C0] R10: 00007fc015fff008 R11: 000000000000000c R12: 000000000000000c [ 1209.472756][ C0] R13: 0000000000000000 R14: ffffffff8b95d622 R15: 000000000001dde3 [ 1209.480707][ C0] ? schedule_timeout+0x252/0x290 [ 1209.485729][ C0] ? schedule_timeout+0x252/0x290 [ 1209.490739][ C0] ? schedule_timeout+0x252/0x290 [ 1209.495736][ C0] ? do_nanosleep+0x51c/0x570 [ 1209.500390][ C0] [ 1209.503568][ C0] Kernel Offset: disabled [ 1209.507868][ C0] Rebooting in 86400 seconds..