last executing test programs: 6m44.054816614s ago: executing program 3 (id=277): ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = syz_usb_connect$cdc_ncm(0x0, 0x94, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020e00102505a1070000000203010902820002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000c241b070005008e01050f05240103010724140200090006240700794008241c09000408000905810380040100000904010000020d00000904010102020d000009058202000200000009050302000200000000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xae}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f00003ae000/0x4000)=nil, 0x4000, 0x1) ioperm(0x0, 0x6, 0x2da3b9f3) set_mempolicy(0x1, &(0x7f0000000180)=0x6c0d05c5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6m38.489280986s ago: executing program 3 (id=287): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='mark_victim\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) pause() connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$unix(r2, &(0x7f00000002c0)="d73c4efefd5e67d740cd60ae762aca38c8ce81f6e78431a7e679aa15c00e04daf74776e5e1f73d717843b22b6db6d1483faadafb8d3c4b64eeda69fffa1023d0fd32bbe407e11b136f3a51b047591a7a5ec3b506061c00a7140641131f65f997f1ab35232f73c3cf57e9adb40cfc8d082f07158838866a4b20b30ae4a9c0273764a1dca20c65ac7c22dd29", 0x8b, 0x5, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x10, 0x4800003a, r5, 0x0) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) sendfile(r6, r6, 0x0, 0x7f03) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$inet(0x2, 0x1, 0x100) 6m36.950933726s ago: executing program 3 (id=291): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) 6m36.821294981s ago: executing program 3 (id=293): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="a18340000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000006700000008010e8004"], 0x130}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000a5aeb6a2ab02ce74a1e21c7fd0fe9b20e8b87f07744d51de92443c9558dc2037ea553136a03a4fdda9c614d69082e8353b7862f5e3765b469df021a52e3533984637f0cd70e9751858be57a5465f09a5348152fea9b1b88b702ecce4e5438d05b3ebdfa9c91d487f2368dc7de57d38a65d18d299ec045bd91e8bece368cb05b3ca5c05fe935c827fafeae8616e188c8b00bc7209b2b46d135ff00"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250100000008000100040000002c00048005000300010000000500038270de00000080000000000000050003008f00000005000300010000000800020002"], 0x50}}, 0x40c4) setns(0xffffffffffffffff, 0x2000000) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r6, 0x80047456, 0xfffffffffffeffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x4) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m36.703237651s ago: executing program 3 (id=294): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x0, 0x7f, 0xf8, 0xae, 0x4c}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x24f9, &(0x7f00000004c0)={0x0, 0xee6d, 0x10000, 0x1, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xffffffffffffe6d3}]}, @NFT_MSG_NEWSETELEM={0x13fc, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x13d0, 0x3, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "d34427993f71e75e5c8520390b3c4bec3d93640843f006d504fcc38b65fa5656e66183bac6ac7b0e2215c050c2037ab79dc475cc4a50"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}, {0x4}, {0x11c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x1198, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "ea81ae829d695fb1f01b62220a171e2e0759af6b9a86c46fc191db2e01a5b7505e75256f12d2d34f5d0efea26c70234318b1bc418c5487d7675bb96c924882804edf13679f457302577a4e72ecc6fd41e863f05b04e997420711e86fe27795b83cc2c731079acd897bdf26812370c1280cf2068d8e8c6c109bbb5d4bac86017da4a8e698d6e8c3849ad3c5762db15b25d9076ba6e8465a6552fff0a80d0d885421f51a13cc6cb2254c656985aa4dc6b14a64a6a5b6b42acbbcea092afef8278147ad9a70dfd6cc956cd8241495dce5fb7766c93e11d854dbf38b701e9dc5bf891df99a342c3af6af3daea4b14c"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x3f, 0x1, "2236b801684bb4e0ffb629ca847eeb235e3ec0d8d07764a730e1fe6cb3d79ba47c7e58144041c6521a738e442bfa97e826d1bb2767240bd60703c5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1458}, 0x1, 0x0, 0x0, 0x4}, 0x40010) keyctl$revoke(0x3, r2) 6m36.501571811s ago: executing program 3 (id=296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x5, 0x80, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pselect6(0x54, 0x0, &(0x7f0000000080)={0xb}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 6m36.265257033s ago: executing program 32 (id=296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x3, 0x5, 0x80, 0x0, 0x0, 0x2, 0x2, 0xfc, 0xfd, 0x12, 0xfe, 0x0, 0x0, 0x4, 0x3f, 0x0, 0x0, 0x0, 0x9, '\x00', 0x4, 0x8000000000002}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x34d3542e, 0xfffffffe, 0x80000}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) pselect6(0x54, 0x0, &(0x7f0000000080)={0xb}, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f022}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r6, 0x8b2a, &(0x7f0000000040)) 1m34.643691709s ago: executing program 4 (id=1414): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a6fec07001d0806000108000604"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xfdef, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m34.428630322s ago: executing program 4 (id=1418): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103080, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r5}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfe, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_OIF={0x8, 0x5, r5}]}, 0x34}}, 0x0) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) (async) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) (async) syz_open_dev$radio(0x0, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$inet_mptcp(0x2, 0x1, 0x106) 1m33.812580922s ago: executing program 4 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) munlockall() sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100001080000000004000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 1m32.897178665s ago: executing program 4 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x0, 0x7, 0xfffffff7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_generic(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)=ANY=[@ANYBLOB="140000003800014b99bd7004ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x98000, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) read$FUSE(r1, &(0x7f0000002700)={0x2020}, 0x2020) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) 1m31.843188482s ago: executing program 4 (id=1432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000040)={0x1, 0x80000000000006}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) (async, rerun: 64) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (rerun: 64) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r6, 0x400455c8, 0x1) (async) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) epoll_create1(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') (async, rerun: 64) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) (rerun: 64) fchdir(r7) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (rerun: 32) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1m30.941010549s ago: executing program 4 (id=1435): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) socket$netlink(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00'}) 1m30.62611907s ago: executing program 33 (id=1435): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) socket$netlink(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000000)={'dummy0\x00'}) 10.765984647s ago: executing program 5 (id=1727): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103ff0310fc43"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r5, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_socket_connect_nvme_tcp() socket$inet_sctp(0x2, 0x1, 0x84) close(r7) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d03"], 0x1c}], 0x1}, 0x0) r8 = getpid() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffff80}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x8000) ioprio_get$pid(0x1, r8) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 10.632017994s ago: executing program 2 (id=1728): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0x28}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x46, 0x4004, @fd_index=0x9, 0x2, 0x0, 0x6, 0x8, 0x1, {0x3}}) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) 9.324934666s ago: executing program 2 (id=1733): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x58dc, 0x80, 0x40000100}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000044) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x802}, 0x55) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r4, 0xb, 0x0, 0x0, 0xc2, 0xfd, 0x15c2, 0x4, 0x801, 0x3, 0x8, 'syz0\x00'}) shutdown(r3, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[], 0x80}, 0x1, 0x7}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f00000024c0)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$user(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000500)="c97c3a905bdab3c12d5e5bb09363069e18db0a083ff2a8eff6bb4eb4301c7345c952b452772599895b87dbbdab00e5eadcdf07b3ab7d5969dae540f496b25c958aa391594aad29ea83d958775d7b8436654bed0f51103e7fe5df4c214a1d26238161abf8ac94ad675df24880728156bb0fd24eaa677eae46e70777c5804b158abf0a9a52d8c063d81d3c3170c74ef9e48c6ffa62507ad3429bf54532ec478ee3aa30c7813b1d7b0484416b6dcd31670b9811cfa31c79a1ee30747461b46b988445e8e07a1218076273d2bd0d540c5ce4692ae0763d3dd2761302665be941b44d6c993183c59078582c95253e99e4d228d13c", 0xf2, 0xfffffffffffffffd) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x6, 0x8}) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x6300) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(r9, r10, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 9.02999074s ago: executing program 2 (id=1735): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016400000000000005c00000000002816"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r5, 0x8, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0300ffff0000", 0x6}]) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}}, 0x200000d4) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="f4ffffff00000000"], 0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0xea100, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000001, 0x800000000, 0x3e, 0x0, 0x0, 0x2004cc, 0x5, 0x0, 0x0, 0xfffffffdfffffffc, 0xfffffffffffffffc, 0x0, 0x9, 0x9, 0x767], 0xeeef0000, 0xc0086}) ioctl$KVM_RUN(r8, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) 8.074200716s ago: executing program 6 (id=1738): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xf, "7f12ddc1517600"}) r1 = syz_open_pts(r0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000200)={0x2, 0x1, 0xb, 0x2, 0x145, &(0x7f0000000400)="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"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) ptrace$ARCH_SET_CPUID(0x1e, r4, 0x1, 0x1012) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r7}], 0x1, 0x0) ioctl$TCFLSH(r6, 0x5608, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) 7.706867065s ago: executing program 5 (id=1740): mq_open(0x0, 0x1, 0x100, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r5 = io_uring_setup(0x67bb, &(0x7f0000000280)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x9, 0x3, 0x3d8, 0x308, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x200, 0x240, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'dummy0\x00', {0x1f79, 0x5, 0x10, 0x1000, 0xffffffff, 0x2, 0x9, 0x10001, 0x80, 0x78}, {0x7}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x1, "343b9fbf4b60c64b6f2a023a5416e39f9c010cd3d6a8ba2afa174ac224a8"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r6, &(0x7f0000000180)={0x2c, 0x1, r9, 0x0, r7}, 0x10) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 7.28292602s ago: executing program 2 (id=1743): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x46, 0x4004, @fd_index=0x9, 0x2, 0x0, 0x6, 0x8, 0x1, {0x3}}) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) 7.168755458s ago: executing program 6 (id=1744): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount$bpf(0x0, 0x0, 0x0, 0x898, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000c3eb956cfe4911380c64ff47b83044e8", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x69}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, &(0x7f0000000600)) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='omfs\x00', 0x0, 0x0) 6.241623953s ago: executing program 6 (id=1745): open_by_handle_at(0xffffffffffffff9c, 0x0, 0x204600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept(r1, &(0x7f0000000240)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@getchain={0x0, 0x66, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0xa}, {0x9, 0xf}, {0x8, 0xfff3}}, [{0x0, 0xb, 0x4}, {0x0, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}, {"a38b77d83718a01347fa99a7d08a7d3e9490d3d7f04dd4399f99e6de17a588cf5805b7a1e7587e2cfdba8fd1913a64f09ca00255b4ee5e158c3beded6e0caec17805000000cf4a208a4ac9c02730d5856c9a888fc5faad58c9866863c54f45df4fddf75afc1af8e2"}}}}}, 0xb2) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x115c00, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000080)) 6.069255388s ago: executing program 5 (id=1746): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x5}, {0x30, 0x1, 0x80, 0xffeff034}, {0x6, 0x2, 0x4, 0x9}]}, 0x10) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYBLOB="faf417e6c52fd9976369f67ca52c1bd536c0fec47a56fa4e581ef331ec2ac3e40bd988357ec0071bb90ba1b5e0ce74"], 0x9ffc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendmsg$inet(r3, &(0x7f0000000700)={&(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x20000000) sendto$inet(r3, 0x0, 0x0, 0x24000840, 0x0, 0x0) 5.979198351s ago: executing program 0 (id=1747): r0 = socket$pptp(0x18, 0x1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r3, 0x0, 0x0, 0xe7c) socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$I2C(0x0, 0x0, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x6, &(0x7f0000000040)={0x19, "a8fd4950f88fdde3d44c1a0e35d7eda408000000639c19fe8c52041832352ed770"}}) stat(0x0, &(0x7f0000001c40)) setregid(0xffffffffffffffff, 0x0) epoll_create(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) syz_clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0x2c}, &(0x7f0000000200)=""/69, 0x45, &(0x7f0000000340)=""/247, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r1}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000480)) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000000000000000000011400060001000000010000000100000000ffffff140001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$netrom(0x6, 0x2, 0x0) 5.482696461s ago: executing program 2 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000080000007600400000000000270000000000000095020000000000006a1a10d8a92a1b2332a550d27f73ff914bd73686e7795c020fb5471f531917fef49e1fe30626df9bfb642f2997503a4f3e153ac65f46aab43a7a1801feb41581496d64aa1c7931eef2ceae24a0d3acb206c5f8a303bce093d2d6e97a69bf96"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 5.459483316s ago: executing program 2 (id=1752): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = fcntl$getown(r1, 0x9) sched_getscheduler(r2) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000332c00000400"/28], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x40, 0xfffff02c}, {0x6}]}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x40000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') r8 = open_tree(r7, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, 0x0, 0x244) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r9}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 5.324206795s ago: executing program 6 (id=1753): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x29) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r2, &(0x7f0000001fc0)=""/4079, 0xfef) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) fcntl$notify(r0, 0x402, 0x29) (async) socket$inet(0x2, 0x2, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) (async) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') (async) getdents64(r2, &(0x7f0000001fc0)=""/4079, 0xfef) (async) 5.206936992s ago: executing program 6 (id=1754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x7, 0x6}, {0x0, 0x2}, {0x10, 0xfff2}}}, 0x24}, 0x1, 0xa6}, 0x40004) 5.130490934s ago: executing program 5 (id=1755): socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)) syz_usbip_server_init(0x4) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) timerfd_create(0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, r2) add_key$user(&(0x7f0000000540), 0x0, &(0x7f00000005c0)="79cf", 0x2, r2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)}], 0x1}}], 0x2, 0xc0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="c7215141e38118f8fcd2357b515fcf9fc976d4b9f0c7a67697fedf9d0dc8ac2cd5e6fc3d29e54db79f493e2acc5ed13bccc435cf1d131bce87f41be01c13fae85f171dc6e34e7286b09ca904809a7b146ce2a2a28547707536537fda38618af6aec1ef146ded3d039030125fc2389dc1da68533114f4da6e090ab293db7db8adb4dc967663ff66672d2c867cdc949a1b9df37a6aadaa430b9575074738c092303988e20d8242bcddb4d512303de2bc7bdafe33a9927f4f1125288c6f2e32508e730558feb64b8bb2db56b7ae9db620ed0b6756c5ae81833c1131b2c6c9", 0xdd, 0x10008091, 0x0, 0x0) 5.03367918s ago: executing program 0 (id=1756): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0x280, 0x280, 0x0, 0x280, 0x218, 0x365, 0x350, 0x218, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'syzkaller1\x00', 'netpci0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0x0, 0x0, 0xff], [0x0, 0xffffffff], 'rose0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) sched_setscheduler(0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4048890}, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000240)={r6, r7, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r9}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.013894217s ago: executing program 0 (id=1759): open_by_handle_at(0xffffffffffffff9c, 0x0, 0x204600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB=' '], 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@getchain={0x0, 0x66, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xf}, {0x8, 0xfff3}}, [{0x0, 0xb, 0x4}, {0x0, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a38b77d83718a01347fa99a7d08a7d3e9490d3d7f04dd4399f99e6de17a588cf5805b7a1e7587e2cfdba8fd1913a64f09ca00255b4ee5e158c3beded6e0caec17805000000cf4a208a4ac9c02730d5856c9a888fc5faad58c9866863c54f45df4fddf75afc1af8e2"}}}}}, 0xb6) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x115c00, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000080)) 3.102185329s ago: executing program 0 (id=1761): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f0000000a40)="48b808000000000000000f23c80f21f8350c0080000f23f848b800000000008000000f23c80f21f8350c00b0000f23f88fa970913b66b8a8000f00d065420f070f5c6fd1b805000000b9a72800000f01c1470f01c9d166be0f84383a159b", 0x5e}], 0x1, 0x11, 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) r9 = dup(r8) bind$unix(r9, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x8, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, {[], @echo_reply={0x81, 0x0, 0x0, 0x200}}}}}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000e440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, r10, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000005e40)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293daa0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc9869801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8ebf21654c8cf44ea49103299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec20f59d370f3eff6b10e68a6c55feff6f52f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f5823", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x1, 0x9, 0x1, 0x800000004, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8001, 0x0, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r6, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x100000001, {0x0, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r12, 0x541b, &(0x7f0000000080)={0xffffffffffffffff, 0x2000, 0xffffffffffffffff, 0x8}) close_range(r13, 0xffffffffffffffff, 0x0) 2.753464645s ago: executing program 1 (id=1762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000080000007600400000000000270000000000000095020000000000006a1a10d8a92a1b2332a550d27f73ff914bd73686e7795c020fb5471f531917fef49e1fe30626df9bfb642f2997503a4f3e153ac65f46aab43a7a1801feb41581496d64aa1c7931eef2ceae24a0d3acb206c5f8a303bce093d2d6e97a69bf96"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 2.559970087s ago: executing program 1 (id=1763): setuid(0xee01) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xf29, 0x3}) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)='|', 0x1}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x0) recvfrom$inet(r4, &(0x7f0000000540)=""/234, 0xea, 0x40000182, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000cc0)={0x34, r6, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000000}, 0x41) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0x8, 0x4) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f0000002ddc7d00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000040)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9}) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x10}}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x21}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) 2.426891537s ago: executing program 1 (id=1764): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x4, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x2d, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cf, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1c, r6, 0xe929e2fb672a46f1, 0x70bd28, 0x25dedc04, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) syz_fuse_handle_req(r0, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x80000001, {{0x4000001, 0x0, 0x100000005, 0x6, 0x1805, 0x3, {0x0, 0xffffffffffffffff, 0x1137, 0xffff, 0x1, 0x1, 0x202, 0xfffffffc, 0x0, 0x8000, 0x5, 0xee00, r3, 0x80, 0x1}}, {0x0, 0xd}}}, 0x0, 0x0}) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) 2.315656039s ago: executing program 1 (id=1765): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0700000004000000200000000100000022000000", @ANYRES32, @ANYBLOB="1700000700000000f6ffffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x58, &(0x7f0000000100)={0x0, 0x0}}, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESDEC=r4, @ANYRESOCT=r3], 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) umount2(0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) 2.280941338s ago: executing program 0 (id=1766): r0 = socket$pptp(0x18, 0x1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r3, 0x0, 0x0, 0xe7c) socket$igmp(0x2, 0x3, 0x2) r4 = syz_open_dev$I2C(0x0, 0x0, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x6, &(0x7f0000000040)={0x19, "a8fd4950f88fdde3d44c1a0e35d7eda408000000639c19fe8c52041832352ed770"}}) stat(0x0, &(0x7f0000001c40)) setregid(0xffffffffffffffff, 0x0) epoll_create(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) syz_clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0x2c}, &(0x7f0000000200)=""/69, 0x45, &(0x7f0000000340)=""/247, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x4, {r1}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, &(0x7f0000000480)) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000000000000000000011400060001000000010000000100000000ffffff140001"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$netrom(0x6, 0x2, 0x0) 1.39484235s ago: executing program 1 (id=1767): modify_ldt$write(0x1, &(0x7f0000000280)={0x1005, 0x20001000}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x10008}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r8, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0x4e24, @empty}}}, &(0x7f00000000c0)=0x84) 1.108035706s ago: executing program 0 (id=1768): open_by_handle_at(0xffffffffffffff9c, 0x0, 0x204600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept(r1, &(0x7f0000000240)=@qipcrtr, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@getchain={0x0, 0x66, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x10, 0xa}, {0x9, 0xf}, {0x8, 0xfff3}}, [{0x0, 0xb, 0x4}, {0x0, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x7, "d58838068b"}]}}, {"a38b77d83718a01347fa99a7d08a7d3e9490d3d7f04dd4399f99e6de17a588cf5805b7a1e7587e2cfdba8fd1913a64f09ca00255b4ee5e158c3beded6e0caec17805000000cf4a208a4ac9c02730d5856c9a888fc5faad58c9866863c54f45df4fddf75afc1af8e2"}}}}}, 0xb2) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x115c00, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f0000000080)) 626.257994ms ago: executing program 6 (id=1769): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='hostfs\x00', 0x80040, &(0x7f0000000240)='\\-]\x06\\}\x00') r0 = socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9b}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02070c0702"], 0x10}}, 0x4400c030) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x24020400) syz_open_procfs$namespace(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x4}, {0x0, 0x0, 0x19}, 0x0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast2, 0x4d2, 0x32}, 0xa, @in6=@empty, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000006340)='\x00', 0x1}], 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e22, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5f}, {0xfffffffffffffffc, 0x0, 0x1}, {0x0, 0x0, 0x8865, 0x2}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x4, 0x3, 0x1, 0x0, 0xf000000}}, 0xe8) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaabdd8445144723dbcfeaad46ea2049da6d69fa4341232cedaa9ffffffffffff0800450000280000000000069078000000000000000000004e229480362391ff0c2fc91264292970e2d6f2365ffb2ba8b00b8ae5e3fba0df6b48356bc5f5dc30c85cad992c9b0d1bf0ff12a94c810d58271f58cbace8f856f63121c268203cadf14a1d041f875b4cb36a2df8f6aeffb963671b8a097da8e75b1b283bae0c3d55591012377d46cdf44fdc2bd51130975b2082409fe181d13ccbd36b2d106f236490120d5b0a0bf4268ebad7c3b15eddbad5b4e9b6e6d6", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) 120.507758ms ago: executing program 5 (id=1770): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80280, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/devices.allow\x00', 0x2, 0x11) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x2000000c}) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x8, 0x3, 0x1}, 0x8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000100)="240000001a005f0214f9df07000904000a000000fe000058dbef0fee76546bdea5727b99", 0x24) 120.27277ms ago: executing program 5 (id=1771): open_by_handle_at(0xffffffffffffff9c, 0x0, 0x204600) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB=' '], 0x16) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@getchain={0x0, 0x66, 0x10, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xf}, {0x8, 0xfff3}}, [{0x0, 0xb, 0x4}, {0x0, 0xb, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a38b77d83718a01347fa99a7d08a7d3e9490d3d7f04dd4399f99e6de17a588cf5805b7a1e7587e2cfdba8fd1913a64f09ca00255b4ee5e158c3beded6e0caec17805000000cf4a208a4ac9c02730d5856c9a888fc5faad58c9866863c54f45df4fddf75afc1af8e2"}}}}}, 0xb6) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x115c00, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000080)) 0s ago: executing program 1 (id=1772): r0 = socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r3 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x46, 0x4004, @fd_index=0x9, 0x2, 0x0, 0x6, 0x8, 0x1, {0x3}}) fsopen(&(0x7f0000000000)='ocfs2\x00', 0x1) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_enter(r3, 0x351e, 0x483, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000400)=0x7) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8e1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r7}, 0x10) kernel console output (not intermixed with test programs): 385.541996][ T10] usb 6-1: can't read configurations, error -71 [ 385.557916][ T8001] vhci_hcd: disconnect device [ 385.880157][ T7620] Bluetooth: Error in BCSP hdr checksum [ 386.982421][ T30] audit: type=1400 audit(1750594201.669:4583): avc: denied { create } for pid=10499 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 387.552056][ T48] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 387.623153][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 387.642253][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 387.912012][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 387.918806][ T48] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 387.932025][ T48] usb 3-1: config 1 has no interface number 1 [ 387.938988][ T48] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 387.952836][ T48] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 387.965859][ T48] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.975128][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.984441][ T48] usb 3-1: Product: syz [ 387.988850][ T48] usb 3-1: Manufacturer: syz [ 387.997098][ T48] usb 3-1: SerialNumber: syz [ 389.092124][T10530] vhci_hcd vhci_hcd.0: port 0 already used [ 389.453412][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 390.135107][ T48] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 390.211603][ T48] usb 3-1: USB disconnect, device number 33 [ 390.288961][ T5959] vhci_hcd: vhci_device speed not set [ 391.445193][T10537] futex_wake_op: syz.4.1167 tries to shift op by -1; fix this program [ 391.809207][T10558] overlayfs: failed to clone upperpath [ 392.146470][ T30] audit: type=1400 audit(1750594206.839:4584): avc: denied { read } for pid=10560 comm="syz.5.1173" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.170343][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.200172][ T30] audit: type=1400 audit(1750594206.879:4585): avc: denied { open } for pid=10560 comm="syz.5.1173" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 392.224419][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.350543][ T30] audit: type=1400 audit(1750594206.879:4586): avc: denied { ioctl } for pid=10560 comm="syz.5.1173" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 396.272116][ T5944] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 396.586775][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 396.693170][ T5944] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 396.729236][ T5944] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 396.764791][ T5944] usb 3-1: Product: syz [ 396.919928][ T5944] usb 3-1: Manufacturer: syz [ 396.931959][ T5944] usb 3-1: SerialNumber: syz [ 396.938735][ T5944] usb 3-1: config 0 descriptor?? [ 396.954528][ T5944] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 398.478247][ T5944] gspca_zc3xx: reg_r err -110 [ 398.502108][ T5944] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 398.571302][ T10] usb 3-1: USB disconnect, device number 34 [ 398.719311][T10629] 9pnet_fd: Insufficient options for proto=fd [ 398.822318][ T5826] Bluetooth: hci5: command 0x1003 tx timeout [ 398.977829][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 399.235418][ T5959] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 399.442051][ T5959] usb 3-1: Using ep0 maxpacket: 8 [ 399.709528][ T5959] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 399.735194][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.746509][ T5959] usb 3-1: Product: syz [ 399.819529][ T5959] usb 3-1: Manufacturer: syz [ 399.830113][ T5959] usb 3-1: SerialNumber: syz [ 399.844732][ T5959] usb 3-1: config 0 descriptor?? [ 399.867532][ T5959] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 402.092814][T10692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.182665][ T5944] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 402.332036][ T5944] usb 6-1: device descriptor read/64, error -71 [ 402.582303][ T5944] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 402.722377][ T5944] usb 6-1: device descriptor read/64, error -71 [ 402.826508][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1191'. [ 402.962397][ T5959] gspca_sonixj: reg_w1 err -110 [ 403.073334][ T5959] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 403.124627][ T5944] usb usb6-port1: attempt power cycle [ 403.376128][T10706] new mount options do not match the existing superblock, will be ignored [ 403.573002][ T5944] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 403.625557][ T5944] usb 6-1: device descriptor read/8, error -71 [ 403.687090][ T5823] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 404.031995][ T5944] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 404.391082][ T5855] usb 3-1: USB disconnect, device number 35 [ 404.412413][ T5944] usb 6-1: device descriptor read/8, error -71 [ 404.558712][ T5944] usb usb6-port1: unable to enumerate USB device [ 405.671059][ T30] audit: type=1400 audit(1750594220.359:4587): avc: denied { map } for pid=10737 comm="syz.0.1218" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 405.752414][ T30] audit: type=1400 audit(1750594220.359:4588): avc: denied { execute } for pid=10737 comm="syz.0.1218" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 406.062009][ T5959] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 406.092528][ T5944] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 406.232809][ T5959] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 406.253469][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.253494][ T5959] usb 1-1: Product: syz [ 406.253508][ T5959] usb 1-1: Manufacturer: syz [ 406.253520][ T5959] usb 1-1: SerialNumber: syz [ 406.256008][ T5959] usb 1-1: config 0 descriptor?? [ 406.288827][ T5959] ch341 1-1:0.0: ch341-uart converter detected [ 406.300864][ T5944] usb 6-1: not running at top speed; connect to a high speed hub [ 406.319296][ T5944] usb 6-1: too many configurations: 247, using maximum allowed: 8 [ 406.360873][ T5944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 406.360908][ T5944] usb 6-1: can't read configurations, error -61 [ 406.482180][ T5944] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 406.497723][ T5959] usb 1-1: failed to receive control message: -121 [ 406.556446][ T5959] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 406.719763][ T5855] usb 1-1: USB disconnect, device number 32 [ 406.755688][ T5855] ch341 1-1:0.0: device disconnected [ 406.822778][ T5823] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 406.835305][ T5944] usb 6-1: not running at top speed; connect to a high speed hub [ 406.877114][ T5944] usb 6-1: too many configurations: 247, using maximum allowed: 8 [ 407.660587][ T5944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 407.671949][ T5944] usb 6-1: can't read configurations, error -61 [ 407.685585][ T5944] usb usb6-port1: attempt power cycle [ 408.102045][ T48] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 408.182917][ T5855] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 408.241983][ T48] usb 3-1: device descriptor read/64, error -71 [ 408.248325][ T5944] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 408.294563][ T5944] usb 6-1: not running at top speed; connect to a high speed hub [ 408.307376][ T5944] usb 6-1: too many configurations: 247, using maximum allowed: 8 [ 408.325491][ T5944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 408.347618][ T5944] usb 6-1: can't read configurations, error -61 [ 408.425217][T10783] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 408.442761][ T5855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.453018][ T5855] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 408.477675][ T5855] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.497379][ T48] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 408.505341][ T5944] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 408.540048][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 408.551755][ T5855] usb 1-1: SerialNumber: syz [ 408.560270][ T5944] usb 6-1: not running at top speed; connect to a high speed hub [ 408.568396][ T5944] usb 6-1: too many configurations: 247, using maximum allowed: 8 [ 408.593583][ T5944] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 408.644633][ T5944] usb 6-1: can't read configurations, error -61 [ 408.652021][ T48] usb 3-1: device descriptor read/64, error -71 [ 408.792043][ T5944] usb usb6-port1: unable to enumerate USB device [ 408.825377][ T30] audit: type=1400 audit(1750594223.519:4589): avc: denied { sendto } for pid=10789 comm="syz.5.1232" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 409.155523][ T48] usb usb3-port1: attempt power cycle [ 409.296344][ T5855] usb 1-1: bad CDC descriptors [ 409.346355][ T5855] usb 1-1: USB disconnect, device number 33 [ 409.504788][ T48] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 409.582621][ T48] usb 3-1: device descriptor read/8, error -71 [ 416.110228][ T48] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 416.158592][ T48] usb 3-1: device descriptor read/8, error -71 [ 416.321041][ T48] usb usb3-port1: unable to enumerate USB device [ 416.528575][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 416.712110][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 416.771543][T10831] sock: sock_set_timeout: `syz.1.1242' (pid 10831) tries to set negative timeout [ 417.268689][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.288388][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.300035][ T10] usb 1-1: Product: syz [ 417.304731][ T10] usb 1-1: Manufacturer: syz [ 417.309997][ T10] usb 1-1: SerialNumber: syz [ 417.320774][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 417.336624][T10461] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 417.749495][ T10] usb 1-1: USB disconnect, device number 34 [ 418.119444][ T30] audit: type=1400 audit(1750594232.809:4590): avc: denied { getopt } for pid=10848 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 418.641114][T10461] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 418.678047][ T30] audit: type=1400 audit(1750594233.349:4591): avc: denied { write } for pid=10850 comm="syz.5.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 418.794471][T10461] ath9k_htc: Failed to initialize the device [ 418.864988][T10857] veth3: entered promiscuous mode [ 418.972026][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 418.992175][ T5862] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 419.354663][ T5862] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.367498][ T5862] usb 6-1: config 0 has no interface number 0 [ 419.391401][ T5862] usb 6-1: New USB device found, idVendor=2100, idProduct=9e53, bcdDevice= 3.9c [ 419.461747][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.521179][ T30] audit: type=1400 audit(1750594234.209:4592): avc: denied { connect } for pid=10870 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 419.548207][ T5862] usb 6-1: Product: syz [ 419.606259][ T5862] usb 6-1: Manufacturer: syz [ 419.659336][ T5862] usb 6-1: SerialNumber: syz [ 419.676601][ T30] audit: type=1400 audit(1750594234.209:4593): avc: denied { write } for pid=10870 comm="syz.4.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 419.708777][ T5862] usb 6-1: config 0 descriptor?? [ 419.872812][ T30] audit: type=1400 audit(1750594234.299:4594): avc: denied { write } for pid=10870 comm="syz.4.1252" path="socket:[28163]" dev="sockfs" ino=28163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 419.987723][ T5823] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 420.268946][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 421.199707][ T5862] ftdi_sio 6-1:0.55: FTDI USB Serial Device converter detected [ 421.230204][ T5862] ftdi_sio ttyUSB0: unknown device type: 0x39c [ 421.241471][ T5862] usb 6-1: USB disconnect, device number 29 [ 421.249510][ T5862] ftdi_sio 6-1:0.55: device disconnected [ 422.617564][T10909] input: syz0 as /devices/virtual/input/input26 [ 422.709796][T10913] capability: warning: `syz.4.1263' uses deprecated v2 capabilities in a way that may be insecure [ 422.873446][T10911] bridge_slave_0: left allmulticast mode [ 422.882658][T10911] bridge_slave_0: left promiscuous mode [ 422.888911][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.902600][ T5826] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 422.953362][T10911] bridge_slave_1: left allmulticast mode [ 422.960112][T10911] bridge_slave_1: left promiscuous mode [ 422.966333][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.978535][T10911] bond0: (slave bond_slave_0): Releasing backup interface [ 422.996463][T10911] bond0: (slave bond_slave_1): Releasing backup interface [ 423.479915][T10928] netlink: 'syz.5.1262': attribute type 10 has an invalid length. [ 423.550434][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1262'. [ 423.617151][T10911] team0: Port device team_slave_0 removed [ 423.711632][ T30] audit: type=1400 audit(1750594238.399:4595): avc: denied { getopt } for pid=10939 comm="syz.0.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 423.714541][T10911] team0: Port device team_slave_1 removed [ 423.747877][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.771839][T10911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.824745][T10911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.835967][T10911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.912262][T10947] overlayfs: overlapping lowerdir path [ 424.291742][T10924] team0: Mode changed to "loadbalance" [ 424.379004][T10928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.454942][T10928] team0: Port device bond0 added [ 425.132188][T10931] team0 (unregistering): Port device bond0 removed [ 429.019121][ T5944] Process accounting resumed [ 429.024150][ T30] audit: type=1400 audit(1750594243.689:4596): avc: denied { write } for pid=10990 comm="syz.4.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 430.019181][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 430.074510][ T30] audit: type=1400 audit(1750594244.769:4597): avc: denied { allowed } for pid=11008 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 430.262033][ T30] audit: type=1400 audit(1750594244.789:4598): avc: denied { setopt } for pid=11008 comm="syz.1.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 430.488298][ T30] audit: type=1400 audit(1750594244.909:4599): avc: denied { node_bind } for pid=10996 comm="syz.0.1281" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 431.166108][T11023] overlayfs: failed to resolve './file0': -2 [ 431.406045][ T30] audit: type=1400 audit(1750594246.089:4600): avc: denied { bind } for pid=10996 comm="syz.0.1281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 432.602453][T11041] netlink: 4332 bytes leftover after parsing attributes in process `syz.1.1290'. [ 432.611605][T11041] openvswitch: netlink: Flow key attr not present in new flow. [ 432.827047][T11049] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 432.854581][ T30] audit: type=1400 audit(1750594247.549:4601): avc: denied { getopt } for pid=11046 comm="syz.5.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 433.212093][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 434.394081][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 434.988045][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 435.002818][ T5826] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 435.014121][ T10] usb 3-1: config 6 has an invalid interface number: 253 but max is 0 [ 435.026685][ T10] usb 3-1: config 6 has no interface number 0 [ 435.035874][ T10] usb 3-1: config 6 interface 253 has no altsetting 0 [ 435.045038][ T10] usb 3-1: New USB device found, idVendor=0830, idProduct=0061, bcdDevice=23.a6 [ 435.058900][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.075237][ T10] usb 3-1: Product: syz [ 435.081745][ T10] usb 3-1: Manufacturer: syz [ 435.099734][ T10] usb 3-1: SerialNumber: syz [ 435.163578][ T30] audit: type=1400 audit(1750594249.859:4602): avc: denied { getopt } for pid=11083 comm="syz.4.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.203620][ T30] audit: type=1400 audit(1750594249.899:4603): avc: denied { bind } for pid=11085 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.227063][ T30] audit: type=1400 audit(1750594249.899:4604): avc: denied { listen } for pid=11085 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.309192][ T30] audit: type=1400 audit(1750594249.899:4605): avc: denied { read } for pid=11085 comm="syz.1.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 435.391964][ T5855] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 435.520407][ T10] usb 3-1: active config #6 != 1 ?? [ 435.540006][ T10] usb 3-1: USB disconnect, device number 40 [ 435.652015][ T5855] usb 1-1: Using ep0 maxpacket: 8 [ 435.672938][ T5855] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 436.367272][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.382329][ T5855] usb 1-1: Product: syz [ 436.386553][ T5855] usb 1-1: Manufacturer: syz [ 436.391178][ T5855] usb 1-1: SerialNumber: syz [ 436.447682][ T5855] usb 1-1: config 0 descriptor?? [ 436.728874][ T5855] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 437.592528][ T5944] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 437.712110][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1310'. [ 437.855268][ T5944] usb 3-1: config 0 has an invalid interface number: 168 but max is 0 [ 437.935963][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.950978][ T5944] usb 3-1: config 0 has no interface number 0 [ 437.960389][ T5944] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 437.976103][ T5944] usb 3-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 437.992079][ T5944] usb 3-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 438.007253][ T5826] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 438.019970][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.023087][ T5862] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 438.066824][ T5944] usb 3-1: config 0 descriptor?? [ 438.135310][ T5944] HFC-S_USB 3-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 438.226817][T11126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 438.902763][ T5855] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 438.917824][ T5862] usb 6-1: unable to get BOS descriptor or descriptor too short [ 438.926451][ T5862] usb 6-1: not running at top speed; connect to a high speed hub [ 438.937107][ T5862] usb 6-1: config 253 has an invalid interface number: 140 but max is 0 [ 438.937924][ T5855] usb 1-1: USB disconnect, device number 35 [ 438.951835][ T5862] usb 6-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 438.963203][ T5862] usb 6-1: config 253 has no interface number 0 [ 438.969675][ T5862] usb 6-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.986160][ T5862] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 438.995343][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.003558][ T5862] usb 6-1: Product: syz [ 439.007916][ T5862] usb 6-1: Manufacturer: syz [ 439.012752][ T5862] usb 6-1: SerialNumber: syz [ 439.170454][T11133] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1315'. [ 439.183817][ T5826] Bluetooth: hci3: unexpected event for opcode 0x0800 [ 439.241457][ T30] audit: type=1400 audit(1750594253.929:4606): avc: denied { name_connect } for pid=11134 comm="syz.4.1316" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 439.291634][T11115] delete_channel: no stack [ 439.302291][ T5862] usbtest 6-1:253.140: couldn't get endpoints, -22 [ 439.311051][ T5862] usbtest 6-1:253.140: probe with driver usbtest failed with error -22 [ 439.325314][ T5862] usb 6-1: USB disconnect, device number 30 [ 439.552447][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.572073][ T5855] usb 3-1: USB disconnect, device number 41 [ 440.631281][ T30] audit: type=1400 audit(1750594255.319:4607): avc: denied { read } for pid=11153 comm="syz.4.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.694685][T11158] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'. [ 441.511994][ T5862] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 441.693409][ T5862] usb 6-1: Using ep0 maxpacket: 8 [ 441.716967][ T5862] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 441.736422][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.754711][ T5862] usb 6-1: Product: syz [ 441.810859][ T5862] usb 6-1: Manufacturer: syz [ 441.829636][ T5862] usb 6-1: SerialNumber: syz [ 441.863046][ T5862] usb 6-1: config 0 descriptor?? [ 441.890121][T11180] trusted_key: encrypted_key: insufficient parameters specified [ 442.069572][T11182] FAULT_INJECTION: forcing a failure. [ 442.069572][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 442.082741][T11182] CPU: 1 UID: 0 PID: 11182 Comm: syz.2.1330 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 442.082764][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.082773][T11182] Call Trace: [ 442.082779][T11182] [ 442.082785][T11182] dump_stack_lvl+0x16c/0x1f0 [ 442.082814][T11182] should_fail_ex+0x512/0x640 [ 442.082836][T11182] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 442.082858][T11182] should_failslab+0xc2/0x120 [ 442.082881][T11182] __kmalloc_cache_noprof+0x6a/0x3e0 [ 442.082906][T11182] ? assoc_array_insert+0x10c/0x3970 [ 442.082937][T11182] assoc_array_insert+0x10c/0x3970 [ 442.082963][T11182] ? avc_has_perm_noaudit+0x117/0x3b0 [ 442.083002][T11182] ? __pfx_assoc_array_insert+0x10/0x10 [ 442.083031][T11182] ? down_write+0x14d/0x200 [ 442.083047][T11182] ? __pfx_down_write+0x10/0x10 [ 442.083060][T11182] ? __pfx_key_set_index_key+0x10/0x10 [ 442.083092][T11182] __key_link_begin+0xf5/0x260 [ 442.083110][T11182] __key_create_or_update+0x4e3/0xe10 [ 442.083138][T11182] ? __pfx___key_create_or_update+0x10/0x10 [ 442.083162][T11182] ? lookup_user_key+0x2ce/0x1300 [ 442.083200][T11182] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 442.083224][T11182] ? __pfx_keyring_search_iterator+0x10/0x10 [ 442.083254][T11182] key_create_or_update+0x42/0x60 [ 442.083282][T11182] __do_sys_add_key+0x298/0x470 [ 442.083300][T11182] ? __pfx___do_sys_add_key+0x10/0x10 [ 442.083315][T11182] ? ksys_write+0x1ac/0x250 [ 442.083348][T11182] do_syscall_64+0xcd/0x4c0 [ 442.083376][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.083393][T11182] RIP: 0033:0x7fc34bb8e929 [ 442.083406][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.083420][T11182] RSP: 002b:00007fc34c9cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 442.083437][T11182] RAX: ffffffffffffffda RBX: 00007fc34bdb5fa0 RCX: 00007fc34bb8e929 [ 442.083448][T11182] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 442.083457][T11182] RBP: 00007fc34c9cf090 R08: 000000003b99a746 R09: 0000000000000000 [ 442.083467][T11182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.083477][T11182] R13: 0000000000000000 R14: 00007fc34bdb5fa0 R15: 00007ffefb17e0e8 [ 442.083504][T11182] [ 442.387904][ T5862] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.762403][ T5944] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 442.945555][ T5944] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 442.967035][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.986347][ T5944] usb 1-1: config 0 has no interface number 0 [ 443.006579][ T5944] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 443.029840][ T5944] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 443.063886][ T5944] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 443.073309][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.090185][ T5944] usb 1-1: config 0 descriptor?? [ 443.104175][ T5944] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 443.224174][ T5826] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 443.234033][ T5826] Bluetooth: hci3: Injecting HCI hardware error event [ 443.245247][ T5826] Bluetooth: hci3: hardware error 0x00 [ 443.415817][ T5959] usb 1-1: USB disconnect, device number 36 [ 443.421997][ T8010] usb 1-1: Failed to submit usb control message: -71 [ 443.429075][ T8010] usb 1-1: unable to send the bmi data to the device: -71 [ 443.445579][ T8010] usb 1-1: unable to get target info from device [ 443.453594][ T8010] usb 1-1: could not get target info (-71) [ 443.460678][ T8010] usb 1-1: could not probe fw (-71) [ 443.925809][T11221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1342'. [ 444.210324][T11164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.220231][T11164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.239473][ T5862] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 444.253547][ T5862] usb 6-1: USB disconnect, device number 31 [ 444.551993][ T5944] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 444.703494][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.771966][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.789091][ T5944] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 444.801616][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.832434][ T5944] usb 1-1: config 0 descriptor?? [ 445.198071][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.312652][ T5826] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 445.395462][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.996357][T11227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.322621][ T5944] arvo 0003:1E7D:30D4.0006: collection stack underflow [ 447.338581][ T5944] arvo 0003:1E7D:30D4.0006: item 0 1 0 12 parsing failed [ 447.387849][T11227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.454794][ T5944] arvo 0003:1E7D:30D4.0006: parse failed [ 447.460524][ T5944] arvo 0003:1E7D:30D4.0006: probe with driver arvo failed with error -22 [ 447.684520][ T5944] usb 1-1: USB disconnect, device number 37 [ 448.312891][ T5944] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 448.702059][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 448.765972][ T5944] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 448.981948][ T5944] usb 1-1: config 0 has no interface number 0 [ 449.009371][ T5944] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 449.021286][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.036187][ T30] audit: type=1400 audit(1750594263.729:4608): avc: denied { sqpoll } for pid=11258 comm="syz.2.1355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 449.055711][ T5944] usb 1-1: Product: syz [ 449.055732][ T5944] usb 1-1: Manufacturer: syz [ 449.055746][ T5944] usb 1-1: SerialNumber: syz [ 449.073965][ T5944] usb 1-1: config 0 descriptor?? [ 449.232360][ T30] audit: type=1400 audit(1750594263.919:4609): avc: denied { nlmsg_write } for pid=11266 comm="syz.1.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 449.260601][T11268] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11268 comm=syz.1.1356 [ 449.289964][ T5944] radio-si470x 1-1:0.35: this is not a si470x device. [ 449.499027][ T5944] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 449.773162][ T5944] usb 1-1: USB disconnect, device number 38 [ 450.282499][T11289] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 450.550723][ T5959] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 450.987399][ T5959] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 451.444890][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.458458][ T5959] usb 3-1: config 0 descriptor?? [ 451.515416][T11299] 9pnet_fd: Insufficient options for proto=fd [ 451.904877][ T30] audit: type=1400 audit(1750594266.599:4610): avc: denied { create } for pid=11306 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 451.986210][ T30] audit: type=1400 audit(1750594266.679:4611): avc: denied { connect } for pid=11306 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 452.014428][ T5959] usbhid 3-1:0.0: can't add hid device: -71 [ 452.020438][ T5959] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 452.052035][ T5959] usb 3-1: USB disconnect, device number 42 [ 452.110814][ T30] audit: type=1400 audit(1750594266.699:4612): avc: denied { bind } for pid=11306 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 452.158174][ T30] audit: type=1400 audit(1750594266.699:4613): avc: denied { setopt } for pid=11306 comm="syz.0.1368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 452.177904][ C0] vkms_vblank_simulate: vblank timer overrun [ 452.410377][ T30] audit: type=1400 audit(1750594267.099:4614): avc: denied { write } for pid=11326 comm="syz.0.1372" lport=43755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 452.552216][ T30] audit: type=1400 audit(1750594267.099:4615): avc: denied { setopt } for pid=11326 comm="syz.0.1372" lport=43755 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 452.950451][T11344] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1377'. [ 452.973024][T11346] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 453.074281][T11348] bond1: (slave gretap1): making interface the new active one [ 453.097191][T11348] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 453.771723][ T5959] IPVS: starting estimator thread 0... [ 453.777400][ T5862] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 453.872152][T11364] IPVS: using max 57 ests per chain, 136800 per kthread [ 453.934720][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 453.955433][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.026320][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.052506][ T5862] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.061567][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.112978][ T5862] usb 1-1: config 0 descriptor?? [ 454.672509][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 455.015918][ T30] audit: type=1400 audit(1750594269.699:4616): avc: denied { load_policy } for pid=11392 comm="syz.2.1392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 455.073580][T11393] SELinux: failed to load policy [ 455.094821][T11393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11393 comm=syz.2.1392 [ 456.142034][ T30] audit: type=1400 audit(1750594270.769:4617): avc: denied { ioctl } for pid=11401 comm="syz.2.1394" path="socket:[30228]" dev="sockfs" ino=30228 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 456.517007][ T5862] usbhid 1-1:0.0: can't add hid device: -71 [ 456.524900][ T5862] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 456.582329][ T5862] usb 1-1: USB disconnect, device number 39 [ 456.854408][ T30] audit: type=1400 audit(1750594271.539:4618): avc: denied { unmount } for pid=7017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 456.944193][ T5826] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 456.954215][ T5826] CPU: 1 UID: 0 PID: 5826 Comm: kworker/u9:6 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 456.954242][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.954255][ T5826] Workqueue: hci4 hci_rx_work [ 456.954287][ T5826] Call Trace: [ 456.954292][ T5826] [ 456.954300][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 456.954329][ T5826] sysfs_warn_dup+0x7f/0xa0 [ 456.954353][ T5826] sysfs_create_dir_ns+0x24b/0x2b0 [ 456.954377][ T5826] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 456.954402][ T5826] ? find_held_lock+0x2b/0x80 [ 456.954427][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 456.954448][ T5826] kobject_add_internal+0x2c4/0x9b0 [ 456.954481][ T5826] kobject_add+0x16e/0x240 [ 456.954497][ T5826] ? __pfx_kobject_add+0x10/0x10 [ 456.954515][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 456.954534][ T5826] ? kobject_put+0xab/0x5a0 [ 456.954568][ T5826] device_add+0x288/0x1a70 [ 456.954597][ T5826] ? __pfx_dev_set_name+0x10/0x10 [ 456.954615][ T5826] ? __pfx_device_add+0x10/0x10 [ 456.954642][ T5826] ? mgmt_send_event_skb+0x2fb/0x460 [ 456.954683][ T5826] hci_conn_add_sysfs+0x17e/0x230 [ 456.954714][ T5826] le_conn_complete_evt+0x1075/0x1d70 [ 456.954749][ T5826] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 456.954773][ T5826] ? hci_event_packet+0x459/0x11c0 [ 456.954802][ T5826] hci_le_conn_complete_evt+0x23c/0x370 [ 456.954834][ T5826] hci_le_meta_evt+0x357/0x5e0 [ 456.954861][ T5826] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 456.954890][ T5826] hci_event_packet+0x682/0x11c0 [ 456.954915][ T5826] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 456.954944][ T5826] ? __pfx_hci_event_packet+0x10/0x10 [ 456.954972][ T5826] ? kcov_remote_start+0x3c9/0x6d0 [ 456.954992][ T5826] ? lockdep_hardirqs_on+0x7c/0x110 [ 456.955023][ T5826] hci_rx_work+0x2c5/0x16b0 [ 456.955050][ T5826] ? rcu_is_watching+0x12/0xc0 [ 456.955075][ T5826] process_one_work+0x9cc/0x1b70 [ 456.955105][ T5826] ? __pfx_process_one_work+0x10/0x10 [ 456.955132][ T5826] ? assign_work+0x1a0/0x250 [ 456.955163][ T5826] worker_thread+0x6c8/0xf10 [ 456.955194][ T5826] ? __pfx_worker_thread+0x10/0x10 [ 456.955211][ T5826] kthread+0x3c2/0x780 [ 456.955227][ T5826] ? __pfx_kthread+0x10/0x10 [ 456.955246][ T5826] ? rcu_is_watching+0x12/0xc0 [ 456.955266][ T5826] ? __pfx_kthread+0x10/0x10 [ 456.955282][ T5826] ret_from_fork+0x5d4/0x6f0 [ 456.955304][ T5826] ? __pfx_kthread+0x10/0x10 [ 456.955320][ T5826] ret_from_fork_asm+0x1a/0x30 [ 456.955352][ T5826] [ 456.955376][ T5826] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 457.218799][ T5826] Bluetooth: hci4: failed to register connection device [ 457.521979][ T30] audit: type=1400 audit(1750594272.189:4619): avc: denied { accept } for pid=11439 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 457.564021][T11440] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 457.642357][T11440] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 458.049894][T11454] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1406'. [ 458.116856][ T5826] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 460.380114][T11479] netlink: 'syz.2.1412': attribute type 11 has an invalid length. [ 461.247100][T11507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1422'. [ 461.257994][T11507] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1422'. [ 461.581919][T11513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1423'. [ 461.981929][ T5862] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 462.115189][T11519] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 462.163942][ T5862] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.185081][ T5862] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 462.196182][T11519] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 462.197725][T11519] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 462.214541][ T30] audit: type=1400 audit(1750594276.889:4620): avc: denied { firmware_load } for pid=11514 comm="syz.2.1424" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 462.235850][ T5862] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.255099][ T30] audit: type=1326 audit(1750594276.949:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11524 comm="syz.4.1427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fced9f8e929 code=0x0 [ 462.293712][ T5862] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 462.311592][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.397165][T11512] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 462.966363][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 462.972584][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 463.009919][T11537] ceph: No mds server is up or the cluster is laggy [ 463.399557][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 464.183991][ T8011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.211363][ T8011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.455768][ T30] audit: type=1400 audit(1750594279.149:4622): avc: denied { mount } for pid=11551 comm="syz.1.1437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 464.462495][ T5862] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 464.478116][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.480847][ T30] audit: type=1400 audit(1750594279.149:4623): avc: denied { search } for pid=11551 comm="syz.1.1437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.488695][ T8011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.532918][ T5862] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input27 [ 464.537331][ T30] audit: type=1400 audit(1750594279.229:4624): avc: denied { search } for pid=11551 comm="syz.1.1437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.556349][ T5862] usb 6-1: USB disconnect, device number 32 [ 464.563981][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 464.578757][ T8011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.601224][ T30] audit: type=1400 audit(1750594279.229:4625): avc: denied { search } for pid=11551 comm="syz.1.1437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.623084][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.669952][ T30] audit: type=1400 audit(1750594279.229:4626): avc: denied { search } for pid=11551 comm="syz.1.1437" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.691803][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.732697][ T30] audit: type=1400 audit(1750594279.229:4627): avc: denied { add_name } for pid=11551 comm="syz.1.1437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 464.800266][ T30] audit: type=1400 audit(1750594279.229:4628): avc: denied { create } for pid=11551 comm="syz.1.1437" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 465.200753][ T8011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.237739][ T8011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.374747][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 465.386016][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 465.395474][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 465.406823][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 465.414759][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 465.495971][ T8011] bridge0: port 3(netdevsim0) entered disabled state [ 465.717087][ T8011] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 466.782009][ T8011] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 466.791010][ T8011] bridge0: port 3(netdevsim0) entered disabled state [ 466.880440][ T8011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 466.927296][ T8011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.105778][ T5826] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 467.472118][ T5823] Bluetooth: hci3: command tx timeout [ 467.498642][ T8011] bridge_slave_1: left allmulticast mode [ 467.515723][ T8011] bridge_slave_1: left promiscuous mode [ 467.537096][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.565530][ T8011] bridge_slave_0: left allmulticast mode [ 467.583517][ T8011] bridge_slave_0: left promiscuous mode [ 467.601434][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.224409][ T8011] team0: Port device bridge1 removed [ 468.395360][ T8011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.406347][ T8011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.417518][ T8011] bond0 (unregistering): Released all slaves [ 468.532143][ T10] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 468.703599][ T10] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 468.717209][ T10] usb 1-1: config 0 has an invalid interface number: 14 but max is 2 [ 468.743790][ T10] usb 1-1: config 0 has no interface number 0 [ 468.749999][ T10] usb 1-1: config 0 has no interface number 1 [ 468.761479][ T10] usb 1-1: config 0 interface 14 has no altsetting 0 [ 468.769318][T11563] chnl_net:caif_netlink_parms(): no params data found [ 468.776774][ T10] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 468.789360][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.804533][ T10] usb 1-1: config 0 descriptor?? [ 468.858280][ T8011] hsr_slave_0: left promiscuous mode [ 468.879058][ T8011] hsr_slave_1: left promiscuous mode [ 468.886329][ T30] audit: type=1400 audit(1750594283.579:4629): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 468.886994][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.918705][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.940005][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.966104][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.087583][ T8011] veth1_macvtap: left promiscuous mode [ 469.100982][ T8011] veth0_macvtap: left promiscuous mode [ 469.119298][ T8011] veth1_vlan: left promiscuous mode [ 469.139609][ T30] audit: type=1326 audit(1750594283.829:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.144646][ T8011] veth0_vlan: left promiscuous mode [ 469.179908][ T30] audit: type=1326 audit(1750594283.859:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.205845][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 469.248646][ T30] audit: type=1326 audit(1750594283.859:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.288049][ T30] audit: type=1326 audit(1750594283.859:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.336273][ T5922] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 469.365203][ T30] audit: type=1326 audit(1750594283.859:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.406516][ T30] audit: type=1326 audit(1750594283.859:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.431650][ T30] audit: type=1326 audit(1750594283.859:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.457425][ T30] audit: type=1326 audit(1750594283.859:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.481354][ T30] audit: type=1326 audit(1750594283.859:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11630 comm="syz.1.1456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7ffc0000 [ 469.523456][ T5922] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.538411][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 469.547582][ T5826] Bluetooth: hci3: command tx timeout [ 469.553692][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.561786][ T5922] usb 6-1: Product: syz [ 469.566476][ T5922] usb 6-1: Manufacturer: syz [ 469.571084][ T5922] usb 6-1: SerialNumber: syz [ 469.841649][ T8011] team0 (unregistering): Port device team_slave_1 removed [ 469.882290][ T8011] team0 (unregistering): Port device team_slave_0 removed [ 470.414623][T11563] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.422755][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.430174][T11563] bridge_slave_0: entered allmulticast mode [ 470.449451][T11563] bridge_slave_0: entered promiscuous mode [ 470.465393][T11563] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.478440][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.487502][T11563] bridge_slave_1: entered allmulticast mode [ 470.498423][T11563] bridge_slave_1: entered promiscuous mode [ 470.577551][T11563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.676438][ T5922] cdc_ncm 6-1:1.0: bind() failure [ 470.923846][T11563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.939938][ T5922] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 470.974571][ T5922] usb 6-1: USB disconnect, device number 33 [ 471.055198][T11563] team0: Port device team_slave_0 added [ 471.078951][T11563] team0: Port device team_slave_1 added [ 471.170796][ T10] usb 1-1: Could not set interface, error -71 [ 471.204879][T11563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.218684][ T10] usb 1-1: USB disconnect, device number 40 [ 471.261939][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.479346][T11563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.491598][T11563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.498695][T11563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.547777][T11563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.683734][ T5826] Bluetooth: hci3: command tx timeout [ 471.988317][ T8011] IPVS: stop unused estimator thread 0... [ 473.651187][T11563] hsr_slave_0: entered promiscuous mode [ 473.663271][T11563] hsr_slave_1: entered promiscuous mode [ 473.669497][T11563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.688319][T11563] Cannot create hsr debugfs directory [ 473.705867][ T5826] Bluetooth: hci3: command tx timeout [ 473.933921][ T5826] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 474.379784][T11563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 474.404719][T11563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 474.418170][T11563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 474.435208][T11563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 474.616559][T11718] overlayfs: unescaped trailing colons in lowerdir mount option. [ 474.838998][T11563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.974525][T11563] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.134290][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.141436][ T7620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.634564][T11740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.646818][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.653986][ T8000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.787973][T11738] syzkaller1: entered promiscuous mode [ 475.802044][T11738] syzkaller1: entered allmulticast mode [ 475.979943][T11750] : entered promiscuous mode [ 476.654424][ T5823] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 476.880147][T11563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.423892][ T5826] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 477.755242][T11563] veth0_vlan: entered promiscuous mode [ 477.777568][T11563] veth1_vlan: entered promiscuous mode [ 478.577025][T11563] veth0_macvtap: entered promiscuous mode [ 478.612653][T11563] veth1_macvtap: entered promiscuous mode [ 478.644463][T11563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.671758][T11563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.696169][T11563] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.761499][T11563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.770571][T11563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.782986][T11563] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.948757][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 478.948773][ T30] audit: type=1400 audit(1750594293.639:4659): avc: denied { accept } for pid=11805 comm="syz.1.1483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 479.191777][ T8011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.229068][ T8011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.297064][ T8000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.345879][ T8000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.405863][ T30] audit: type=1400 audit(1750594294.099:4660): avc: denied { mounton } for pid=11563 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 479.497282][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 479.598414][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 479.641949][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 479.816418][ T5826] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 479.913691][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 480.023517][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 480.364584][T11827] ceph: No mds server is up or the cluster is laggy [ 480.982381][ T5862] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 481.271960][ T5922] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 481.372557][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 481.393785][ T5862] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 481.410848][ T5862] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 481.443384][ T5862] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 481.452023][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 481.479790][ T5862] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 481.502463][ T5922] usb 7-1: no configurations [ 481.521949][ T5922] usb 7-1: can't read configurations, error -22 [ 481.544821][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 481.566045][ T5862] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 481.581913][ T5862] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 481.600686][ T5862] usb 6-1: Product: syz [ 481.610796][ T5862] usb 6-1: Manufacturer: syz [ 481.622352][ T5862] usb 6-1: SerialNumber: syz [ 481.655977][ T5862] usb 6-1: config 0 descriptor?? [ 481.676846][ T5862] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 481.692049][ T5922] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 481.719607][ T5862] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 481.883586][T11862] ldusb 6-1:0.0: Write buffer overflow, 64957 bytes dropped [ 481.892042][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 481.916170][ T5922] usb 7-1: no configurations [ 481.920786][ T5922] usb 7-1: can't read configurations, error -22 [ 481.962095][ T5922] usb usb7-port1: attempt power cycle [ 482.621721][ T5819] usb 6-1: USB disconnect, device number 34 [ 482.632559][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 482.645264][ T5819] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 482.892591][ T5922] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 482.925091][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 482.943491][ T5922] usb 7-1: no configurations [ 482.961200][ T5922] usb 7-1: can't read configurations, error -22 [ 483.012106][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 483.031698][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.065265][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.091278][T11895] netlink: 'syz.1.1499': attribute type 39 has an invalid length. [ 483.110009][ T10] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 483.112109][ T5922] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 483.135230][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.144514][T11897] netlink: 'syz.1.1499': attribute type 39 has an invalid length. [ 483.182609][ T5922] usb 7-1: Using ep0 maxpacket: 32 [ 483.184141][ T10] usb 3-1: config 0 descriptor?? [ 483.191597][ T5922] usb 7-1: no configurations [ 483.211917][ T5922] usb 7-1: can't read configurations, error -22 [ 483.218646][ T5922] usb usb7-port1: unable to enumerate USB device [ 483.559573][ T30] audit: type=1400 audit(1750594298.239:4661): avc: denied { map } for pid=11907 comm="syz.5.1502" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 483.632406][ T5826] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 483.659128][ T30] audit: type=1400 audit(1750594298.239:4662): avc: denied { execute } for pid=11907 comm="syz.5.1502" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 485.142065][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 485.148043][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 485.266026][ T10] usb 3-1: USB disconnect, device number 43 [ 485.338054][T11953] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1505'. [ 485.410870][ T30] audit: type=1400 audit(1750594300.089:4663): avc: denied { getopt } for pid=11946 comm="syz.2.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 485.675138][T11951] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 485.681750][T11951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 485.713416][T11951] vhci_hcd vhci_hcd.0: Device attached [ 485.942368][ T5922] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 485.971111][ T5944] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 486.225407][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 486.241377][ T5922] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 486.270831][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.332830][ T5922] usb 7-1: Product: syz [ 486.347576][ T5922] usb 7-1: Manufacturer: syz [ 486.357691][ T5922] usb 7-1: SerialNumber: syz [ 486.374083][ T5922] usb 7-1: config 0 descriptor?? [ 486.385220][ T5922] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 486.422951][ T5922] usb 7-1: Detected FT232H [ 486.590457][ T5922] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 486.603423][T11962] vhci_hcd: connection closed [ 486.605934][ T13] vhci_hcd: stop threads [ 486.639314][ T5922] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 486.649973][ T13] vhci_hcd: release socket [ 486.658083][ T5922] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 486.665100][ T13] vhci_hcd: disconnect device [ 486.674662][ T5922] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 486.697599][ T5922] usb 7-1: USB disconnect, device number 6 [ 486.712007][ T5944] usb 45-1: device descriptor read/64, error -71 [ 486.921990][ T5944] vhci_hcd: vhci_device speed not set [ 486.938363][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 486.985291][ T5922] ftdi_sio 7-1:0.0: device disconnected [ 487.046697][ T10] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 487.092977][ T30] audit: type=1400 audit(1750594301.789:4664): avc: denied { read } for pid=11980 comm="syz.0.1511" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.166692][ T30] audit: type=1400 audit(1750594301.789:4665): avc: denied { open } for pid=11980 comm="syz.0.1511" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.242027][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 487.252006][ T30] audit: type=1400 audit(1750594301.789:4666): avc: denied { ioctl } for pid=11980 comm="syz.0.1511" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x643a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 487.270152][ T10] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 487.360182][ T10] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 487.407168][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.443629][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 487.463411][ T10] usb 6-1: config 1 has no interface number 0 [ 487.489836][ T10] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 487.504525][T11991] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1514'. [ 487.544518][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.709459][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 487.898089][T11975] veth1_virt_wifi: entered promiscuous mode [ 487.973535][ T10] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 487.980003][T11975] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1510'. [ 487.997640][ T10] snd_usb_pod 6-1:1.1: invalid control EP [ 488.010415][ T10] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 488.084202][ T10] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 488.091797][ T10] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 488.252272][ T5944] usb 6-1: USB disconnect, device number 35 [ 488.559769][T12017] overlayfs: failed to clone upperpath [ 488.644672][T12023] FAULT_INJECTION: forcing a failure. [ 488.644672][T12023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.657841][T12023] CPU: 1 UID: 0 PID: 12023 Comm: syz.2.1522 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 488.657864][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 488.657874][T12023] Call Trace: [ 488.657880][T12023] [ 488.657887][T12023] dump_stack_lvl+0x16c/0x1f0 [ 488.657915][T12023] should_fail_ex+0x512/0x640 [ 488.657942][T12023] _copy_to_user+0x32/0xd0 [ 488.657967][T12023] raw_getsockopt+0x150/0x540 [ 488.657990][T12023] ? __pfx_raw_getsockopt+0x10/0x10 [ 488.658009][T12023] do_sock_getsockopt+0x3fc/0x800 [ 488.658030][T12023] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 488.658045][T12023] ? __fget_files+0x204/0x3c0 [ 488.658083][T12023] __sys_getsockopt+0x12f/0x260 [ 488.658113][T12023] __x64_sys_getsockopt+0xbd/0x160 [ 488.658135][T12023] ? do_syscall_64+0x91/0x4c0 [ 488.658159][T12023] ? lockdep_hardirqs_on+0x7c/0x110 [ 488.658182][T12023] do_syscall_64+0xcd/0x4c0 [ 488.658209][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.658226][T12023] RIP: 0033:0x7fc34bb8e929 [ 488.658238][T12023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.658254][T12023] RSP: 002b:00007fc34c98d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 488.658270][T12023] RAX: ffffffffffffffda RBX: 00007fc34bdb6160 RCX: 00007fc34bb8e929 [ 488.658281][T12023] RDX: 0000000000000006 RSI: 0000000000000065 RDI: 000000000000000c [ 488.658291][T12023] RBP: 00007fc34c98d090 R08: 0000200000000040 R09: 0000000000000000 [ 488.658301][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.658311][T12023] R13: 0000000000000000 R14: 00007fc34bdb6160 R15: 00007ffefb17e0e8 [ 488.658337][T12023] [ 489.432131][ T5959] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 489.601504][ T5959] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 489.622040][ T5855] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 489.622098][ T5959] usb 6-1: config 0 has no interface number 0 [ 489.662247][ T5959] usb 6-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 255 [ 489.712408][ T5959] usb 6-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 489.742033][ T5959] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.767736][ T5959] usb 6-1: config 0 descriptor?? [ 489.783334][T12031] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 489.933253][ T5855] usb 3-1: Using ep0 maxpacket: 16 [ 489.942745][ T5855] usb 3-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 489.952112][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.960536][ T5855] usb 3-1: Product: syz [ 489.967908][ T5855] usb 3-1: Manufacturer: syz [ 489.975885][ T5855] usb 3-1: SerialNumber: syz [ 489.998128][T10806] udevd[10806]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.387665][T12047] bridge1: entered promiscuous mode [ 490.456316][ T5855] usb 3-1: config 0 descriptor?? [ 490.506672][ T5855] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 490.507224][T12031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.560421][T12031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.625318][ T5959] usb 6-1: USB disconnect, device number 36 [ 490.699485][ T5855] gspca_sn9c2028: read1 error -32 [ 490.707501][ T5855] gspca_sn9c2028: read1 error -71 [ 490.712948][ T5855] gspca_sn9c2028: read1 error -71 [ 490.718036][ T5855] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 490.731615][ T5855] usb 3-1: USB disconnect, device number 44 [ 491.970929][ T30] audit: type=1400 audit(1750594306.659:4667): avc: denied { setopt } for pid=12074 comm="syz.5.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 493.726324][ T30] audit: type=1326 audit(1750594308.349:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 493.749798][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.801211][ T30] audit: type=1326 audit(1750594308.349:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 493.933414][ T30] audit: type=1326 audit(1750594308.349:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 493.974390][T12111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.992031][ T30] audit: type=1326 audit(1750594308.619:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 494.015502][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.082692][ T30] audit: type=1326 audit(1750594308.619:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 494.092894][T12111] netlink: 'syz.2.1545': attribute type 10 has an invalid length. [ 494.244665][ T30] audit: type=1326 audit(1750594308.859:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 494.268146][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.351961][ T30] audit: type=1326 audit(1750594308.859:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 494.412017][ T5855] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 494.526343][ T30] audit: type=1326 audit(1750594308.859:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12105 comm="syz.5.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb93cf8e929 code=0x7ffc0000 [ 494.549816][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.579157][T12111] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 494.640291][ T30] audit: type=1400 audit(1750594309.259:4676): avc: denied { read } for pid=12129 comm="syz.5.1550" path="socket:[32895]" dev="sockfs" ino=32895 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 494.663604][ T5855] usb 1-1: config 208 has an invalid descriptor of length 9, skipping remainder of the config [ 494.664311][ C0] vkms_vblank_simulate: vblank timer overrun [ 494.693437][T12135] overlayfs: overlapping lowerdir path [ 494.764584][ T5855] usb 1-1: config 208 has 0 interfaces, different from the descriptor's value: 1 [ 494.877771][ T5855] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 494.929690][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.427732][ T5855] usb 1-1: string descriptor 0 read error: -71 [ 495.455868][ T5855] usb 1-1: USB disconnect, device number 41 [ 495.633798][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 495.641165][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 495.948512][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 495.988094][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 496.403877][T12185] bridge0: port 3(gretap0) entered blocking state [ 496.431364][T12185] bridge0: port 3(gretap0) entered disabled state [ 496.471255][T12185] gretap0: entered allmulticast mode [ 496.518109][T12185] gretap0: entered promiscuous mode [ 496.535508][T12161] ceph: No mds server is up or the cluster is laggy [ 496.554411][T12185] bridge0: port 3(gretap0) entered blocking state [ 496.560949][T12185] bridge0: port 3(gretap0) entered forwarding state [ 496.562397][ T5944] libceph: connect (1)[c::]:6789 error -101 [ 496.593818][ T5944] libceph: mon0 (1)[c::]:6789 connect error [ 496.632264][ T5819] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 496.804299][ T5819] usb 6-1: Using ep0 maxpacket: 8 [ 496.840042][ T5819] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 496.851221][ T5819] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 496.865558][ T5819] usb 6-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 496.879457][ T5819] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 496.894124][ T5819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.927589][ T5819] usb 6-1: Product: syz [ 496.950970][ T5819] usb 6-1: Manufacturer: syz [ 496.984934][ T5819] usb 6-1: SerialNumber: syz [ 497.081365][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 497.081379][ T30] audit: type=1400 audit(1750594311.769:4678): avc: denied { listen } for pid=12201 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 498.106230][ T5819] adutux 6-1:168.0: interrupt endpoints not found [ 498.121966][ T5819] usb 6-1: USB disconnect, device number 37 [ 498.330803][T12218] input: syz1 as /devices/virtual/input/input29 [ 499.242614][T12226] libceph: resolve '40' (ret=-3): failed [ 499.509437][ T30] audit: type=1400 audit(1750594314.199:4679): avc: denied { setattr } for pid=12230 comm="chmod" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 500.090015][ T30] audit: type=1326 audit(1750594314.779:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.130678][ T30] audit: type=1326 audit(1750594314.779:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.159696][ T30] audit: type=1326 audit(1750594314.779:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.233086][ T30] audit: type=1326 audit(1750594314.794:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.259869][ T30] audit: type=1326 audit(1750594314.794:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.299725][ T30] audit: type=1326 audit(1750594314.794:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcce2b8d290 code=0x7ffc0000 [ 500.341324][ T30] audit: type=1326 audit(1750594314.794:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 500.375029][ T5855] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 500.454495][ T30] audit: type=1326 audit(1750594314.794:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcce2b8e929 code=0x7ffc0000 [ 501.369115][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.412007][ T5855] usb 7-1: device descriptor read/64, error -71 [ 501.681955][ T5855] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 502.752630][ T5855] usb 7-1: device descriptor read/64, error -71 [ 502.863612][ T5855] usb usb7-port1: attempt power cycle [ 502.873620][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 502.873635][ T30] audit: type=1326 audit(1750594317.564:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcce2b8e52b code=0x7ffc0000 [ 503.864806][ T30] audit: type=1326 audit(1750594317.564:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcce2b8e52b code=0x7ffc0000 [ 503.888708][ T30] audit: type=1326 audit(1750594317.564:4711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcce2b8e52b code=0x7ffc0000 [ 503.888740][T12265] can: request_module (can-proto-4) failed. [ 504.148005][T12261] syz.0.1580 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 504.158055][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.0.1580 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 504.158072][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.158078][T12261] Call Trace: [ 504.158082][T12261] [ 504.158087][T12261] dump_stack_lvl+0x16c/0x1f0 [ 504.158106][T12261] dump_header+0x101/0x930 [ 504.158122][T12261] oom_kill_process+0x270/0xa60 [ 504.158138][T12261] out_of_memory+0x350/0x1700 [ 504.158154][T12261] ? __pfx_out_of_memory+0x10/0x10 [ 504.158172][T12261] mem_cgroup_out_of_memory+0x118/0x130 [ 504.158184][T12261] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 504.158198][T12261] ? do_raw_spin_unlock+0x172/0x230 [ 504.158212][T12261] try_charge_memcg+0x72b/0xd50 [ 504.158229][T12261] ? __pfx_try_charge_memcg+0x10/0x10 [ 504.158243][T12261] ? find_held_lock+0x1/0x80 [ 504.158256][T12261] ? rcu_read_unlock+0x17/0x60 [ 504.158274][T12261] charge_memcg+0x8a/0x230 [ 504.158289][T12261] __mem_cgroup_charge+0x2b/0x1e0 [ 504.158305][T12261] filemap_add_folio+0x88/0x220 [ 504.158319][T12261] ? __pfx_filemap_add_folio+0x10/0x10 [ 504.158334][T12261] ? page_cache_sync_ra+0x4b4/0x9c0 [ 504.158348][T12261] filemap_get_pages+0xde6/0x1c20 [ 504.158365][T12261] ? folios_put_refs+0x5ce/0x740 [ 504.158379][T12261] ? __pfx_filemap_get_pages+0x10/0x10 [ 504.158396][T12261] ? __pfx___might_resched+0x10/0x10 [ 504.158412][T12261] filemap_splice_read+0x5cb/0xcd0 [ 504.158433][T12261] ? __pfx_filemap_splice_read+0x10/0x10 [ 504.158465][T12261] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 504.158480][T12261] ? __pfx_filemap_splice_read+0x10/0x10 [ 504.158494][T12261] do_splice_read+0x282/0x370 [ 504.158509][T12261] splice_direct_to_actor+0x2a1/0xa30 [ 504.158523][T12261] ? __pfx_direct_splice_actor+0x10/0x10 [ 504.158539][T12261] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 504.158556][T12261] do_splice_direct+0x174/0x240 [ 504.158569][T12261] ? __pfx_do_splice_direct+0x10/0x10 [ 504.158582][T12261] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 504.158595][T12261] ? bpf_lsm_file_permission+0x9/0x10 [ 504.158610][T12261] ? security_file_permission+0x71/0x210 [ 504.158625][T12261] ? rw_verify_area+0xcf/0x680 [ 504.158638][T12261] do_sendfile+0xb06/0xe50 [ 504.158657][T12261] ? __pfx_do_sendfile+0x10/0x10 [ 504.158671][T12261] ? __x64_sys_futex+0x1e0/0x4c0 [ 504.158685][T12261] ? __x64_sys_futex+0x1e9/0x4c0 [ 504.158701][T12261] __x64_sys_sendfile64+0x1d8/0x220 [ 504.158717][T12261] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 504.158736][T12261] do_syscall_64+0xcd/0x4c0 [ 504.158753][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.158763][T12261] RIP: 0033:0x7f83eaf8e929 [ 504.158773][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.158783][T12261] RSP: 002b:00007f83ebd9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 504.158793][T12261] RAX: ffffffffffffffda RBX: 00007f83eb1b5fa0 RCX: 00007f83eaf8e929 [ 504.158799][T12261] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 504.158805][T12261] RBP: 00007f83eb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 504.158811][T12261] R10: 000400000000003f R11: 0000000000000246 R12: 0000000000000000 [ 504.158817][T12261] R13: 0000000000000000 R14: 00007f83eb1b5fa0 R15: 00007ffd02049318 [ 504.158830][T12261] [ 504.158834][T12261] memory: usage 307200kB, limit 307200kB, failcnt 953 [ 504.491706][T12261] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 504.499600][T12261] kmem: usage 19160kB, limit 9007199254740988kB, failcnt 0 [ 504.506783][T12261] Memory cgroup stats for /syz0: [ 504.507018][T12261] cache 294940672 [ 504.515556][T12261] rss 0 [ 504.518293][T12261] rss_huge 0 [ 504.521459][T12261] shmem 0 [ 504.524457][T12261] mapped_file 0 [ 504.527913][T12261] dirty 291110912 [ 504.531534][T12261] writeback 3801088 [ 504.535356][T12261] workingset_refault_anon 1032 [ 504.540097][T12261] workingset_refault_file 335 [ 504.544871][T12261] swap 512000 [ 504.548129][T12261] swapcached 12288 [ 504.551879][T12261] pgpgin 291597 [ 504.555686][T12261] pgpgout 289265 [ 504.559219][T12261] pgfault 287944 [ 504.562778][T12261] pgmajfault 153 [ 504.566310][T12261] inactive_anon 0 [ 504.569929][T12261] active_anon 12288 [ 504.573769][T12261] inactive_file 0 [ 504.577381][T12261] active_file 294907904 [ 504.581510][T12261] unevictable 0 [ 504.584976][T12261] hierarchical_memory_limit 314572800 [ 504.590321][T12261] hierarchical_memsw_limit 9223372036854771712 [ 504.596471][T12261] total_cache 294940672 [ 504.600597][T12261] total_rss 0 [ 504.603877][T12261] total_rss_huge 0 [ 504.607568][T12261] total_shmem 0 [ 504.611014][T12261] total_mapped_file 0 [ 504.615101][T12261] total_dirty 291110912 [ 504.619240][T12261] total_writeback 3801088 [ 504.623575][T12261] total_workingset_refault_anon 1032 [ 504.628834][T12261] total_workingset_refault_file 335 [ 504.634023][T12261] total_swap 512000 [ 504.637802][T12261] total_swapcached 12288 [ 504.642030][T12261] total_pgpgin 291597 [ 504.645982][T12261] total_pgpgout 289265 [ 504.650017][T12261] total_pgfault 287944 [ 504.654065][T12261] total_pgmajfault 153 [ 504.658515][T12261] total_inactive_anon 0 [ 504.662911][T12261] total_active_anon 12288 [ 504.667219][T12261] total_inactive_file 0 [ 504.671348][T12261] total_active_file 294907904 [ 504.676021][T12261] total_unevictable 0 [ 504.679976][T12261] anon_cost 0 [ 504.683253][T12261] file_cost 0 [ 504.686511][T12261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1580,pid=12260,uid=0 [ 504.702712][T12261] Memory cgroup out of memory: Killed process 12260 (syz.0.1580) total-vm:101948kB, anon-rss:944kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 504.881962][ T30] audit: type=1326 audit(1750594317.564:4712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12247 comm="syz.6.1575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcce2b8e52b code=0x7ffc0000 [ 505.872624][ T5855] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 506.092106][ T5855] usb 7-1: device not accepting address 9, error -71 [ 510.660543][T12289] vlan3: entered promiscuous mode [ 510.721171][T12289] bridge0: entered promiscuous mode [ 510.796384][T12298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1587'. [ 510.843672][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 510.860889][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 511.807585][ T5855] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 511.875279][T12333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.884104][ T48] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 511.981917][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 511.993673][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.013095][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.027448][ T5855] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 512.037701][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.051077][ T5855] usb 1-1: config 0 descriptor?? [ 512.058886][ T48] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 512.070573][ T48] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.092754][ T48] usb 6-1: config 0 descriptor?? [ 512.111197][ T48] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 512.263204][ T5944] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 512.426070][ T5944] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 512.445449][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.462984][ T5944] usb 7-1: Product: syz [ 512.471440][ T5944] usb 7-1: Manufacturer: syz [ 512.483292][ T5855] hid-picolcd 0003:04D8:F002.0007: item fetching failed at offset 10/11 [ 512.496938][ T5944] usb 7-1: SerialNumber: syz [ 512.522622][ T5944] usb 7-1: config 0 descriptor?? [ 512.528402][ T5855] hid-picolcd 0003:04D8:F002.0007: device report parse failed [ 512.564308][ T5944] usbsevseg 7-1:0.0: USB 7 Segment device now attached [ 512.574259][ T5855] hid-picolcd 0003:04D8:F002.0007: probe with driver hid-picolcd failed with error -22 [ 512.686336][ T5855] usb 1-1: USB disconnect, device number 42 [ 512.780181][T12339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.882402][T12339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.460076][ T48] gspca_cpia1: usb_control_msg 05, error -110 [ 513.487555][ T48] gspca_cpia1: usb_control_msg 01, error -32 [ 513.494320][T12339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.504045][T12339] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 513.508897][ T48] gspca_cpia1: usb_control_msg 01, error -32 [ 513.522135][T12319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.541260][T12319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.545695][ T48] gspca_cpia1: usb_control_msg 01, error -32 [ 513.609063][T12339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.657301][T12339] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 513.739352][T12339] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 513.745834][T12339] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 513.809051][T12339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.822936][T12339] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 513.860631][T12339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.881574][T12339] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 514.034460][ T5922] usb 7-1: USB disconnect, device number 11 [ 514.042293][ T5922] usbsevseg 7-1:0.0: USB 7 Segment now disconnected [ 514.072090][ T5944] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 514.093768][ T30] audit: type=1326 audit(1750594328.784:4713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7fc00000 [ 514.150747][ T30] audit: type=1326 audit(1750594328.814:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5bedb8e929 code=0x7fc00000 [ 514.205093][ T30] audit: type=1326 audit(1750594328.874:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12385 comm="syz.1.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5bedb8e929 code=0x7fc00000 [ 514.254691][ T5944] usb 1-1: Using ep0 maxpacket: 32 [ 514.268166][ T5944] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 514.284126][ T5944] usb 1-1: config 1 has no interface number 0 [ 514.334436][ T5944] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 256 [ 514.579580][ T48] gspca_cpia1: usb_control_msg 02, error -71 [ 514.609972][ T48] cpia1 6-1:0.0: only firmware version 1 is supported (got: 2) [ 514.630238][ T5944] usb 1-1: config 1 interface 236 has no altsetting 0 [ 514.652664][ T5944] usb 1-1: config 1 has an invalid interface number: 236 but max is 0 [ 514.661318][ T5944] usb 1-1: config 1 has no interface number 0 [ 514.733669][ T48] usb 6-1: USB disconnect, device number 38 [ 514.754285][ T5944] usb 1-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 256 [ 514.896454][ T5944] usb 1-1: config 1 interface 236 has no altsetting 0 [ 514.915096][ T5944] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 514.931791][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.944242][ T5944] usb 1-1: Product: syz [ 514.948436][ T5944] usb 1-1: Manufacturer: syz [ 515.467407][ T5944] usb 1-1: SerialNumber: syz [ 515.523006][T12381] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 515.540493][ T5944] ti_usb_3410_5052 1-1:1.236: TI USB 5052 2 port adapter converter detected [ 515.877282][ T5819] usb 1-1: USB disconnect, device number 43 [ 515.883372][T12427] syz_tun: entered allmulticast mode [ 515.996361][T12432] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1605'. [ 517.833165][T12469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1610'. [ 518.112276][T12469] block nbd0: server does not support multiple connections per device. [ 518.124964][T12469] block nbd0: shutting down sockets [ 518.202873][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 518.676811][T12482] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 518.800814][ T30] audit: type=1400 audit(1750594333.494:4716): avc: denied { accept } for pid=12481 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 518.903458][T12489] netlink: 'syz.0.1615': attribute type 9 has an invalid length. [ 518.939981][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 520.504472][ T5855] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 520.653380][ T30] audit: type=1326 audit(1750594335.354:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 520.684747][ T5855] usb 6-1: config 0 has an invalid interface number: 168 but max is 0 [ 520.693096][ T5855] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.716775][ T5855] usb 6-1: config 0 has no interface number 0 [ 520.728985][ T5855] usb 6-1: config 0 interface 168 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 520.763373][ T5855] usb 6-1: config 0 interface 168 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 520.781386][ T5855] usb 6-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 520.793961][ T30] audit: type=1326 audit(1750594335.354:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 520.797260][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.837293][ T5855] usb 6-1: config 0 descriptor?? [ 520.848741][ T5855] HFC-S_USB 6-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 520.975133][ T30] audit: type=1326 audit(1750594335.374:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.139048][ T30] audit: type=1326 audit(1750594335.374:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.223314][ T30] audit: type=1326 audit(1750594335.374:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.440714][ T30] audit: type=1326 audit(1750594335.404:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.462949][ T5855] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 521.512125][ T30] audit: type=1326 audit(1750594335.404:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.538330][ T30] audit: type=1326 audit(1750594335.404:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.567037][ T30] audit: type=1326 audit(1750594335.444:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.593071][ T30] audit: type=1326 audit(1750594335.444:4726): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12509 comm="syz.0.1622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83eaf8e929 code=0x7ffc0000 [ 521.787202][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 521.799734][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 521.810110][ T5855] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.830339][ T5855] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.881707][ T5855] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.891487][ T5855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 521.901108][ T5855] usb 1-1: SerialNumber: syz [ 522.036640][ T5855] usb 1-1: bad CDC descriptors [ 523.116332][ T5855] usb 6-1: USB disconnect, device number 39 [ 523.552830][T12554] netlink: 'syz.5.1633': attribute type 10 has an invalid length. [ 523.747609][T12566] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1638'. [ 524.237925][ T5944] usb 1-1: USB disconnect, device number 44 [ 524.245650][T12575] netlink: 'syz.6.1640': attribute type 1 has an invalid length. [ 524.475172][T12575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.513305][T12586] netlink: 'syz.2.1644': attribute type 11 has an invalid length. [ 524.694353][T12581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 524.722966][T12581] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 524.739978][T12581] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 524.772503][T12575] gretap1: entered promiscuous mode [ 524.784722][T12575] bond1: (slave gretap1): making interface the new active one [ 524.805404][T12575] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 524.929887][T12597] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1648'. [ 524.975076][ T5855] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 525.132257][T12601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1650'. [ 525.141973][ T5944] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 525.150319][ T5855] usb 6-1: device descriptor read/64, error -71 [ 525.163754][T12601] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1650'. [ 525.209664][T12601] gretap0: entered promiscuous mode [ 525.270696][T12601] batadv_slave_1: entered promiscuous mode [ 525.317743][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.365204][T12608] NILFS (nullb0): couldn't find nilfs on the device [ 525.372610][ T5944] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 525.384558][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.395052][ T5944] usb 3-1: config 0 descriptor?? [ 525.412616][ T5855] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 525.672580][ T5855] usb 6-1: device descriptor read/64, error -71 [ 526.317105][ T5855] usb usb6-port1: attempt power cycle [ 526.352417][ T7994] wlan1: Trigger new scan to find an IBSS to join [ 526.912113][ T5823] Bluetooth: hci5: command 0x1003 tx timeout [ 526.941943][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 527.013715][ T5855] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 527.263602][T12627] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1657'. [ 527.273607][ T5855] usb 6-1: device descriptor read/8, error -71 [ 527.289269][ T5944] ath6kl: Failed to read usb control message: -71 [ 527.307942][ T5944] ath6kl: Unable to read the bmi data from the device: -71 [ 527.316549][ T5944] ath6kl: Unable to recv target info: -71 [ 527.330145][ T5944] ath6kl: Failed to init ath6kl core: -71 [ 527.354081][ T5944] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 527.385811][T12633] sp0: Synchronizing with TNC [ 527.403448][ T5944] usb 3-1: USB disconnect, device number 45 [ 527.483485][T12633] [U] [ 527.542429][ T5855] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 527.582584][ T5855] usb 6-1: device descriptor read/8, error -71 [ 527.704511][ T5855] usb usb6-port1: unable to enumerate USB device [ 527.958543][T12643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12643 comm=syz.1.1661 [ 528.828810][ T5855] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 529.017163][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 529.017180][ T30] audit: type=1400 audit(1750594343.714:4749): avc: denied { name_bind } for pid=12660 comm="syz.6.1666" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 529.088219][ T5855] usb 3-1: Using ep0 maxpacket: 32 [ 529.245181][ T5855] usb 3-1: unable to get BOS descriptor or descriptor too short [ 529.287473][ T5855] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 495 [ 529.431291][ T5855] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 529.476754][ T5855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 529.487394][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.500306][ T5855] usb 3-1: Product: 鴈ꗣ魗নᢄࢰϑ섉螅轡溜ꎹ淈઺䥽눆헂肄瘜ઝݔ薁滠ꖭ哖煽릉恾홶꫏壑ポᣫ桴䮄鑟╻ӭ璺 [ 529.519164][ T5855] usb 3-1: Manufacturer: Ы [ 530.561313][ T7620] wlan1: Trigger new scan to find an IBSS to join [ 530.637549][T12679] input: syz0 as /devices/virtual/input/input30 [ 530.668709][ T5855] cdc_ncm 3-1:1.0: bind() failure [ 530.696461][ T5855] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 530.722398][ T5855] cdc_ncm 3-1:1.1: bind() failure [ 530.820828][ T5855] usb 3-1: USB disconnect, device number 46 [ 531.132238][T12695] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.593600][T12697] 9pnet_fd: Insufficient options for proto=fd [ 531.868252][ T30] audit: type=1400 audit(1750594346.554:4750): avc: denied { create } for pid=12705 comm="syz.5.1679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 531.888588][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.057572][ T8003] wlan1: Creating new IBSS network, BSSID ee:68:bd:e2:90:7e [ 532.106699][ T30] audit: type=1400 audit(1750594346.804:4751): avc: denied { map } for pid=12712 comm="syz.0.1672" path="socket:[35052]" dev="sockfs" ino=35052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 532.279015][ T30] audit: type=1400 audit(1750594346.804:4752): avc: denied { read } for pid=12712 comm="syz.0.1672" path="socket:[35052]" dev="sockfs" ino=35052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 532.326464][ T30] audit: type=1400 audit(1750594347.024:4753): avc: denied { setopt } for pid=12715 comm="syz.5.1681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 532.464290][T12718] Illegal XDP return value 4294967274 on prog (id 350) dev syz_tun, expect packet loss! [ 533.477985][T12731] overlayfs: failed to resolve './file0': -2 [ 534.975761][ T5944] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 535.191960][ T5944] usb 6-1: device descriptor read/64, error -71 [ 535.452277][ T5922] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 535.662119][ T5944] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 535.834337][ T5922] usb 1-1: config 8 has an invalid interface number: 22 but max is 0 [ 535.870608][ T5922] usb 1-1: config 8 has no interface number 0 [ 535.907825][ T5922] usb 1-1: config 8 interface 22 has no altsetting 0 [ 535.918347][ T5944] usb 6-1: device descriptor read/64, error -71 [ 535.968086][ T5922] usb 1-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=42.7d [ 535.977859][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.009823][ T5922] usb 1-1: Product: syz [ 536.015744][ T5922] usb 1-1: Manufacturer: syz [ 536.020460][ T5922] usb 1-1: SerialNumber: syz [ 536.082288][ T5944] usb usb6-port1: attempt power cycle [ 537.302717][ T5944] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 537.438537][T12790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 537.452140][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 537.621406][ T5944] usb 6-1: device descriptor read/8, error -71 [ 539.643830][ T30] audit: type=1400 audit(1750594354.024:4754): avc: denied { map } for pid=12794 comm="syz.6.1701" path="/proc/131/task/132/numa_maps" dev="proc" ino=36048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 539.664859][ T5922] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 539.782322][ T5922] usb 1-1: USB disconnect, device number 45 [ 541.917424][T12848] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1714'. [ 542.078976][T12851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.732176][T12864] loop2: detected capacity change from 0 to 7 [ 542.761472][T12320] Dev loop2: unable to read RDB block 7 [ 542.774289][T12320] loop2: unable to read partition table [ 542.791137][T12320] loop2: partition table beyond EOD, truncated [ 542.832280][T12864] Dev loop2: unable to read RDB block 7 [ 542.843805][T12864] loop2: unable to read partition table [ 542.859948][T12864] loop2: partition table beyond EOD, truncated [ 542.872826][T12864] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 543.326999][T12872] sctp: [Deprecated]: syz.6.1720 (pid 12872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.326999][T12872] Use struct sctp_sack_info instead [ 543.642088][ T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 543.791995][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 543.798679][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.810333][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 543.829260][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 543.841209][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 543.852455][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.860499][ T10] usb 1-1: Product: syz [ 543.866734][ T10] usb 1-1: Manufacturer: syz [ 543.871376][ T10] usb 1-1: SerialNumber: syz [ 544.063370][ T5944] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 544.089755][ T30] audit: type=1400 audit(1750594358.784:4755): avc: denied { create } for pid=12873 comm="syz.0.1722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 544.292953][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 544.326117][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.329615][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 544.351366][ T5944] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.354571][ T10] usb 1-1: USB disconnect, device number 46 [ 544.385215][ T5944] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 544.416529][ T5944] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 544.436051][T12320] udevd[12320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.451708][ T5944] usb 7-1: Manufacturer: syz [ 544.459831][ T5944] usb 7-1: config 0 descriptor?? [ 544.551991][ T5862] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 544.706684][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 544.755452][ T5862] usb 6-1: config 0 interface 0 has no altsetting 0 [ 544.785602][ T5862] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 544.796133][ T30] audit: type=1400 audit(1750594359.484:4756): avc: denied { read } for pid=12900 comm="syz.1.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 544.818358][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 544.826809][ T5862] usb 6-1: Product: syz [ 544.851521][ T5862] usb 6-1: config 0 descriptor?? [ 544.906673][ T5944] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 544.952627][ T5944] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 544.976294][ T5944] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 544.997700][ T5944] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 545.017462][ T5944] cougar 0003:060B:700A.0008: unknown main item tag 0x0 [ 545.018044][T12904] FAULT_INJECTION: forcing a failure. [ 545.018044][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.040149][T12904] CPU: 0 UID: 0 PID: 12904 Comm: syz.0.1731 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 545.040179][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.040189][T12904] Call Trace: [ 545.040195][T12904] [ 545.040202][T12904] dump_stack_lvl+0x16c/0x1f0 [ 545.040232][T12904] should_fail_ex+0x512/0x640 [ 545.040260][T12904] _copy_from_user+0x2e/0xd0 [ 545.040286][T12904] kstrtouint_from_user+0xd6/0x1d0 [ 545.040304][T12904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 545.040322][T12904] ? __lock_acquire+0xb8a/0x1c90 [ 545.040362][T12904] proc_fail_nth_write+0x83/0x250 [ 545.040385][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 545.040414][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 545.040434][T12904] vfs_write+0x29d/0x1150 [ 545.040461][T12904] ? __pfx___mutex_lock+0x10/0x10 [ 545.040485][T12904] ? __pfx_vfs_write+0x10/0x10 [ 545.040505][T12904] ? lockdep_hardirqs_on+0x7c/0x110 [ 545.040549][T12904] ksys_write+0x12a/0x250 [ 545.040569][T12904] ? __pfx_ksys_write+0x10/0x10 [ 545.040592][T12904] ? fput+0x70/0xf0 [ 545.040621][T12904] do_syscall_64+0xcd/0x4c0 [ 545.040650][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.040667][T12904] RIP: 0033:0x7f83eaf8d3df [ 545.040681][T12904] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 545.040697][T12904] RSP: 002b:00007f83ebd9a030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 545.040714][T12904] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f83eaf8d3df [ 545.040725][T12904] RDX: 0000000000000001 RSI: 00007f83ebd9a0a0 RDI: 0000000000000004 [ 545.040734][T12904] RBP: 00007f83ebd9a090 R08: 0000000000000000 R09: 0000000000000000 [ 545.040744][T12904] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 545.040753][T12904] R13: 0000000000000000 R14: 00007f83eb1b5fa0 R15: 00007ffd02049318 [ 545.040780][T12904] [ 545.238445][ T5944] cougar 0003:060B:700A.0008: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 545.264185][ T10] usb 7-1: USB disconnect, device number 12 [ 545.745987][T12908] fido_id[12908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 545.835039][ T5862] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 545.868912][ T30] audit: type=1400 audit(1750594360.564:4757): avc: denied { shutdown } for pid=12910 comm="syz.2.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 545.930319][ T5862] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 545.945650][ T5862] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 545.981969][ T5862] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 545.989408][ T5862] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 546.007718][ T5862] waterforce 0003:1044:7A4D.0009: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.5-1/input0 [ 546.264008][ T5862] waterforce 0003:1044:7A4D.0009: fw version request failed with -38 [ 547.205047][ T5944] usb 6-1: USB disconnect, device number 48 [ 548.276539][T12956] syz.6.1744: attempt to access beyond end of device [ 548.276539][T12956] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 548.290893][ T30] audit: type=1400 audit(1750594362.974:4758): avc: denied { getopt } for pid=12949 comm="syz.6.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 549.707320][ T30] audit: type=1400 audit(1750594364.404:4759): avc: denied { watch watch_reads } for pid=12990 comm="syz.6.1753" path="/proc/172" dev="proc" ino=36443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 549.917991][T13001] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 549.924541][T13001] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 549.935730][T13001] vhci_hcd vhci_hcd.0: Device attached [ 549.950181][T13001] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 549.969692][T13001] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 549.976344][T13001] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 549.985551][T12998] syzkaller0: entered promiscuous mode [ 550.000244][T13001] vhci_hcd vhci_hcd.0: Device attached [ 550.014682][T13001] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 550.018918][T12998] syzkaller0: entered allmulticast mode [ 550.021298][T13001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 550.038338][T13001] vhci_hcd vhci_hcd.0: Device attached [ 550.056981][T13001] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 550.063622][T13001] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 550.079130][T13001] vhci_hcd vhci_hcd.0: Device attached [ 550.086169][T13001] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 550.118563][ T5922] vhci_hcd: vhci_device speed not set [ 550.322240][T13016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 550.642560][ T5922] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 553.624570][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1767'. [ 553.923491][T13051] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.390195][T13052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.409425][T13052] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 554.455647][T13052] bond2: (slave vti0): Error -95 calling set_mac_address [ 554.465214][ T30] audit: type=1404 audit(1750594369.164:4760): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 554.536250][ T30] audit: type=1400 audit(1750594369.224:4761): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-digest_null-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.559039][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.634073][T13004] vhci_hcd: connection closed [ 554.651647][ T8010] vhci_hcd: stop threads [ 554.662806][T13007] vhci_hcd: connection closed [ 554.663012][T13002] vhci_hcd: connection reset by peer [ 554.673042][T13012] vhci_hcd: connection closed [ 554.673476][ T8010] vhci_hcd: release socket [ 554.686720][ T30] audit: type=1400 audit(1750594369.224:4762): avc: denied { name_bind } for pid=13061 comm="syz.6.1769" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 554.708444][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.719409][ T8010] vhci_hcd: disconnect device [ 554.724799][ T8010] vhci_hcd: stop threads [ 554.729768][ T8010] vhci_hcd: release socket [ 554.739113][ T8010] vhci_hcd: disconnect device [ 554.748927][ T8010] vhci_hcd: stop threads [ 554.755763][ T30] audit: type=1400 audit(1750594369.234:4763): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(sha384)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.772031][ T8010] vhci_hcd: release socket [ 554.778284][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.795007][ T8010] vhci_hcd: disconnect device [ 554.815466][ T8010] vhci_hcd: stop threads [ 554.830778][ T30] audit: type=1400 audit(1750594369.234:4764): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(sha384)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.840175][ T8010] vhci_hcd: release socket [ 554.867125][ T8010] vhci_hcd: disconnect device [ 554.893311][ T30] audit: type=1400 audit(1750594369.304:4765): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(sha512)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.930562][ T30] audit: type=1400 audit(1750594369.304:4766): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(sha512)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.958128][ T30] audit: type=1400 audit(1750594369.334:4767): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(rmd160)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 554.980635][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.012043][ T30] audit: type=1400 audit(1750594369.334:4768): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-hmac(rmd160)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 555.039387][ T30] audit: type=1400 audit(1750594369.334:4769): avc: denied { module_request } for pid=13061 comm="syz.6.1769" kmod="crypto-xcbc(aes)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 555.061759][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.773412][ T5922] vhci_hcd: vhci_device speed not set [ 561.552765][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 561.552779][ T30] audit: type=1400 audit(1750594376.254:4859): avc: denied { recv } for pid=5922 comm="kworker/1:4" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 561.671566][ T30] audit: type=1400 audit(1750594376.364:4860): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 562.428645][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.622853][ T8010] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.583766][ T30] audit: type=1400 audit(1750594383.284:4861): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 568.834532][ T30] audit: type=1400 audit(1750594383.534:4862): avc: denied { recv } for pid=48 comm="kworker/1:1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 577.793508][ T30] audit: type=1400 audit(1750594392.494:4863): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 582.151646][ T30] audit: type=1400 audit(1750594396.844:4864): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 582.904782][ T30] audit: type=1400 audit(1750594397.604:4865): avc: denied { recv } for pid=48 comm="kworker/1:1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 593.145241][ T30] audit: type=1400 audit(1750594407.844:4866): avc: denied { egress } for pid=5922 comm="kworker/1:4" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 596.982930][ T7997] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 598.264993][ T30] audit: type=1400 audit(1750594412.964:4867): avc: denied { egress } for pid=8002 comm="kworker/u8:23" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 608.505087][ T30] audit: type=1400 audit(1750594423.204:4868): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 608.528547][ T30] audit: type=1400 audit(1750594423.204:4869): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 609.799143][ T30] audit: type=1400 audit(1750594424.494:4870): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 610.422788][ T30] audit: type=1400 audit(1750594425.124:4871): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 618.746321][ T30] audit: type=1400 audit(1750594433.444:4872): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 618.770320][ T30] audit: type=1400 audit(1750594433.444:4873): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 623.866079][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.986152][ T8010] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 656.298593][ T30] audit: type=1400 audit(1750594470.994:4874): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 656.514377][ T30] audit: type=1400 audit(1750594471.214:4875): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 656.730004][ T30] audit: type=1400 audit(1750594471.424:4876): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 657.158104][ T30] audit: type=1400 audit(1750594471.854:4877): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 658.022042][ T30] audit: type=1400 audit(1750594472.724:4878): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 659.750091][ T30] audit: type=1400 audit(1750594474.444:4879): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 660.982724][ T7994] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.301990][ T30] audit: type=1400 audit(1750594477.994:4880): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 664.822935][ T30] audit: type=1400 audit(1750594479.524:4881): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 665.098207][ T30] audit: type=1400 audit(1750594479.794:4882): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.1.50 dest=43702 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 670.214155][ T30] audit: type=1400 audit(1750594484.914:4883): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 684.037957][ T30] audit: type=1400 audit(1750594498.734:4884): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=44602 daddr=10.128.1.50 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=0 [ 685.305045][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 692.982084][ T8010] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 710.914575][ T30] audit: type=1400 audit(1750594525.614:4885): avc: denied { egress } for pid=761 comm="hwrng" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=0 [ 711.542088][ T31] INFO: task kworker/1:2:977 blocked for more than 143 seconds. [ 711.549755][ T31] Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 [ 711.557512][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 711.566414][ T31] task:kworker/1:2 state:D stack:22136 pid:977 tgid:977 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 711.578665][ T31] Workqueue: usb_hub_wq hub_event [ 711.583737][ T31] Call Trace: [ 711.587022][ T31] [ 711.589985][ T31] __schedule+0x116a/0x5de0 [ 711.594564][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 711.599534][ T31] ? __pfx___schedule+0x10/0x10 [ 711.604470][ T31] ? find_held_lock+0x2b/0x80 [ 711.609646][ T31] ? schedule+0x2d7/0x3a0 [ 711.614122][ T31] schedule+0xe7/0x3a0 [ 711.618205][ T31] usb_kill_urb+0x253/0x320 [ 711.622825][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 711.627868][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 711.634015][ T31] ? lockdep_init_map_type+0x50/0x280 [ 711.639412][ T31] usb_start_wait_urb+0x250/0x4b0 [ 711.644563][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 711.650125][ T31] ? __asan_memset+0x23/0x50 [ 711.654765][ T31] usb_control_msg+0x326/0x4a0 [ 711.659546][ T31] ? __pfx_usb_control_msg+0x10/0x10 [ 711.664903][ T31] get_bMaxPacketSize0.constprop.0+0xd0/0x1f0 [ 711.670983][ T31] hub_port_init+0x690/0x3a70 [ 711.675769][ T31] hub_event+0x2c67/0x4fa0 [ 711.680227][ T31] ? __pfx_hub_event+0x10/0x10 [ 711.685236][ T31] ? interval_tree_remove+0x550/0xee0 [ 711.690636][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.695452][ T31] process_one_work+0x9cc/0x1b70 [ 711.700411][ T31] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 711.706957][ T31] ? __pfx_process_one_work+0x10/0x10 [ 711.712868][ T31] ? assign_work+0x1a0/0x250 [ 711.717495][ T31] worker_thread+0x6c8/0xf10 [ 711.722223][ T31] ? __pfx_worker_thread+0x10/0x10 [ 711.727351][ T31] kthread+0x3c2/0x780 [ 711.731431][ T31] ? __pfx_kthread+0x10/0x10 [ 711.736123][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.740901][ T31] ? __pfx_kthread+0x10/0x10 [ 711.745535][ T31] ret_from_fork+0x5d4/0x6f0 [ 711.750131][ T31] ? __pfx_kthread+0x10/0x10 [ 711.754775][ T31] ret_from_fork_asm+0x1a/0x30 [ 711.759542][ T31] [ 711.762715][ T31] [ 711.762715][ T31] Showing all locks held in the system: [ 711.770409][ T31] 1 lock held by khungtaskd/31: [ 711.775284][ T31] #0: ffffffff8e5c4880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 711.785194][ T31] 5 locks held by kworker/1:2/977: [ 711.790300][ T31] #0: ffff888140effd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 711.801348][ T31] #1: ffffc90004187d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 711.813129][ T31] #2: ffff888144f0d198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 711.822084][ T31] #3: ffff888144f29510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2906/0x4fa0 [ 711.832101][ T31] #4: ffff888144781768 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x292b/0x4fa0 [ 711.841889][ T31] 6 locks held by kworker/u8:18/7997: [ 711.847265][ T31] 2 locks held by getty/10127: [ 711.852127][ T31] #0: ffff8880370220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 711.861945][ T31] #1: ffffc900036352f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 711.872142][ T31] [ 711.874473][ T31] ============================================= [ 711.874473][ T31] [ 711.882933][ T31] NMI backtrace for cpu 0 [ 711.882944][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 711.882964][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.882973][ T31] Call Trace: [ 711.882978][ T31] [ 711.882985][ T31] dump_stack_lvl+0x116/0x1f0 [ 711.883013][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 711.883033][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 711.883056][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 711.883076][ T31] watchdog+0xf70/0x12c0 [ 711.883099][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.883116][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.883141][ T31] ? __kthread_parkme+0x19e/0x250 [ 711.883166][ T31] ? __pfx_watchdog+0x10/0x10 [ 711.883184][ T31] kthread+0x3c2/0x780 [ 711.883199][ T31] ? __pfx_kthread+0x10/0x10 [ 711.883216][ T31] ? rcu_is_watching+0x12/0xc0 [ 711.883236][ T31] ? __pfx_kthread+0x10/0x10 [ 711.883251][ T31] ret_from_fork+0x5d4/0x6f0 [ 711.883274][ T31] ? __pfx_kthread+0x10/0x10 [ 711.883289][ T31] ret_from_fork_asm+0x1a/0x30 [ 711.883324][ T31] [ 711.883330][ T31] Sending NMI from CPU 0 to CPUs 1: [ 712.001867][ C1] NMI backtrace for cpu 1 [ 712.001881][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 712.001898][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.001906][ C1] RIP: 0010:__orc_find+0x70/0xf0 [ 712.001930][ C1] Code: ec 72 4e 4c 89 e2 48 29 ea 48 89 d6 48 c1 ea 3f 48 c1 fe 02 48 01 f2 48 d1 fa 48 8d 5c 95 00 48 89 da 48 c1 ea 03 0f b6 34 0a <48> 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 [ 712.001943][ C1] RSP: 0018:ffffc90000a08790 EFLAGS: 00000802 [ 712.001955][ C1] RAX: ffffffff9141fb30 RBX: ffffffff90bc8de0 RCX: dffffc0000000000 [ 712.001964][ C1] RDX: 1ffffffff21791bc RSI: 0000000000000000 RDI: ffffffff90bc8dd8 [ 712.001973][ C1] RBP: ffffffff90bc8dd8 R08: ffffffff9141fb78 R09: 0000000000000001 [ 712.001982][ C1] R10: 0000000000000000 R11: 000000000000a887 R12: ffffffff90bc8de8 [ 712.001990][ C1] R13: ffffffff81a88789 R14: ffffffff90bc8dd8 R15: ffffffff90bc8dd8 [ 712.001999][ C1] FS: 0000000000000000(0000) GS:ffff888124853000(0000) knlGS:0000000000000000 [ 712.002013][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 712.002023][ C1] CR2: 000055ab31e15168 CR3: 000000000e382000 CR4: 00000000003526f0 [ 712.002031][ C1] DR0: 0000000000000040 DR1: 0000000000000004 DR2: 0000000000000003 [ 712.002040][ C1] DR3: 00000000000010e3 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 712.002048][ C1] Call Trace: [ 712.002053][ C1] [ 712.002061][ C1] ? run_timer_softirq+0x19/0x40 [ 712.002081][ C1] unwind_next_frame+0x2ec/0x20a0 [ 712.002100][ C1] ? run_timer_softirq+0x1a/0x40 [ 712.002119][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 712.002137][ C1] arch_stack_walk+0x94/0x100 [ 712.002151][ C1] ? run_timer_softirq+0x1a/0x40 [ 712.002171][ C1] stack_trace_save+0x8e/0xc0 [ 712.002186][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 712.002205][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 712.002223][ C1] kasan_save_stack+0x33/0x60 [ 712.002240][ C1] ? kasan_save_stack+0x33/0x60 [ 712.002254][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 712.002268][ C1] ? insert_work+0x36/0x230 [ 712.002280][ C1] ? __queue_work+0x3f8/0x10f0 [ 712.002292][ C1] ? call_timer_fn+0x197/0x620 [ 712.002308][ C1] ? __run_timers+0x569/0x960 [ 712.002325][ C1] ? run_timer_base+0x114/0x190 [ 712.002341][ C1] ? run_timer_softirq+0x1a/0x40 [ 712.002371][ C1] kasan_record_aux_stack+0xa7/0xc0 [ 712.002384][ C1] insert_work+0x36/0x230 [ 712.002397][ C1] __queue_work+0x3f8/0x10f0 [ 712.002412][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.002426][ C1] call_timer_fn+0x197/0x620 [ 712.002442][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 712.002461][ C1] ? __run_timers+0x559/0x960 [ 712.002479][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 712.002493][ C1] __run_timers+0x569/0x960 [ 712.002513][ C1] ? __pfx___run_timers+0x10/0x10 [ 712.002537][ C1] run_timer_base+0x114/0x190 [ 712.002561][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 712.002579][ C1] ? rcu_is_watching+0x12/0xc0 [ 712.002596][ C1] run_timer_softirq+0x1a/0x40 [ 712.002613][ C1] handle_softirqs+0x216/0x8e0 [ 712.002631][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 712.002648][ C1] __irq_exit_rcu+0x109/0x170 [ 712.002662][ C1] irq_exit_rcu+0x9/0x30 [ 712.002675][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 712.002694][ C1] [ 712.002698][ C1] [ 712.002703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 712.002717][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 712.002734][ C1] Code: 7b 72 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 00 2a 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 712.002746][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 712.002756][ C1] RAX: 000000000182d12b RBX: 0000000000000001 RCX: ffffffff8b800c19 [ 712.002765][ C1] RDX: 0000000000000000 RSI: ffffffff8de19d08 RDI: ffffffff8c1578a0 [ 712.002773][ C1] RBP: ffffed1003c56488 R08: 0000000000000001 R09: ffffed10170a6645 [ 712.002782][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 712.002790][ C1] R13: ffff88801e2b2440 R14: ffffffff90a80f50 R15: 0000000000000000 [ 712.002802][ C1] ? ct_kernel_exit+0x139/0x190 [ 712.002823][ C1] default_idle+0x13/0x20 [ 712.002834][ C1] default_idle_call+0x6d/0xb0 [ 712.002845][ C1] do_idle+0x391/0x510 [ 712.002862][ C1] ? __pfx_do_idle+0x10/0x10 [ 712.002877][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 712.002896][ C1] cpu_startup_entry+0x4f/0x60 [ 712.002929][ C1] start_secondary+0x21d/0x2b0 [ 712.002946][ C1] ? __pfx_start_secondary+0x10/0x10 [ 712.002965][ C1] common_startup_64+0x13e/0x148 [ 712.002982][ C1] [ 712.003946][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 712.467800][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 712.479587][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 712.489624][ T31] Call Trace: [ 712.492886][ T31] [ 712.495801][ T31] dump_stack_lvl+0x3d/0x1f0 [ 712.500385][ T31] panic+0x71c/0x800 [ 712.504269][ T31] ? __pfx_panic+0x10/0x10 [ 712.508674][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 712.514040][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 712.520021][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 712.525385][ T31] ? watchdog+0xdda/0x12c0 [ 712.529888][ T31] ? watchdog+0xdcd/0x12c0 [ 712.534294][ T31] watchdog+0xdeb/0x12c0 [ 712.538527][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.543204][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 712.548397][ T31] ? __kthread_parkme+0x19e/0x250 [ 712.553410][ T31] ? __pfx_watchdog+0x10/0x10 [ 712.558070][ T31] kthread+0x3c2/0x780 [ 712.562127][ T31] ? __pfx_kthread+0x10/0x10 [ 712.566699][ T31] ? rcu_is_watching+0x12/0xc0 [ 712.571451][ T31] ? __pfx_kthread+0x10/0x10 [ 712.576022][ T31] ret_from_fork+0x5d4/0x6f0 [ 712.580602][ T31] ? __pfx_kthread+0x10/0x10 [ 712.585172][ T31] ret_from_fork_asm+0x1a/0x30 [ 712.589929][ T31] [ 712.593146][ T31] Kernel Offset: disabled [ 712.597456][ T31] Rebooting in 86400 seconds..