last executing test programs: 2m32.12949735s ago: executing program 0 (id=2041): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) (async) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 64) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./file1\x00') (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x1000) (async, rerun: 32) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000400)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7bb25d031846c2676571e70b6010b971f7018134497dc8081502ebfac55a2e5bd49ce6e901878497680ef2bfbe331bbb7c66335fffe4dd7d8815f4e9dcceafde16229322753f403a4f98bee813f554f5d1d3a7e18ec6162229f62ef5986afdbc8ae0afbaa74881ae2b1255e28341d4c37f822fdb9421e12ce479aefb32fd8d2532c9d1121211753c5f65e68b5c4cdaa42b0baa734218accb2a115397d2a19317b9e7ceed2fc767e69234d7e4eb33bfd864726d7547f7e48869c8b50fb827564993ac46c42908d6260eaf6815f656f740a6e873aabbbbd867e2cc97bed6", 0xdd}, {&(0x7f0000000240)="c6a995c3bf50c438e07c5497ad7f7fc139f8babdf75884eb3c01463a5d854367654b8f50aa", 0x25}], 0x2, 0x0, 0x0, 0x4000}}], 0x1, 0x0) (async) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 2m31.994664925s ago: executing program 0 (id=2042): prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x6, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0xfd, 0x47}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x30, 0x3, {0x3, 0x21, "e6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) 2m29.787142113s ago: executing program 0 (id=2050): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB=' r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = socket(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x2, 0x0, 0x10, 0x0, 0x80000001}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f00000001c0)="0f01cb363e6464670fae880050000066b91406000066b85eacd44e66ba000000000f3066b90d03000066b8d715691966baa1495ef00f300f01370f01cf0f01c266b9be0200000f320f01c40f20c06635000004000f22c0", 0x57}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3}) 2m26.685184533s ago: executing program 0 (id=2057): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)) readv(r0, 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) unshare(0x7a000080) 2m26.231225388s ago: executing program 0 (id=2060): r0 = add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7fffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x7, 0x1, 0x0, 0xffff, 0x40cc5, 0x8, 0x7, 0xa, 0x4, 0x2, 0x1, 0x9, 0x1, 0x9aa, 0x101, 0x1, 0x1a449, 0x3, 0x40000003, 0x89, 0x2, 0xf27, 0x9ee7, 0xb, 0xe69, 0x3c, 0x2, 0x10001, 0x0, 0xfffffff8]}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(pcrypt(morus1280-avx2))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000040)="4dc07f94", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xc0ed0000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) accept4(r5, 0x0, 0x0, 0x80000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5ba868878d6ff3a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="000323bd7000fcdbdf2506000000080011000000000014001f00fc010000000000000000000000000000080011000000000014001f00fe8000000000000000000000000000aa0600020001000000", @ANYRES64=r4], 0x54}}, 0x800) dup(r1) keyctl$KEYCTL_MOVE(0x1e, r0, 0x0, r0, 0x1) 2m24.615099708s ago: executing program 0 (id=2063): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fchown(r0, 0xee01, 0x0) listen(r0, 0x50) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2m9.315090955s ago: executing program 32 (id=2063): inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fchown(r0, 0xee01, 0x0) listen(r0, 0x50) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$kcm(0x2d, 0x2, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) socket$kcm(0x2d, 0x2, 0x0) (async) socket$kcm(0x2d, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 33.607539691s ago: executing program 5 (id=2433): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, "1dc8b045db3f40966b9dcb5235da4a69"}, 0x18, 0x4040080, &(0x7f0000000040)={0x22, 0xd8, 0x1, 0xf4, 0x5}, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r4, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000100)={0x8, &(0x7f00000000c0)=[{0x8, 0x7}, {0x7, 0x7}, {0x3, 0x7}, {0xf00, 0x3}, {0xd05}, {0x9, 0x2}, {0x4, 0x5}, {0x46, 0x4}]}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000003) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.470959554s ago: executing program 5 (id=2440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = add_key(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x4007) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x6, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x6, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5a, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x4a, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0xffffff49, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x1, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) keyctl$link(0x8, r6, r6) (async) keyctl$link(0x8, r6, r6) keyctl$search(0xa, r6, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, r3) 29.85945996s ago: executing program 5 (id=2442): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8010}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"/44, @ANYRES32=0x0], 0x30, 0x8c0}], 0x1, 0x0) 28.92353438s ago: executing program 5 (id=2444): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2, 0x3}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, 0x0, 0x0, 0x6c, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) recvmmsg(r4, &(0x7f0000001a00)=[{{0x0, 0xfffffffffffffe98}, 0x4000000f}], 0xfffffffffffffd3b, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 28.277217705s ago: executing program 5 (id=2447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.64750988s ago: executing program 5 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2000000000000021, 0x2, 0x10000000000002) fsopen(&(0x7f0000000200)='afs\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x3}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 12.911282294s ago: executing program 4 (id=2491): syz_emit_ethernet(0x264, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff0aa7230c7a9386dd6aad086a022e0000fc020000000000000000000000000001fe8000000000000000000000000000bb043d00000000000001"], 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv4_delroute={0x38, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x2, 0x20, 0x20, 0x0, 0xff, 0x2, 0xff, 0x2, 0x1800}, [@RTA_METRICS={0x1b, 0x8, 0x0, 0x1, "387fdb5dba72feb2679e3efe0f1764759c2132841b5261"}]}, 0x38}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x1170, 0x1398, 0x238, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0x4, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) sendto$l2tp(r2, &(0x7f00000003c0)="e64dd8ed5165d090975cb36c67533cac53fdd6c2590e931b216e5c036c308e4f8fa9e76aadf2ae0baecb4b0dbad05f96a712efe7ae28d2faa259b35b71e845eef0782ad2bfa5a5359bd06ebb755e1a556bd9d7cdf0bf118e3304cfd82b19bf1980c5c0bd04c6f7b46fdc09c4a7aec17ebd457adc5a93e3754cacf1ee295c811508aa3cbe1d55677b982fe908f687a8dce5e84296523fb641be66f22dcf24ee31e6ad70a9f8649f18070b8bc40c", 0xad, 0x24000850, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0x64010101, 0x1}, 0x10) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000000c0)=0x8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x60, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000280)='veth0_vlan\x00', 0x1, 0x63, 0x61a7}) pipe(&(0x7f0000000040)) syz_usb_ep_write(r1, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 10.835979148s ago: executing program 2 (id=2499): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4) ftruncate(r3, 0x400000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x1, @pix_mp={0x3, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x9}, {0x7ff, 0xb325}, {0x10000005, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x2, 0x3}}, 0x460}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000380)='cubic', 0x5) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x400}, 0x8) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0xc) sched_getattr(r5, &(0x7f0000000300)={0x38}, 0x38, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @private2}, 0x1c) sendmmsg$inet6(r4, 0x0, 0x0, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0xa96) accept(r6, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0xbc3, 0x3}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10.622658996s ago: executing program 33 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2000000000000021, 0x2, 0x10000000000002) fsopen(&(0x7f0000000200)='afs\x00', 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10681, 0x189}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x3}, @IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20044002) 10.610229536s ago: executing program 4 (id=2501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000080000000000fe5f12ac156444c3d100850000002a0000001801000020207034bfa17732052500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000400b703000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002d80)=[{{0x0, 0xfffffffffffffeaf, 0x0}, 0xfd}], 0x1, 0x10043, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x200000000000000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRES16, @ANYRESDEC=r1, @ANYBLOB="c03b1ee6e731cfa13bc5f991e16def615e951f2936e2441f84271a0890b46fe54f15d0b6e3a9d33b64d41ed61a3be717c2a7eff005a6c30f41443b3c7801a9406f11df75a5e8b73703720a80631c7266f799bbbb828c6f97a3694b", @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000040)={0x0, 0x504c, 0x6, 0x1ff, 0x1, 0x40, 0x9, 0x3, 0x0, 0x4, 0x4, 0x1}) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000000200)="9d709978964d6f32313364f900814162e8fe4cf6baffbfd49f", 0x19}], 0x2}, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.822636831s ago: executing program 2 (id=2502): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @local}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe9, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080)) close(0x3) 9.646840073s ago: executing program 4 (id=2503): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0xfffd, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000680)=0xa, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe", 0xb, 0x6000000000000000, 0x0, 0x0) 9.461125935s ago: executing program 4 (id=2505): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[], 0x114}], 0x1}, 0x0) 9.357914549s ago: executing program 2 (id=2506): creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x11, 0x1, 0x3) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000021907800000000ffffffff050090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffb2146945a723ecb79378a0a7e148f7a1b8d9cfe2bb8bc875aabaf93dc7bea81e734b05224f84f28fb64fb6ac26001f22105a02309b30cab6933c8387ee9af0ef8788c55c72c8a7688cdda34ca36b472a"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r7, 0x5501, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r8, r7, 0x80000) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) memfd_create(&(0x7f0000000580)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\"j\xb8\xe7\xcd.\xb5\xf3\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xca\xf98\xf5\xef]h\xd9\xd0\xbe\x85\x01\x91\xdd\xf5;\xee\x7fu\xe5bu\x84\x04\xb3\xd0>\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW%\x12H\x9c\xd2\xfbR\xaaU%\xc1J\xfc\xff\xb2\xd7\xfcW\x93\x88\x86\xbf\'\xa3\x05>\xb5\x88\x9d\xe2\x92\x85\xbb,\x9c\xa7@\x05;s\xe3\xa5\"6\xd1u\x8a\xf1z\n\xa7\xcd\x0e`\xa0\xa3}\x8a\v{\r\xaa\x98y( ^\xbc\xfd\xbfK-\xb6\x97;C{\t\xa0`\xfd\x13\x1f\xa1L/e\x17\x11L{\v\xbe\x1d\xa7\xba\x05\x8cN;\x93\x94\b\xc3O\x12F\x19S\xf0\xc1\xc8\xd59j\x90\xf7\xa8\xcaC\x00q\xa4\xef\xbd0\xea\x85e\xebU\xb9X\xc9;|\xb1\xc6\xb89<\x82\x85n\xf1~\xffm8\xec{\v\x14o95\xe4p\xaa\x05\xd9\xd8A\xe2\x82\xa7\xe9)\xdb\x01\xcb\x9d@\xcfrL\xecl\x97\x0e\x9cYm]1\xac{A\x90\xa8\xe0`7X\xd6\xcf\xebh\xb0\x88}\xdd\xa6\xff\x90Cx\x9d\x94\xe2\x80H\xc0\xc0h\rK\x06\x9e\xdc\xd3V\"\xa8\xb26Zx\xd2\xdd\'\x0e#-;/\x10\x9ad\xc4&\xc0\x84w\xd2mi\x10\x1b&&\xc3\x9e', 0x6) 9.356740978s ago: executing program 4 (id=2507): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x95, &(0x7f0000000400)=ANY=[@ANYBLOB="120150f5020000402505a1a440000102030109028300020101f0030904000001020d000009240600018cb2570c05240000800d240f0104000000a38fe3e089030005000506341a00040e0c241b00000200fa0c241b04000f00024506000a07240a0f098103042402040905810300000c02000904010000020d00000904010102020d000009058202000100000000000000"], &(0x7f0000000540)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xf1, 0x0, 0x4, 0x40, 0x8}, 0x33, &(0x7f0000000500)={0x5, 0xf, 0x33, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x7, 0x9, 0x7fff}, @ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x8, 0xff0f, 0x9, [0xff3f00, 0xffc000, 0xff0f, 0xc0, 0xff00, 0xffff00]}]}}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x24000890) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r1, 0x703d, 0xf90, 0x2}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x1fc, @local, 0x1}}]}, 0x60}}, 0xc0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000020000180060001000200000033bf050000000000090006006e6f6e6500000000"], 0x34}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0001a9a07000ffdbdfa6000080000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004084) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000580)=@conn_svc_rsp={0x0, 0x0, 0xa, "db74c93e", {0x3, 0x101, 0x0, 0xf7, 0xa, 0x5, 0xc1}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) pread64(r1, &(0x7f0000000080)=""/120, 0x78, 0x11a9) 9.227440484s ago: executing program 3 (id=2508): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.844136151s ago: executing program 1 (id=2509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x47, 0x5a, 0x94, 0x8, 0x133e, 0x815, 0xf92e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xec, 0x0, 0x0, 0xff, 0xf5, 0xc5}}]}}]}}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x100000000000000, r2}) 8.161117579s ago: executing program 2 (id=2510): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) symlink(0x0, 0x0) r3 = semget$private(0x0, 0x6, 0x3b1) semtimedop(r3, &(0x7f0000000180)=[{0x0, 0x5, 0x1800}], 0x1, &(0x7f0000000200)) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x801, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x100}]}}}]}, 0x40}}, 0x0) fsetxattr(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="757379722e636f6e74726f6c0003352e7d30417f7c968ff6c76e6dc2bf343838db1322570ce41855de702121a2221b81c8c7abf4ec3a160ec9f4f6bba9f6617dd1dc0b3bc498b29a0054ea4cbc59fe8cf9543a0a3edd82891fe1d97bbacfb8d5b9c4ad0258ff8aa6392a0a7e3f51b2d26f7c9930556fa402480fbf91a6eb72d3c5a18e7c3c9f486a25c4179b0e4df0a7090000004975918d5742de"], 0x0, 0x0, 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x0, 0x1}], 0x1) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = userfaultfd(0x80001) r7 = socket(0x10, 0x3, 0x0) bind$netlink(r7, 0x0, 0x0) write(r7, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r7, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5a8}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 5.988114388s ago: executing program 4 (id=2511): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) pread64(r0, &(0x7f0000000840)=""/184, 0xb8, 0x9) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0xcc26e1e6c92d5066) (async) close(0xffffffffffffffff) r3 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) openat(r2, &(0x7f00000000c0)='./bus\x00', 0x102, 0x0) (async) fcntl$setlease(r3, 0x400, 0x1) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) 5.551587987s ago: executing program 3 (id=2512): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.801382452s ago: executing program 1 (id=2513): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) syz_open_dev$hidraw(&(0x7f0000000140), 0x9, 0x40802) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.479500904s ago: executing program 3 (id=2514): r0 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES16], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="4db80df758b14ab7e1fbcb667326410000004e"]) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="88f1297a2a4f534def33a55f2d94788e8328cd948d2b1568bab7d23e1cc3c7692b545d1f2e730ec2d8e3645fc9afc71963c566d1ea9bf6bf23fb6491846c8c6cd6f5bc09498717a210d6785464cc562b98c52401e7086a75bd8e67a83ffb44b9ab9ed170c915024cd65ecff6037cac5f1b11a10bbda39f72202028b3728a778da6e03ce350d101a8fc5d0e0d8b7f871266e41df4f9e3b604474cffbfe3e781bccf8d125759bb1dbae34c78f1ab81ac201fb67b93d06afa8d589783342cc36ca0827f126e34", 0xc5}, {&(0x7f0000000380)="4883463146813a88b369e6a6faa7a66fe826148ebf495ee7720b3abcb17d8ac87b9fcbb5074e4133c5a4e1ea60f987b521fa621fecac77092e6145deff0d10d903399f5b73f865d5c46d66305e578cf8acb80c385166d168a0b270adf13941dfa87210b25686ba2b9a7ab39d4ff28579447e23e61d11f03026833c3e072b8d85af429a85adafa8729a6f83966bde6e0e7d2552b32f2b64f87a8e5b83f461b4cd72af2a1a128381dfd6d37340e6d0b046b35618a3d0", 0xb5}, {&(0x7f0000000440)="eb38c8cfaa940703c8db28b3e4f8f3ed7c2915387f66d6f2cbf2513172a111f83ea98f6717fe24c5ee9320c395e5a370dc228fa4a26d9b67f824a145d2b90c0a5f7be4065a56fe4b9bcb09c5b1f22d6936860bc02dee7c3f17cd04bc192777f2279fe4a47bcdb4dcb19c17c31a9325ccdd0cd192fd3bdfaff05115d62697443d9d20885b5a8bf8bbe09467", 0x8b}], 0x3, 0x0, 0x0, 0x20048844}}, {{&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000580)="54f58b7fa52a95bd00903192f536d612f91ce7828fad3007e35f57292cd8fb795d2641693d0309c8743163c4e9aee5be2b5d4123848047a8b9e7214722e8ae0aca6e8444ed47dddaecad3333f2a1b3f493892a18b6e15297e376515109b36ba1542bfe2d6dac1f7064c9e239335fc09708e6c94346b5fec9cda9be62ab77708274e154553b5fbed99e4f0eae9359baa5ba71c6c71aa5c17e18271b0186a2a9fac91f6b", 0xa3}, {&(0x7f0000000640)="502880d34a73695c912f96799d25db903ca039ddd64593de8731d1fc29b05cfaab9c50f55af0642b4d1af5c3fb6942c157d2b863f318b458c65518505264c8945ab8a88829012f082a9ac4f1800d8d6ff467597da4e4f17af1f51760ca8bb1b5a107c54516d38ea1cc366bd0955735ad79d6f1c534127d56305ec71b", 0x7c}, {&(0x7f00000006c0)="7c5aa71112c19c072ce60c52605fe1c5b1fb6e9e399fc9f5480572b7d8164e5cd6e71911599992f51422efe972e095f743ce98058727e7d14193386ed8074efed3f342c80af98d9011def927036d99b21a5cc8e2ff3966cf9e3e2ea5860b1cf676e062c2473719e59fd9244fe6907f704ee340b9742281ee792a6aec6dc8df6aea6fd50a045fe4d03137b1fd92fa947763744316fcfd60abe9c26822626bee574d32", 0xa2}, {&(0x7f0000000800)="8766acaadcacf7bf8f4973f1e04e0c2d17ea940799e982eee79cae147a63dc17ded81f0fafc4a1b41b5b2a79868821df0e35c25df6a7dadcbf85caa7966b5a801c88886c47a5d2c8fce24fcb49c7d4a352e7668bddace55c21ab2d5b44bd138ee5bc6ed8e12819a7af7fe1ee845f5200d29455133b8f09", 0x77}, {&(0x7f0000000880)="54f281c4a99b851f1343ef7d162ffb0ca606b4ba24ab2b8ae1a1b777e575f286c08c01ce2836191d1ea7538d55555a96fb2fdad7a21f3325668c8b3c1f686dab9cbce2d1f946c32314b45d698ce6a98f9d3e1f9a49e38f5a0294a9a392d42b7ec74d28cfededa81423a16dbdf316867ec1bd82534b5b5669973cd38bdcfcbf684097d3d90df83630", 0x88}], 0x5, &(0x7f0000000c40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x34, 0x1, 0x1, [r3, r4, r4, r3, r4, r2, r1, r2, r2]}}, @rights={{0x34, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, r2, r4, r2, r3, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0xc8, 0x10}}, {{&(0x7f0000000d40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="aae46ed577f83136595fe7e60577a03bbd2aa10922262c6e59dfbac3a1e2ae55b37644589d5ec896c9dd9a7a888313c82babde2933d8cdfc63ab06568469ae52c4f7ed06ca2bd83bf8591118933a650216e71ad6f90bd3e90a03ed5795f8a2ecddd39e583522fa4545cc1e17092e2c96264262a72bd0465418ff3e28d6f9fbb16ae5fdc917db02c9e8441cb9a267cc963c10314cac9bc41d7fa3d4ef32e18f3af327bec72b745fa82ffa410be1620e9e37cefe836d51c27d186e4833e2c2d0cb669b02086f4926bdc7c0efacd240c1ccffddc0db", 0xd4}, {&(0x7f0000000ec0)="4e2ba9c6cd9b45f5f00187071c9979fe1d67e366ac79c002aa4261d72c7eb0c8bd0caa3beb1b93955e0dd254cfd8f0588ba84e35341d616c9fc002f0ce716bf640eea103c6a558174d5880a10ac2fc89e9970a2319b7af5eeef66443160a16ccd133c6567b6d159e1f935e6f68edbb00e8a3563eef4bc7e7e01686a3a314ca5f3212979c6e8e57dab8b0da66c562ca66d2b2d5639ec81cd58391956a2e0dff29e20a8133f2fb47", 0xa7}], 0x2, 0x0, 0x0, 0x200000c4}}], 0x3, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80201) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_init(0x4, 0x2) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mbind(&(0x7f00009f4000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000000c0)=0x6, 0x6a0e, 0x4) sendfile(r7, r7, 0x0, 0x200000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.919106096s ago: executing program 2 (id=2515): syz_usb_connect$cdc_ncm(0x3, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 3.251368808s ago: executing program 1 (id=2516): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x50}}, 0x91) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a", 0x20}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.229780295s ago: executing program 3 (id=2517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 1.971254745s ago: executing program 1 (id=2518): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{}, [@remote, @bcast, @remote, @remote, @bcast, @remote, @rose, @rose]}, &(0x7f0000000080)=0x48) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0), 0x6) write$snddsp(0xffffffffffffffff, &(0x7f0000000100)="597210b387a21814b21d76cca344fdde45ae01797b5b51fb3d645ed15dbd30469ff89792c6a067cdd8836ca17f9798e0a8a9c714b2a3c788521b13e699957c1aea5d55c1a54d98d82edd5e20b04beba998ed5d2567abf1134f135d4c00e76434bd004530c8450b252fa3b5df4f1d8081eaf2f0da5e10229e6adb7dcb7945d03e2fba52a99ea00fb232b74e65d509ff72fa2e7b5bfaad7e7c0f6a6913d6baef228683d4d403f3aeeda7819242cec17ff6506fe077dd5a846e7fcc3757f58ba23a9d59e31fa403964904930b16b43ad58b", 0xd0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="5a9c", 0x2}], 0x1, 0x0, 0x0, 0x8001}}], 0x1, 0x54) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000002c0)=0xff, 0x4) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000300)='.pending_reads\x00', 0x8881, 0x23) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000340)={0x0, 0x1, 0xba17, 0x401, 0x2, 0x2, 0xffffffff00000001, 0xff, 0x0, 0xfffffffffffffffb, 0x81, 0x3}) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x7, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7fffffff}}}, 0x84) r4 = getpid() prlimit64(r4, 0x9, &(0x7f0000000500)={0xfb3e, 0xae}, &(0x7f0000000540)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000580)={0x0, 'batadv_slave_1\x00', 0x1}, 0x18) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f00000005c0)=[@wr_drn={0x6e, 0x20, {0x1, 0x9}}, @in_dx={0x82, 0x20, {0xf598, 0x2}}, @in_dx={0x82, 0x20, {0xac57, 0x2}}, @uexit={0x0, 0x18, 0xfffffffeffffffff}, @uexit={0x0, 0x18, 0x3e78}, @wr_drn={0x6e, 0x20, {0x0, 0x80000000}}, @cpuid={0x14, 0x18, {0x7, 0xa}}, @wr_crn={0x46, 0x20, {0x2, 0x7c}}, @wr_drn={0x6e, 0x20, {0x2, 0x800}}, @uexit={0x0, 0x18, 0x7ff}, @wr_drn={0x6e, 0x20, {0x7, 0x49e}}, @rdmsr={0x32, 0x18, {0xbdd}}, @wr_crn={0x46, 0x20, {0x8, 0x1}}, @in_dx={0x82, 0x20, {0x44d7, 0x3}}, @rdmsr={0x32, 0x18, {0xb72}}, @cpuid={0x14, 0x18, {0x80000001, 0x8386}}, @rdmsr={0x32, 0x18, {0x9e6}}, @cpuid={0x14, 0x18, {0x8, 0x400}}, @set_irq_handler={0xbe, 0x20, {0x3c}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @in_dx={0x82, 0x20, {0x3650}}, @wr_drn={0x6e, 0x20, {0x6, 0x10001}}, @rdmsr={0x32, 0x18, {0x3ac}}, @wr_crn={0x46, 0x20, {0x8, 0xa}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x96}, @rdmsr={0x32, 0x18, {0x81c}}, @out_dx={0xaa, 0x28, {0x8a2d, 0x2}}, @rdmsr={0x32, 0x18, {0x895}}, @set_irq_handler={0xbe, 0x20, {0x9a, 0x2}}], 0x358}) copy_file_range(r5, &(0x7f0000000980)=0x24ec0, r2, &(0x7f00000009c0)=0x5, 0x9, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000c80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000dc0)=0xe8) r8 = geteuid() read$FUSE(r2, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000003680)='./file0\x00', &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000003740)={{{@in6=@mcast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000003840)=0xe8) sendmmsg$unix(r2, &(0x7f0000003900)=[{{&(0x7f0000000a00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a80)="320ce24401016bf6d8b8de9c185667c3da9a310d51034f9a0f83381227f16fbe3ccfbeaa677e7aad2d9f3dea90f068bdd68394cf4d3bf3afc58df9b1f21927ad0523052a362722ad897117ef05b3762fe760eb0d08f52fee6858d1941cf87fb0c0b9af5b4808d80f0a6b2381c88ca1592b6d92265d90244754328792c79a7eae135bd81642c97012be3da4c2904a6b168d135568d89ab6a772", 0x99}, {&(0x7f0000000b40)="5163ea48e9500410ec624f4de9e545a7f8b049711988a4b4a16f9b84327a5c80434f44c430a2c22af75d891421080cae58f2b1c84fd90cfade1c2f9080ef90d060c94b5bf8a1add8ce659317d30805c3740c92f4b6e18531634942a1e1ab6295ab2f3683701b145469b83dc004e2944e6ed7a353a75af73815e0217f2eda2c37e071f58ae3d0abd2b99451014b82c076ffb802939ffc7c8f0b0b44259c04d50296a01dd222a124cd8a6b6564fc7f8e050d431ca6727a881ba4da81042036b0cc8278f172d1fa", 0xc6}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, 0xee01}}}], 0x20, 0x80c0}}, {{&(0x7f0000000e40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000ec0)="97857d97d3b3fd511364c7dc17bd894c1b1a826e6f3143782cb969dfc2c596d07bfdf9a2c32f5385bd14ab6752224cd4bd673a730598bfbafe623c2f85e240a87a20755ac546f2f2100d44395010c76a79cdb5e673d4c1b132f5c46e83bd15b6adf88ddea9c1d2e944942eacd0662a3e622ac5ba5679cc3f58a4e7f4147c07aade073d47776f5bf1026c76410a7f189d89b2ed3464a22c28214fbc2cca06dc4fb254bf891d10d059bdfed3c823e93ccc0d0207464812a15216976eb9e84b97f620", 0xc1}, {&(0x7f0000000fc0)="41f6aec9462207db9318240efee2a3b180043e38c29cfd444ef93ed7086b02d8733fb2812fa1f16e612f69eff4e9b2ca3ffb1da70b8374dcdcdf6db90bf1a58f2ce649b55c7208d69a75ec1d2f29abdb27f8fb52839af68e76966c9da8f331", 0x5f}, {&(0x7f0000001040)="4402b6d07bfa292edb23e4d166d13c7ad7c6341edbfccb3c6a3624c27826d555e5a99f440a35e0cf5459311ed517ca61ca246c6c8e888995d5f70d3cf7ac43fde9e2ba3fa31d603486648fbaf26cfbd95253d9d4658f751bc223df0f039320ea919f475e685c01a670be8b6338a090ba103d9d64012270400388b89d0757eda263310bb69e2b036e5a84a9aa8cd46a3f8fff34e935b33a1974209db8d4c1da9914ecd5d70d6e71ebdf37f39cee396b861b4bce1b259d7cb1eb46b023b02e1de5693ab850a20a886aa0b0519187a7b3f443d2b8e06d73e753a23ae9e92e76d2", 0xdf}, {&(0x7f0000001140)="039d7951b596300d3d02b42190c88d2fd1a715b93dd3f039f1936ebc6a9a2d9e9dd5cfc91f487bd276493f4eca2f9ecd031f7f343431c2dac9a61c32ff7b2e89a5f5013bb9c38eac816ce6856080463431ad52dec8d291ebdfaeb5a9cac8b2dd883349a64513e2f0128faa67de8775169c231e66e3f7040261885cb6", 0x7c}, {&(0x7f00000011c0)="0f68843cb7b1c2f07f8a1983082bdfa48f02848ded3f414febdf01befee682ac204ae29d523237ab7d556e837a2cae539526d02421e81824087c378935963c28d394629505196557d64a62732a3aa7d86c91bdcb22ea7895bd3f30e466a8", 0x5e}, {&(0x7f0000001240)="b7455d2f1d944e74f99e5714d04a0e8a89757d6c1164ba5305101aa4b7", 0x1d}, {&(0x7f0000001280)="d1", 0x1}, {&(0x7f00000012c0)="5d231faf3cf130768973d5a4147256619d4d8d506c6c62f5183f92d352d882a9d162e2ef1c9445eec1a8d3f03a9a1a1dc25e1f843d7922b28d7db1ce6ff58de1649d20b6c37c715b2d1c22390c1ad1dd1a267c999e26fb126ca936a2a63a84ed53b4efc0158a8adca1c61a35787fc2c03cb1b18ae34354e14723892be6171e4894bf1ae8d3c75999307214932e438107f4", 0x91}], 0x8, 0x0, 0x0, 0x45}}, {{&(0x7f0000001400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001480)="2fb9b94d1bc778", 0x7}, {&(0x7f00000014c0)="d4c9ed85556f7cb3c26ea3840e", 0xd}, {&(0x7f0000001500)="a7f9", 0x2}, {&(0x7f0000001540)="db8837e64df69315cb461fcbf919cdc95b36212177d07421b9031581b967cd7020", 0x21}, {&(0x7f0000001580)="00f545b6337c1a4028a080da6be963fd91e5", 0x12}], 0x5, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r4, r11, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, r13, 0xee00}}}], 0x80, 0x4000001}}], 0x3, 0x0) lseek(r5, 0x0, 0x3) r14 = syz_clone3(&(0x7f0000004b00)={0x9000c000, &(0x7f00000039c0), &(0x7f0000003a00), &(0x7f0000003a40), {0x23}, &(0x7f0000003a80)=""/5, 0x5, &(0x7f0000003ac0)=""/4096, &(0x7f0000004ac0)=[r10, r10, r10, r4, r6, r4], 0x6, {r2}}, 0x58) ptrace(0x8, r14) write$P9_RFSYNC(r2, &(0x7f0000004b80)={0x7, 0x33, 0x2}, 0x7) write(r2, &(0x7f0000004bc0)="cb6dcd2be1cc66c424a2330a759972089c4bbf9f5326640b3f293cc1a1f6d51f9cc2b46082d847b1f09a0e5d60014b2776379807d55a0d9962481c68a17c3bf44a1047edf475153f352f0e9505ba9cffa96b4706af0e96bb61ec54db859d45fb", 0x60) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000004cc0)={'erspan0\x00', &(0x7f0000004c40)={'syztnl1\x00', r12, 0x20, 0x40, 0xc, 0x1, {{0x16, 0x4, 0x2, 0x0, 0x58, 0x68, 0x0, 0x2, 0x4, 0x0, @empty, @loopback, {[@generic={0x94, 0xe, "51b9f907d5eb82150d277603"}, @rr={0x7, 0x13, 0x5, [@multicast1, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x25}]}, @ssrr={0x89, 0x13, 0x18, [@private=0xa010101, @multicast1, @loopback, @multicast2]}, @generic={0x88, 0xe, "1898db111d26afdd7618185f"}]}}}}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000004f80)=@IORING_OP_RENAMEAT={0x23, 0x7, 0x0, r2, &(0x7f0000004f00)='./file1\x00', &(0x7f0000004f40)='./file0\x00', r2}) 1.968837227s ago: executing program 3 (id=2519): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0x96066ccddc7e458b, 0x5}}}}]}, 0x40}}, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000014c0)={0xffffffffffffffff}, 0x4) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001500), 0x40, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, 0x0, r6, 0x0, 0x46) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x18, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x1, 0x6, 0x9, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0xfffffffd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe904}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000015c0)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r12 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r13, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000004200)={0x50, 0x0, r14, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r13, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r13, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x2, {0x0, 0xf, 0x10000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x9, 0x0, r15, 0x0, 0xfffffffc}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0x4000000, 0x0, 0x73, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0xffffffff, 0xf4}}, {0x0, 0x0, 0x8, 0xffffffff, 'group_id'}}]}, 0x0, 0x0, 0x0}) r16 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000017c0)=@bpf_tracing={0x1a, 0x9, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0xcd, &(0x7f00000013c0)=""/205, 0x41100, 0x21, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x7, 0x5, 0xd}, 0x10, 0x230ea, r3, 0x8, &(0x7f0000001700)=[r8, r4, r5, 0x1, r8, r10, r11, r12, 0xffffffffffffffff, r17], &(0x7f0000001740)=[{0x3, 0x4, 0x7, 0x6}, {0x1, 0x3, 0x2, 0x1}, {0x3, 0x3, 0x5, 0x4}, {0x2, 0x2, 0xa, 0x7}, {0x1, 0x3, 0xe, 0x8}, {0x0, 0x3, 0xa, 0x3}, {0x4, 0x1, 0xd}, {0x5, 0x4, 0x9, 0x8}], 0x10, 0xc4}, 0x94) syz_clone(0x0, &(0x7f00000003c0)="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", 0x1000, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="e51bb1c0426e51e87a118e6a7e78d6c14e40841147611180a463664565ed5e00b780e67392dc50fe0a7b01d005bc5a20a5af00585f3b08baf6313925cc42be97dc3a807e9e81ead61af19cde03bfd8b4fb2581a43e9fc5d52889b43b4441cc429daf9340159791b067be0fd89ba5efb6535fd685073294c0afc795067dbd872a5cad8f87ed4d3c06fdd554ff3270b92009e01d3e69019f98c7cfbadbfef1783441e99d77fb5e8346c6eb0f") 1.967430482s ago: executing program 1 (id=2520): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = fsmount(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) fchdir(r4) r5 = inotify_init() r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x84240, 0x0) write$binfmt_elf64(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460d04000c028000000040000003003e00ecfffbff940200000000000040000000000000fa4c02000000000000000000000000380001"], 0x78) close_range(r5, r6, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.671332232s ago: executing program 3 (id=2521): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x27, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@lli}, @alu={0x4, 0x1, 0xb, 0x8, 0x3, 0x2, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x0, 0x3, 0x0, 0x3, 0x8, 0xc, 0x10}, @ringbuf_query, @map_idx={0x18, 0x8, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x592, 0x52, &(0x7f0000000180)=""/82, 0x40f00, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0xa, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x0, 0x5, 0x9, 0xa}, {0x1, 0x2, 0x2, 0x1}], 0x10, 0x4}, 0x94) (rerun: 64) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r3, 0x25, 0x8, @void}, 0x10) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x9, 0x0, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) tkill(r0, 0x12) 959.223274ms ago: executing program 1 (id=2522): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0xa}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) move_pages(0x0, 0x0, &(0x7f0000000000), &(0x7f0000001180), &(0x7f0000000000), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000448000/0x1000)=nil, 0x1000, 0x2000000, 0x11, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000240), 0x9de6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) close(0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000000)=0x9, 0x0, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@local]}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000280)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00']}) 730.921178ms ago: executing program 2 (id=2523): socket(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x13, 0x0, 0x24) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, 0x0, 0x0) syz_io_uring_setup(0x73d3, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) 0s ago: executing program 6 (id=2500): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x300000000, 0xa00) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000002c0)=ANY=[]) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getuid() openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r6 = socket$inet6(0xa, 0x4, 0x80) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x218, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0x8, 0x0, @random='\x00xr\n'}, {0xc, 0x0, @random="6a5d04b0305c0667"}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1b4, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf0, 0x2, "dcacb7c831e36bfad685d1078c4c59a91479bb224a10e7482ec7a1fa995939b76d36ae9ba20133773635676ab1a708151b25a8c231f92e22dc2bca3e049608415062cdf0530cec6f30c752753626bddf13902901fcea1cb661734f7788f4ffdc7f029aea5ceb03b37e7bd3bf55e379d41f6ae1a39f1a827dda15417368069be2143861c1792d7e40304cbfca572cd69ed08290111d6df8c0b959eb2be88f14b25c0d975e8281691a0bc64aabb4d77e1b0be4d76acc2a3468081b1bf4dc4cf8b19e22ab6d5dcfec8b20cdd78ed69734f43829b9942cc63d1015f7a14b755b3f1c7cf5eef8bc7331fa1f7c6634"}, @NL80211_BAND_6GHZ={0xab, 0x3, "acc49f5dd14a57538b5b130adc1ca3a80f0cadfd4b8250f26dc57cdfe6df8f9388211638b103e95d0552bf864d3c8516783837458b4d6d390916765ab6f77bdc2f48ef2f16c49679d138648849e5c5b4db7e81e4e3fa2d7fc6591ec401cccf32ec57292139cb95cb322abaadedb784de75f77729604211d3d2e7b36f84d622fba1880035c5d72d5702c893f354339420893964f32a9e5076d7c0784230faa5111b11b70f0cc9a6"}, @NL80211_BAND_2GHZ={0x13, 0x0, "eec31eb0e881b29f32cda741cbce61"}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) fremovexattr(0xffffffffffffffff, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x1411) syz_emit_ethernet(0x48, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x12, 0x0, 0x0, @local, @local, {[@dstopts={0x89}], "31455408edf31db961ce"}}}}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) socket$netlink(0x10, 0x3, 0x400000000000004) kernel console output (not intermixed with test programs): 2/5 [ 717.633358][ T5860] cypress 0003:04B4:0001.0012: parse failed [ 717.640563][ T5860] cypress 0003:04B4:0001.0012: probe with driver cypress failed with error -22 [ 718.142098][T14499] xt_nfacct: accounting object `syz1' does not exist [ 718.383305][ T5136] Bluetooth: hci5: command tx timeout [ 718.498117][T14514] overlayfs: overlapping lowerdir path [ 718.553918][T14515] overlayfs: failed to verify upper (420/file0, ino=2337, err=-116) [ 718.562312][T14515] overlayfs: failed to verify index dir 'upper' xattr [ 718.569122][T14515] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 719.260113][ T5929] usb 3-1: USB disconnect, device number 48 [ 719.540745][T14448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.592877][T14448] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.627289][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.634477][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.672882][ T3463] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.680165][ T3463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.137925][T14448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.451003][ T5136] Bluetooth: hci5: command tx timeout [ 720.746729][T14448] veth0_vlan: entered promiscuous mode [ 720.774167][T14448] veth1_vlan: entered promiscuous mode [ 720.837778][T14448] veth0_macvtap: entered promiscuous mode [ 720.855165][T14549] tipc: Started in network mode [ 720.871673][T14549] tipc: Node identity , cluster identity 4711 [ 720.879288][T14549] tipc: Failed to obtain node identity [ 720.900758][T14549] tipc: Enabling of bearer rejected, failed to enable media [ 720.927675][T14448] veth1_macvtap: entered promiscuous mode [ 720.960177][ T5929] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 721.000770][T14549] syzkaller0: entered promiscuous mode [ 721.006409][T14549] syzkaller0: entered allmulticast mode [ 721.022785][T14549] input: syz0 as /devices/virtual/input/input47 [ 721.095032][T14448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.131113][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 721.143866][ T5929] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 721.152794][T14448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.262113][ T5929] usb 3-1: config 0 has no interface number 0 [ 721.312211][ T5929] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 721.494073][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.508042][ T3581] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.519833][ T3581] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.529832][ T3581] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.570883][ T5929] usb 3-1: config 0 descriptor?? [ 721.593205][ T3581] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.604165][ T5929] snd-usb-audio 3-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 721.613589][ T5942] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 721.708748][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.725805][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.760646][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 721.769211][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 721.806193][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 721.806211][ T30] audit: type=1400 audit(721.754:1559): avc: denied { mounton } for pid=14448 comm="syz-executor" path="/root/syzkaller.xO398C/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 721.970395][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 721.990042][ T5942] usb 2-1: Using ep0 maxpacket: 8 [ 722.876605][ T30] audit: type=1400 audit(721.754:1560): avc: denied { mounton } for pid=14448 comm="syz-executor" path="/root/syzkaller.xO398C/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 722.900206][ T5136] Bluetooth: hci5: command tx timeout [ 722.903171][ T30] audit: type=1400 audit(721.754:1561): avc: denied { mounton } for pid=14448 comm="syz-executor" path="/root/syzkaller.xO398C/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 722.939662][ T5942] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 722.971096][ T5942] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 722.981734][ T30] audit: type=1400 audit(721.764:1562): avc: denied { mounton } for pid=14448 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 723.005714][ T30] audit: type=1400 audit(721.764:1563): avc: denied { mounton } for pid=14448 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 723.028740][ T5942] usb 2-1: config 135 has no interface number 0 [ 723.049462][ T5942] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.057943][T14567] syz.5.2109 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 723.104201][ T5942] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 723.113644][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.122455][ T5942] usb 2-1: Product: syz [ 723.127022][ T5942] usb 2-1: Manufacturer: syz [ 723.130543][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 723.131984][ T5942] usb 2-1: SerialNumber: syz [ 723.146753][ T43] usb 4-1: config 4 has an invalid interface number: 72 but max is 2 [ 723.162304][ T5942] uvcvideo 2-1:135.230: Found Unit with invalid ID 0 [ 723.172859][ T5942] uvcvideo 2-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 723.182376][ T5942] uvcvideo 2-1:135.230: No valid video chain found. [ 723.194919][ T43] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 723.204070][ T43] usb 4-1: config 4 has an invalid interface number: 5 but max is 2 [ 723.212726][ T43] usb 4-1: config 4 has an invalid interface number: 13 but max is 2 [ 723.232634][ T43] usb 4-1: config 4 has no interface number 0 [ 723.238857][ T43] usb 4-1: config 4 has no interface number 1 [ 723.245825][ T43] usb 4-1: config 4 has no interface number 2 [ 723.254391][ T43] usb 4-1: config 4 interface 72 altsetting 11 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 723.266025][ T43] usb 4-1: config 4 interface 72 altsetting 11 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 723.289831][ T43] usb 4-1: config 4 interface 72 altsetting 11 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 723.303556][ T43] usb 4-1: config 4 interface 72 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 723.314925][ T43] usb 4-1: config 4 interface 72 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 723.326583][ T43] usb 4-1: config 4 interface 72 altsetting 11 has a duplicate endpoint with address 0x6, skipping [ 723.342602][ T43] usb 4-1: config 4 interface 72 altsetting 11 has a duplicate endpoint with address 0x5, skipping [ 723.353904][ T43] usb 4-1: config 4 interface 72 altsetting 11 bulk endpoint 0xD has invalid maxpacket 576 [ 723.418213][T12435] block nbd0: Possible stuck request ffff8880263ce000: control (read@0,1024B). Runtime 30 seconds [ 723.431144][T12435] block nbd0: Possible stuck request ffff8880263ce1c0: control (read@1024,1024B). Runtime 30 seconds [ 723.442473][T12435] block nbd0: Possible stuck request ffff8880263ce380: control (read@2048,1024B). Runtime 30 seconds [ 723.453665][T12435] block nbd0: Possible stuck request ffff8880263ce540: control (read@3072,1024B). Runtime 30 seconds [ 723.467795][ T43] usb 4-1: config 4 interface 72 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 723.482906][ T43] usb 4-1: config 4 interface 72 altsetting 11 has a duplicate endpoint with address 0x8E, skipping [ 723.494445][ T43] usb 4-1: config 4 interface 72 altsetting 11 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 723.506294][ T43] usb 4-1: config 4 interface 5 altsetting 3 endpoint 0x7 has an invalid bInterval 252, changing to 11 [ 723.517928][ T43] usb 4-1: config 4 interface 5 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 723.559336][ T43] usb 4-1: config 4 interface 5 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 723.579401][ T43] usb 4-1: config 4 interface 5 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 723.594700][ T43] usb 4-1: config 4 interface 13 altsetting 104 has a duplicate endpoint with address 0x7, skipping [ 723.608199][ T43] usb 4-1: config 4 interface 13 altsetting 104 has a duplicate endpoint with address 0x7, skipping [ 723.630184][ T43] usb 4-1: config 4 interface 72 has no altsetting 0 [ 723.637362][ T43] usb 4-1: config 4 interface 5 has no altsetting 0 [ 723.644956][ T43] usb 4-1: config 4 interface 13 has no altsetting 0 [ 723.662715][ T43] usb 4-1: New USB device found, idVendor=12d1, idProduct=70ac, bcdDevice=18.f9 [ 723.682750][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.694102][ T43] usb 4-1: Product: ä´‰ì“缓쉒ä—嶤僼䮮è¿ç“˜Ù•ëŸ¶ëœ•ï³§îº¥ê‹”î¸ä¹¡åº£æ¥ë®…醀䓨殶懭塒蒼ì“猑纮ä«íœºå·°â½”蛣ﳗêƒå³éº±ï£°å«Œæ§ƒï—‚쓔㿻똊㳹䊵ãœî‘ëšèš“矲작퉜〽쥉⟆竔᲌蜗顕廎ë¬ë¶€î‘宵ῠ[ 723.721550][ T43] usb 4-1: Manufacturer: 橆彣ç¸ç«ë¦ˆáˆ§è žè†šè›ƒè€œå±™ä¥´â›—䤊骸먚쉖䓥á’è¬ï¡Ÿpë¿“æ­¥î•ê£›ç„®ë¤¹ì˜’Ο쒀궘鼬ঌçŽç€ë¦…鷞㿈Ý驦௧ꜩⴆ顓逻㱺暘鮨礑í«î¢ì›…áªè¥‘Ꙅ⟳⬇íŒè¿‘絃ﺌ銲퇽䮪軣í‡ï±¾á‹¾è—”銒 [ 723.749456][ T43] usb 4-1: SerialNumber: 긒⌀å’ᮈ之ï™æ‚¼ã€‘퇡扭ⓗ呦뤣髯訶⟫╩䆪ꘘ窠ꨧë·á£•ä‘à½ì¢à¦°êµšé»à«œé½«ïŽá‹½îž»ã¿î£Ç‰ã‘‰î•¬àº·æšŒíŠ¿îš¾ç‰£é£»ã¼¥èŠ²êˆŠï‘뭸ੳî“é°è¼™å°†ìº„ᦆ緾闽꼵´騥ቮ衎矾˹ [ 723.866178][T14557] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 724.047683][ T5929] usb 3-1: USB disconnect, device number 49 [ 724.047783][T12541] usb 2-1: USB disconnect, device number 73 [ 724.656274][ T43] option 4-1:4.72: GSM modem (1-port) converter detected [ 724.732689][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.741503][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.775602][ T43] option 4-1:4.5: GSM modem (1-port) converter detected [ 724.804024][ T43] usb 4-1: USB disconnect, device number 73 [ 724.835882][ T43] option 4-1:4.72: device disconnected [ 724.867171][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2134'. [ 724.867548][ T43] option 4-1:4.5: device disconnected [ 725.010799][ T5929] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 725.074163][T14587] bridge0: entered promiscuous mode [ 725.085527][T14587] macsec2: entered promiscuous mode [ 725.173450][ T5929] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 725.185581][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.197231][ T5929] usb 3-1: Product: syz [ 725.202051][ T5929] usb 3-1: Manufacturer: syz [ 725.206843][ T5929] usb 3-1: SerialNumber: syz [ 725.215289][ T5929] usb 3-1: config 0 descriptor?? [ 726.296379][ T5929] usb 3-1: Firmware: major: 59, minor: 235, hardware type: UNKNOWN (198) [ 726.507158][ T5929] usb 3-1: no permanent extended address found, random address set [ 726.523202][ T5929] usb 3-1: atusb_probe: initialization failed, error = -524 [ 727.000603][ T5929] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 727.453839][ T30] audit: type=1326 audit(727.384:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.476712][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.600267][ T30] audit: type=1326 audit(727.384:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.623974][ T30] audit: type=1326 audit(727.384:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.678239][ T30] audit: type=1326 audit(727.384:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.701757][ T30] audit: type=1326 audit(727.384:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.747021][ T30] audit: type=1326 audit(727.384:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.793208][ T30] audit: type=1326 audit(727.384:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.819684][ T30] audit: type=1326 audit(727.384:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 727.840401][T12541] usb 3-1: USB disconnect, device number 50 [ 727.842602][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.924736][ T5929] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 727.997900][ T30] audit: type=1326 audit(727.384:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6b7598d810 code=0x7ffc0000 [ 728.118426][ T30] audit: type=1326 audit(727.384:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14606 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7598efc9 code=0x7ffc0000 [ 728.146910][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.180299][ T5882] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 728.180865][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 728.204417][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.242098][ T5929] usb 5-1: config 0 descriptor?? [ 728.351859][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 728.364862][ T5882] usb 6-1: config 0 has an invalid interface number: 236 but max is 0 [ 728.374581][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 728.386642][ T5882] usb 6-1: config 0 has no interface number 0 [ 728.541030][T12541] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 728.550597][ T5882] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 728.560073][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.578168][ T5882] usb 6-1: config 0 descriptor?? [ 728.589143][ T5882] snd-usb-audio 6-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 728.885136][T14640] tmpfs: Bad value for 'mpol' [ 729.454847][ T5929] logitech-hidpp-device 0003:046D:C086.0013: unknown main item tag 0x0 [ 729.491050][ T5929] logitech-hidpp-device 0003:046D:C086.0013: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 729.590095][T12541] usb 3-1: Using ep0 maxpacket: 32 [ 729.822805][T12541] usb 3-1: unable to get BOS descriptor or descriptor too short [ 729.823874][T12541] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 729.826040][T12541] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 729.826067][T12541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.826085][T12541] usb 3-1: Product: syz [ 729.826099][T12541] usb 3-1: Manufacturer: syz [ 729.826113][T12541] usb 3-1: SerialNumber: syz [ 730.054577][T12541] usb 3-1: Cannot retrieve CPort count: -32 [ 730.080260][T12541] usb 3-1: Cannot retrieve CPort count: -32 [ 730.127910][T12541] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -32 [ 731.004219][T14654] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 731.020746][ T5929] usb 3-1: USB disconnect, device number 51 [ 731.042153][ T43] usb 6-1: USB disconnect, device number 2 [ 732.453649][T14664] netlink: 'syz.2.2153': attribute type 27 has an invalid length. [ 732.910963][ T5882] usb 5-1: USB disconnect, device number 58 [ 732.919852][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.989490][T14673] netlink: 'syz.5.2154': attribute type 1 has an invalid length. [ 733.007507][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.061391][T14664] veth1_vlan: left allmulticast mode [ 733.101149][T14664] macvlan0: left promiscuous mode [ 733.106252][T14664] macvlan0: left allmulticast mode [ 733.264832][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.271853][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.278722][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.285835][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.292875][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.299906][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.308082][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.315559][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.325550][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.333029][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.340064][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.347092][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.355331][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.362793][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.369859][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.377033][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.384165][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.391520][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.398759][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.405920][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.415418][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.422467][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.430239][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.437189][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.444220][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.451361][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.459435][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.470614][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.477496][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.484415][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.492566][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.499371][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.506190][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.513380][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.520236][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.527627][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.534666][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.541525][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.548328][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.555339][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.562312][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.569185][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.576170][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.583289][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.590305][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.597247][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.604322][ T5136] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 733.800552][T14664] ip6erspan0: left promiscuous mode [ 733.807627][T14664] bridge1: left promiscuous mode [ 733.816619][T14664] vlan2: left allmulticast mode [ 733.870775][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.879305][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.032744][T14667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 734.168451][T14428] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.187581][T14428] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.215826][T14677] vlan2: entered allmulticast mode [ 734.221203][T14677] veth1: entered allmulticast mode [ 734.274621][T14428] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.319804][T14428] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.330394][T14428] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.395137][T14428] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.412074][T14428] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 734.421094][T14428] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.890071][T14560] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 735.731744][T14560] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 736.446645][T14560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.491638][T14560] usb 2-1: config 0 descriptor?? [ 736.703501][ T5813] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 736.712368][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.728477][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.737690][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.747089][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.761750][T14717] overlayfs: overlapping lowerdir path [ 736.778123][T14717] overlayfs: failed to verify upper (9/file0, ino=72, err=-116) [ 736.779525][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.785891][T14717] overlayfs: failed to verify index dir 'upper' xattr [ 736.785902][T14717] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 736.821167][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.838630][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.847938][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.858677][T14699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.869632][T14699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.880149][ T5882] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 736.893992][T14560] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 736.910146][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 736.918857][ T5813] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 736.927549][ T5813] usb 3-1: config 0 has no interface number 0 [ 736.934991][ T5813] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 736.946447][T14560] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 736.965941][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.978048][T14560] dvb-usb: Elgato EyeTV Sat error while loading driver (-19) [ 736.989245][ T5813] usb 3-1: config 0 descriptor?? [ 737.007938][ T5813] snd-usb-audio 3-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 737.050105][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 737.170335][ T5882] usb 5-1: config 0 has an invalid interface number: 236 but max is 0 [ 737.178665][ T5882] usb 5-1: config 0 has no interface number 0 [ 737.184977][ T5882] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 737.194470][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.589119][ T5882] usb 5-1: config 0 descriptor?? [ 737.597700][ T5882] snd-usb-audio 5-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 737.705828][T14723] [U]  [ 738.192623][T14560] usb 2-1: USB disconnect, device number 74 [ 739.390238][ T5882] usb 3-1: USB disconnect, device number 52 [ 740.046590][ T5813] usb 5-1: USB disconnect, device number 59 [ 740.145939][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 740.145955][ T30] audit: type=1400 audit(740.104:1579): avc: denied { map } for pid=14748 comm="syz.1.2174" path="socket:[52682]" dev="sockfs" ino=52682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.236547][ T30] audit: type=1400 audit(740.104:1580): avc: denied { accept } for pid=14748 comm="syz.1.2174" path="socket:[52682]" dev="sockfs" ino=52682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 740.281931][T14751] ptrace attach of "./syz-executor exec"[5812] was attempted by ""[14751] [ 740.294478][ T30] audit: type=1326 audit(740.254:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.317343][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.330884][ T30] audit: type=1326 audit(740.254:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.366569][T14755] binder: 14748:14755 ioctl c018620c 2000000002c0 returned -1 [ 740.408048][ T30] audit: type=1326 audit(740.294:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.430849][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.510638][ T30] audit: type=1326 audit(740.294:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.533512][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.695011][ T30] audit: type=1326 audit(740.294:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.717875][ C0] vkms_vblank_simulate: vblank timer overrun [ 740.733321][T14754] input: syz0 as /devices/virtual/input/input48 [ 740.739643][T14754] input: failed to attach handler leds to device input48, error: -6 [ 740.883160][ T30] audit: type=1326 audit(740.404:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 740.930103][ T5882] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 741.004996][ T30] audit: type=1326 audit(740.464:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 741.029703][ T30] audit: type=1326 audit(740.464:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.4.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 741.052580][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.246503][T14766] netlink: 'syz.3.2176': attribute type 1 has an invalid length. [ 741.304660][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 741.317332][ T5882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 741.330081][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 741.427412][T14766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 741.443790][ T5882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.588416][T14770] bond4: (slave veth11): Enslaving as an active interface with a down link [ 742.072481][ T5882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.085647][ T5882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.127864][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.620489][ T5882] usb 3-1: usb_control_msg returned -71 [ 742.626760][ T5882] usbtmc 3-1:16.0: can't read capabilities [ 742.650967][ T5882] usb 3-1: USB disconnect, device number 53 [ 744.183511][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'. [ 744.238877][T14799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2185'. [ 744.352157][ T5929] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 744.470188][T12541] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 744.620356][T12541] usb 4-1: device descriptor read/64, error -71 [ 744.760027][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 744.849847][ T5929] usb 3-1: config 5 has an invalid interface number: 168 but max is 0 [ 744.858181][ T5929] usb 3-1: config 5 has no interface number 0 [ 744.880143][T12541] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 744.902591][ T5929] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 744.930991][ T5929] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 745.058994][ T5929] usb 3-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0x23, changing to 0x3 [ 745.094533][ T5929] usb 3-1: config 5 interface 168 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 745.206278][ T5929] usb 3-1: config 5 interface 168 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 745.219363][T14811] overlay: ./file1 is not a directory [ 745.225248][T12541] usb 4-1: device descriptor read/64, error -71 [ 745.227609][ T5929] usb 3-1: config 5 interface 168 has no altsetting 0 [ 745.258755][ T5929] usb 3-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 745.270174][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.350160][T12541] usb usb4-port1: attempt power cycle [ 745.447830][ T5929] usb 3-1: Product: syz [ 745.454357][ T5929] usb 3-1: Manufacturer: syz [ 745.464927][ T5929] usb 3-1: SerialNumber: syz [ 745.478531][T14792] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 745.586372][T14801] syz.1.2184 (14801): drop_caches: 2 [ 745.739282][T14814] sp0: Synchronizing with TNC [ 745.760227][ T5929] usb 3-1: NFC: Unable to get FW version [ 745.762342][T12541] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 745.769597][ T5929] pn533_usb 3-1:5.168: probe with driver pn533_usb failed with error -90 [ 745.796526][ T5929] usb 3-1: USB disconnect, device number 54 [ 745.901478][T12541] usb 4-1: device descriptor read/8, error -71 [ 745.941644][T14818] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 746.041790][T14821] overlayfs: overlapping lowerdir path [ 746.054565][T14821] overlayfs: failed to verify upper (439/file0, ino=2449, err=-116) [ 746.062862][T14821] overlayfs: failed to verify index dir 'upper' xattr [ 746.069637][T14821] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 746.237481][T14823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.342821][T14828] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2193'. [ 746.528550][T12541] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 746.536715][ T5860] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 746.571018][T12541] usb 4-1: device descriptor read/8, error -71 [ 746.720040][ T5929] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 746.872137][ T5929] usb 5-1: unable to get BOS descriptor or descriptor too short [ 746.884208][ T5929] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 746.892921][ T5929] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 746.903586][ T5929] usb 5-1: config 63 has no interface number 0 [ 746.909801][ T5929] usb 5-1: config 63 interface 66 has no altsetting 0 [ 746.924258][ T5929] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 746.934465][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.942945][ T5929] usb 5-1: SerialNumber: Ã疲íŸë¬¦á¥«æ„¹Å˜ã°“협댺៑肬拥뜺 [ 747.095146][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.104548][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.113516][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.285579][T14840] tmpfs: Bad value for 'gid' [ 747.296310][T14840] tmpfs: Bad value for 'gid' [ 747.395014][T12541] usb usb4-port1: unable to enumerate USB device [ 747.480085][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 747.497620][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 747.510182][ T5860] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 747.522143][T14842] pim6reg: entered allmulticast mode [ 747.527535][ T5882] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 747.537051][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 747.545569][ T5860] usb 6-1: can't read configurations, error -61 [ 747.680438][ T5860] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 747.694296][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 747.696352][ T5929] uvcvideo 5-1:63.66: Found UVC 0.00 device (174f:8a31) [ 747.709150][ T5882] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 747.733922][ T5929] uvcvideo 5-1:63.66: No valid video chain found. [ 747.735692][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 747.752450][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 747.766986][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 747.778267][ T5882] usb 3-1: New USB device strings: Mfr=124, Product=0, SerialNumber=0 [ 747.788571][ T5882] usb 3-1: Manufacturer: syz [ 747.881614][ T5929] usb 5-1: USB disconnect, device number 60 [ 747.889619][ T5882] usb 3-1: config 0 descriptor?? [ 747.894948][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 747.902395][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 747.916379][ T5860] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 747.934470][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 747.949410][ T5860] usb 6-1: can't read configurations, error -61 [ 747.962952][ T5860] usb usb6-port1: attempt power cycle [ 748.190119][ T5929] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 748.310206][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 748.344516][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 748.364530][ T5860] usb 6-1: unable to get BOS descriptor or descriptor too short [ 748.378611][ T5860] usb 6-1: too many configurations: 83, using maximum allowed: 8 [ 748.417868][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.183421][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.242906][ T5860] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 749.249337][ T5929] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 749.254000][ T5860] usb 6-1: can't read configurations, error -71 [ 749.268417][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.277892][ T5929] usb 5-1: Product: syz [ 749.285991][ T5929] usb 5-1: Manufacturer: syz [ 749.291521][ T5929] usb 5-1: SerialNumber: syz [ 749.306302][ T5882] logitech 0003:046D:C295.0014: hidraw0: USB HID v0.01 Device [syz] on usb-dummy_hcd.2-1/input0 [ 749.322608][ T5882] logitech 0003:046D:C295.0014: no inputs found [ 749.390308][T14873] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 749.402541][T14873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22548 sclass=netlink_route_socket pid=14873 comm=syz.1.2204 [ 749.448745][ T5813] usb 3-1: USB disconnect, device number 55 [ 749.630331][ T5860] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 749.654747][ T5860] usb 6-1: Using ep0 maxpacket: 8 [ 749.661973][ T5860] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.672284][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.682453][ T5860] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.694718][ T5860] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.711932][ T5860] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 749.746233][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 749.760808][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 749.833758][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.797218][ T5860] usb 6-1: GET_CAPABILITIES returned 0 [ 750.811245][ T5860] usbtmc 6-1:16.0: can't read capabilities [ 750.856964][T14886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.958948][T14886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.011766][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 751.042482][ T5860] usb 6-1: USB disconnect, device number 6 [ 751.047952][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 751.155608][ T5929] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 751.190051][ T5929] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 751.725860][ T5929] usb 5-1: USB disconnect, device number 61 [ 751.810249][ T5882] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 752.021304][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 752.049867][ T5882] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 752.063714][T14903] loop9: detected capacity change from 0 to 7 [ 752.070086][ T5882] usb 4-1: config 0 has no interface number 0 [ 752.080767][T14903] Dev loop9: unable to read RDB block 7 [ 752.087325][T14903] loop9: unable to read partition table [ 752.087660][ T5882] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 752.112886][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.133131][T14903] loop9: partition table beyond EOD, truncated [ 752.135758][ T5882] usb 4-1: config 0 descriptor?? [ 752.155748][ T5882] snd-usb-audio 4-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 752.170091][T14903] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 752.891353][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 752.897631][ T30] audit: type=1400 audit(752.864:1626): avc: denied { write } for pid=14899 comm="syz.2.2212" lport=35317 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 753.501438][T12435] block nbd0: Possible stuck request ffff8880263ce000: control (read@0,1024B). Runtime 60 seconds [ 753.512413][T12435] block nbd0: Possible stuck request ffff8880263ce1c0: control (read@1024,1024B). Runtime 60 seconds [ 753.523542][T12435] block nbd0: Possible stuck request ffff8880263ce380: control (read@2048,1024B). Runtime 60 seconds [ 753.534722][T12435] block nbd0: Possible stuck request ffff8880263ce540: control (read@3072,1024B). Runtime 60 seconds [ 754.002313][T14933] overlayfs: overlapping lowerdir path [ 754.034896][T14934] loop9: detected capacity change from 0 to 7 [ 754.042645][T14934] Dev loop9: unable to read RDB block 7 [ 754.048201][T14934] loop9: unable to read partition table [ 754.054139][T14934] loop9: partition table beyond EOD, truncated [ 754.072844][ T5929] usb 4-1: USB disconnect, device number 78 [ 754.092498][T14935] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 754.113946][T14934] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.766173][T14947] loop2: detected capacity change from 0 to 7 [ 754.790849][T14947] loop2: [ 754.793895][T14947] loop2: partition table partially beyond EOD, truncated [ 754.894556][T14951] netlink: 'syz.3.2226': attribute type 1 has an invalid length. [ 754.931622][T14951] 8021q: adding VLAN 0 to HW filter on device bond5 [ 755.013947][T14951] bond5: (slave veth13): Enslaving as an active interface with a down link [ 755.936428][ T5929] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 756.049261][T14967] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 756.059081][T14967] overlayfs: workdir and upperdir must be separate subtrees [ 756.117871][ T30] audit: type=1400 audit(756.024:1627): avc: denied { create } for pid=14966 comm="syz.4.2231" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 756.270371][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 756.290008][ T30] audit: type=1400 audit(756.024:1628): avc: denied { associate } for pid=14966 comm="syz.4.2231" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 756.548533][ T5929] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 756.555074][ T30] audit: type=1400 audit(756.024:1629): avc: denied { mounton } for pid=14966 comm="syz.4.2231" path="/430/bus" dev="tmpfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 756.660767][ T30] audit: type=1400 audit(756.364:1630): avc: denied { rmdir } for pid=5824 comm="syz-executor" name="bus" dev="tmpfs" ino=2420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 756.804219][T14975] netlink: 'syz.2.2234': attribute type 1 has an invalid length. [ 756.910379][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.921873][ T5929] usb 6-1: config 0 descriptor?? [ 756.934770][ T5929] gspca_main: sunplus-2.14.0 probing 041e:400b [ 756.960092][T14560] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 757.028001][T14978] input input50: cannot allocate more than FF_MAX_EFFECTS effects [ 757.111552][T14560] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 757.215305][T14560] usb 5-1: config 0 has no interface number 1 [ 757.220672][T14965] binder: 14964:14965 ioctl c0306201 200000004a40 returned -14 [ 757.229143][T14560] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 757.241807][T14560] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 757.254753][T14560] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 757.350601][ T5882] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 757.523898][ T5882] usb 3-1: Using ep0 maxpacket: 8 [ 757.765682][ T5929] gspca_sunplus: reg_w_riv err -110 [ 757.770996][ T5929] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 757.777838][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 757.790292][T14560] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 757.793012][ T5882] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 757.804563][T14560] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 757.812169][ T5882] usb 3-1: config 0 has no interface number 0 [ 757.837635][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 757.849068][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 757.861097][ T5882] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 757.872105][T14560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 757.873862][T14560] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 757.882976][ T5882] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 757.906559][ T5882] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 757.915774][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.933700][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2230'. [ 757.989895][T14560] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.006086][T14560] usb 5-1: Product: syz [ 758.022299][T14560] usb 5-1: Manufacturer: syz [ 758.026947][T14560] usb 5-1: SerialNumber: syz [ 758.047705][T14560] usb 5-1: config 0 descriptor?? [ 758.053904][ T5882] usb 3-1: config 0 descriptor?? [ 758.060393][T14970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 758.071965][T14560] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.079493][ T5882] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 758.084847][T14560] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 758.152367][T14991] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2238'. [ 758.152524][T14560] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 758.171948][T14993] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2238'. [ 758.297144][ T5860] usb 5-1: USB disconnect, device number 62 [ 758.369753][ T30] audit: type=1400 audit(758.334:1631): avc: denied { connect } for pid=14998 comm="syz.4.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 758.466616][T12541] usb 3-1: USB disconnect, device number 56 [ 758.472863][ T5882] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 758.487986][T12541] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 758.491605][T15002] netlink: 'syz.4.2241': attribute type 1 has an invalid length. [ 758.554536][T15002] 8021q: adding VLAN 0 to HW filter on device bond5 [ 758.579189][T15007] bond5: (slave ip6erspan0): making interface the new active one [ 758.611914][ T5882] usb 2-1: device descriptor read/64, error -71 [ 758.625535][T15007] bond5: (slave ip6erspan0): Enslaving as an active interface with an up link [ 758.803486][T15016] tmpfs: Unknown parameter 'grpquotk)‘a_inode_hardlimit' [ 758.850068][ T5882] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 759.018381][ T5882] usb 2-1: device descriptor read/64, error -71 [ 759.127667][T12541] usb 6-1: USB disconnect, device number 7 [ 759.169637][T15022] loop2: detected capacity change from 0 to 7 [ 759.209580][ T5812] loop2: [ 759.212684][ T5812] loop2: partition table partially beyond EOD, truncated [ 759.230936][ T5882] usb usb2-port1: attempt power cycle [ 759.290986][T15022] loop2: [ 759.294307][T15022] loop2: partition table partially beyond EOD, truncated [ 759.640128][ T5882] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 759.746018][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 760.157255][ T5882] usb 2-1: device descriptor read/8, error -71 [ 760.222581][T15030] netlink: 'syz.5.2248': attribute type 1 has an invalid length. [ 760.256080][T15030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 760.289658][T15030] bond1: (slave veth3): Enslaving as an active interface with a down link [ 760.420663][ T5882] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 760.440935][ T5882] usb 2-1: device descriptor read/8, error -71 [ 760.485889][T15030] vlan2: entered allmulticast mode [ 760.491925][T15030] veth1: entered promiscuous mode [ 760.498976][T15030] veth1: left promiscuous mode [ 760.505927][T15030] bond1: (slave vlan2): making interface the new active one [ 760.514291][T15030] veth1: entered promiscuous mode [ 760.519901][T15030] vlan2: entered promiscuous mode [ 760.525784][T15030] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 760.550306][ T5882] usb usb2-port1: unable to enumerate USB device [ 761.462705][T15049] block nbd1: NBD_DISCONNECT [ 761.469512][T15049] block nbd1: Disconnected due to user request. [ 761.482665][T15049] block nbd1: shutting down sockets [ 761.985459][T14560] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 762.152874][T14560] usb 2-1: Using ep0 maxpacket: 32 [ 762.212200][T14560] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.237251][T14560] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 762.247064][T14560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.257767][T14560] usb 2-1: Product: syz [ 762.265156][T14560] usb 2-1: Manufacturer: syz [ 762.269920][T14560] usb 2-1: SerialNumber: syz [ 762.276355][T14560] usb 2-1: config 0 descriptor?? [ 762.286698][T14560] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 762.891749][T15074] loop9: detected capacity change from 0 to 7 [ 762.898865][T15074] Dev loop9: unable to read RDB block 7 [ 762.905990][T15074] loop9: unable to read partition table [ 762.912405][T15074] loop9: partition table beyond EOD, truncated [ 762.924124][T15074] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 763.342555][T15087] tmpfs: Bad value for 'nr_blocks' [ 763.430336][ T5813] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 763.601556][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 763.609727][ T5813] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 763.619645][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.628184][ T5929] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 763.744972][ T5813] pvrusb2: Hardware description: Terratec Grabster AV400 [ 763.756029][ T5813] pvrusb2: ********** [ 763.781458][ T5813] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 763.792755][ T5813] pvrusb2: Important functionality might not be entirely working. [ 763.809716][ T5813] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 763.821470][ T5813] pvrusb2: ********** [ 763.953377][ T2336] pvrusb2: Invalid write control endpoint [ 764.004592][ T2336] pvrusb2: Invalid write control endpoint [ 764.010797][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 764.025131][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 764.034880][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 764.060986][ T5929] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 764.072352][ T5929] usb 3-1: config 0 has no interface number 0 [ 764.078446][ T5929] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.090519][ T2336] pvrusb2: Device being rendered inoperable [ 764.110383][ T5929] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 764.125462][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 764.139082][ T5929] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 764.190080][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 764.199487][ T5929] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 764.226539][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.290699][ T5929] usb 3-1: config 0 descriptor?? [ 764.376805][ T5929] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input51 [ 764.388202][ T2336] pvrusb2: Attached sub-driver cx25840 [ 764.393983][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 764.405417][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 764.416428][ C1] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 764.509142][ C0] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 764.666541][ T30] audit: type=1400 audit(764.554:1632): avc: denied { append } for pid=15084 comm="syz.2.2261" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 765.300135][T14560] usb 2-1: qt2_attach - failed to power on unit: -71 [ 765.323602][T14560] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 765.344793][T15096] loop2: detected capacity change from 0 to 7 [ 765.365990][T13547] loop2: [ 765.372181][T14560] usb 2-1: USB disconnect, device number 79 [ 765.381286][T13547] loop2: partition table partially beyond EOD, truncated [ 765.386336][T15101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 765.405235][T15103] loop7: detected capacity change from 0 to 16384 [ 765.412924][T15096] loop2: [ 765.423543][T15096] loop2: partition table partially beyond EOD, truncated [ 765.433657][ T30] audit: type=1400 audit(765.394:1633): avc: denied { write } for pid=15100 comm="syz.1.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 765.642710][T15107] loop7: detected capacity change from 16384 to 16364 [ 765.717006][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2262'. [ 765.780358][T14560] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 766.120134][T14560] usb 2-1: Using ep0 maxpacket: 16 [ 766.133102][T14560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.182865][T14560] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 766.225136][ T5813] usb 3-1: USB disconnect, device number 57 [ 766.266589][T14560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.307767][ T5929] usb 6-1: USB disconnect, device number 8 [ 766.384146][T14560] usb 2-1: config 0 descriptor?? [ 766.745863][T15130] loop9: detected capacity change from 0 to 7 [ 766.768304][ T5982] Dev loop9: unable to read RDB block 7 [ 766.872013][T14560] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 766.923630][T15133] netlink: 'syz.5.2268': attribute type 1 has an invalid length. [ 766.986065][ T5982] loop9: unable to read partition table [ 767.030459][ T5982] loop9: partition table beyond EOD, truncated [ 767.052856][T15130] Dev loop9: unable to read RDB block 7 [ 767.058814][T15130] loop9: unable to read partition table [ 767.075879][T15130] loop9: partition table beyond EOD, truncated [ 767.100712][T15133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 767.116641][T15123] batman_adv: batadv0: Adding interface: gretap1 [ 767.123113][T15123] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.148526][T15123] batman_adv: batadv0: Interface activated: gretap1 [ 767.204025][T15136] bond2: (slave veth5): Enslaving as an active interface with a down link [ 767.213304][T15130] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 767.275157][T15101] tls_set_device_offload: netdev not found [ 767.307797][T14560] usb 2-1: USB disconnect, device number 80 [ 767.319735][T15119] [U] ^H [ 767.840685][T15145] x_tables: duplicate underflow at hook 2 [ 767.853635][ T30] audit: type=1400 audit(767.824:1634): avc: denied { shutdown } for pid=15143 comm="syz.4.2272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 768.246208][T15154] overlayfs: overlapping lowerdir path [ 768.310707][T15154] overlayfs: failed to verify upper (441/file0, ino=2486, err=-116) [ 768.318728][T15154] overlayfs: failed to verify index dir 'upper' xattr [ 768.326874][T15154] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 768.475489][T15161] loop2: detected capacity change from 0 to 7 [ 768.523194][T15161] loop2: [ 768.545514][T15161] loop2: partition table partially beyond EOD, truncated [ 769.534426][T15177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 769.593595][T15178] vim2m vim2m.0: vidioc_s_fmt queue busy [ 770.039202][T15191] loop9: detected capacity change from 0 to 7 [ 770.071193][T15191] Dev loop9: unable to read RDB block 7 [ 770.077416][T15191] loop9: unable to read partition table [ 770.085606][T15192] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 770.133603][T15192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 770.145996][T15191] loop9: partition table beyond EOD, truncated [ 770.152516][T15191] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 770.200079][T14560] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 770.387217][T15194] bond6: (slave veth5): Enslaving as an active interface with a down link [ 770.510317][T14560] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 770.520049][T14560] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 770.585460][T14560] usb 6-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 770.625389][T14560] usb 6-1: config 220 has no interface number 2 [ 770.803702][T14560] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 770.955258][T14560] usb 6-1: config 220 interface 0 has no altsetting 0 [ 771.090027][T14560] usb 6-1: config 220 interface 76 has no altsetting 0 [ 771.339565][T14560] usb 6-1: config 220 interface 1 has no altsetting 0 [ 771.350857][T15206] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.379784][T14560] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 771.388941][T14560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.397044][T14560] usb 6-1: Product: syz [ 771.401641][T15206] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=15206 comm=syz.2.2284 [ 771.414996][T14560] usb 6-1: Manufacturer: syz [ 771.420015][T14560] usb 6-1: SerialNumber: syz [ 771.559197][T15198] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 771.569003][T15198] team0: Device ipvlan1 failed to register rx_handler [ 772.038633][T15218] 9pnet_fd: Insufficient options for proto=fd [ 772.461905][ T1091] vlan2: left promiscuous mode [ 772.826674][T15226] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2290'. [ 773.202193][ T30] audit: type=1400 audit(772.774:1635): avc: denied { mount } for pid=15223 comm="syz.1.2290" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 773.228672][T14560] usb 6-1: selecting invalid altsetting 0 [ 773.235040][T14560] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 773.263414][T14560] uvcvideo 6-1:220.0: No valid video chain found. [ 773.359027][T15231] loop9: detected capacity change from 0 to 7 [ 773.367081][ T5982] Dev loop9: unable to read RDB block 7 [ 773.373827][ T5982] loop9: unable to read partition table [ 773.379870][ T5982] loop9: partition table beyond EOD, truncated [ 773.416468][T15231] Dev loop9: unable to read RDB block 7 [ 773.419247][T14560] usb 6-1: selecting invalid altsetting 0 [ 773.430267][T14560] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 773.440833][T15231] loop9: unable to read partition table [ 773.448579][T14560] usb 6-1: USB disconnect, device number 9 [ 773.462911][T15231] loop9: partition table beyond EOD, truncated [ 773.472375][T15231] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 773.581534][T15235] overlayfs: overlapping lowerdir path [ 773.675456][T15236] overlayfs: failed to verify upper (484/file0, ino=2612, err=-116) [ 773.705021][T15236] overlayfs: failed to verify index dir 'upper' xattr [ 773.789204][T15236] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 773.817106][T15239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2293'. [ 774.470150][ T5882] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 774.633212][ T5882] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 774.660324][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.681685][ T5882] usb 6-1: Product: syz [ 774.685966][ T5882] usb 6-1: Manufacturer: syz [ 774.692652][ T5882] usb 6-1: SerialNumber: syz [ 774.721032][ T5882] usb 6-1: config 0 descriptor?? [ 774.738743][ T5882] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 774.900681][ T5929] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 775.062262][ T5929] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 775.076877][ T5929] usb 5-1: config 0 has no interface number 1 [ 775.096845][ T5929] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 775.110649][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 775.127288][ T5929] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 775.137140][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 775.145571][ T5929] usb 5-1: SerialNumber: syz [ 775.158805][ T5929] usb 5-1: config 0 descriptor?? [ 775.370242][ T5929] uvcvideo 5-1:0.199: Found UVC 0.00 device (0002:0000) [ 775.400979][ T5929] uvcvideo 5-1:0.199: No valid video chain found. [ 775.415740][ T5882] gspca_sunplus: reg_r err -71 [ 775.417921][ T5929] usb 5-1: USB disconnect, device number 63 [ 775.420820][ T5882] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 775.693564][ T30] audit: type=1400 audit(775.644:1636): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 775.731615][ T5882] usb 6-1: USB disconnect, device number 10 [ 776.122101][T15268] loop9: detected capacity change from 0 to 7 [ 776.135440][T15268] Dev loop9: unable to read RDB block 7 [ 776.143912][ T30] audit: type=1400 audit(776.114:1637): avc: denied { ioctl } for pid=15263 comm="syz.5.2301" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6400 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 776.168398][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.176842][T15268] loop9: unable to read partition table [ 776.190189][T15268] loop9: partition table beyond EOD, truncated [ 776.198324][T15268] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.243541][T15261] syzkaller0: left promiscuous mode [ 776.266876][T15261] syzkaller0: left allmulticast mode [ 776.311603][T15261] 0: reclassify loop, rule prio 0, protocol 800 [ 777.314374][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 777.340149][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 777.354919][T15285] netlink: 'syz.4.2308': attribute type 11 has an invalid length. [ 777.373015][T15285] netlink: 'syz.4.2308': attribute type 13 has an invalid length. [ 778.079575][T15296] overlayfs: overlapping lowerdir path [ 778.138193][T15296] overlayfs: failed to verify upper (448/file0, ino=2535, err=-116) [ 778.182063][T15296] overlayfs: failed to verify index dir 'upper' xattr [ 778.222384][T15296] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 778.291759][ T30] audit: type=1400 audit(778.244:1638): avc: denied { ioctl } for pid=15298 comm="syz.1.2311" path="socket:[54916]" dev="sockfs" ino=54916 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 778.500543][T14560] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 778.661090][T14560] usb 3-1: Using ep0 maxpacket: 8 [ 778.675022][T14560] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 778.687607][T14560] usb 3-1: config 0 has no interface number 0 [ 778.710428][T14560] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.750359][T14560] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 778.778464][T14560] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 778.804784][T14560] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.846089][T14560] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 778.855755][T14560] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.877883][T14560] usb 3-1: Product: syz [ 778.897758][T14560] usb 3-1: Manufacturer: syz [ 778.909995][T14560] usb 3-1: SerialNumber: syz [ 778.949618][T14560] usb 3-1: config 0 descriptor?? [ 779.060063][ T5860] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 779.222595][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.242023][ T5860] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 779.271233][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.303810][ T5860] usb 4-1: config 0 descriptor?? [ 779.383378][T15301] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 779.460824][T15301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 779.522348][T15326] bond4: (slave geneve2): making interface the new active one [ 779.532862][T15326] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 779.545825][ T3581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.575944][T15328] loop2: detected capacity change from 0 to 7 [ 779.585105][T15328] loop2: [ 779.591058][T15328] loop2: partition table partially beyond EOD, truncated [ 779.592784][ T3463] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.653105][T14560] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 779.660921][ T3463] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.707232][ T3463] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.732100][ T5860] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 779.759198][T14560] usb 3-1: USB disconnect, device number 58 [ 779.778635][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0016/input/input52 [ 779.954429][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.994553][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.099802][T15319] random: crng reseeded on system resumption [ 780.120212][ T5860] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 780.278058][ T30] audit: type=1400 audit(781.247:1639): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 780.851730][ T5860] usb 4-1: USB disconnect, device number 79 [ 781.722903][T15361] tmpfs: Bad value for 'mpol' [ 781.779847][ T30] audit: type=1400 audit(782.727:1640): avc: denied { lock } for pid=15360 comm="syz.1.2325" path="socket:[55150]" dev="sockfs" ino=55150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 782.005406][ T30] audit: type=1400 audit(782.977:1641): avc: denied { watch } for pid=15365 comm="syz.4.2328" path="/452/file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 782.210303][ T5929] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 782.280300][T15362] [U]  [ 782.394832][ T5929] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 782.411961][ T5929] usb 2-1: config 0 has no interface number 0 [ 782.433427][ T5929] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=9a.34 [ 782.503676][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.563981][ T5929] usb 2-1: config 0 descriptor?? [ 782.781014][ T5929] usb 2-1: USB disconnect, device number 81 [ 783.586792][T12435] block nbd0: Possible stuck request ffff8880263ce000: control (read@0,1024B). Runtime 90 seconds [ 783.597635][T12435] block nbd0: Possible stuck request ffff8880263ce1c0: control (read@1024,1024B). Runtime 90 seconds [ 783.650110][ T5882] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 783.802821][T15398] lo speed is unknown, defaulting to 1000 [ 784.558481][T12435] block nbd0: Possible stuck request ffff8880263ce380: control (read@2048,1024B). Runtime 90 seconds [ 784.569483][T12435] block nbd0: Possible stuck request ffff8880263ce540: control (read@3072,1024B). Runtime 90 seconds [ 784.590699][ T30] audit: type=1326 audit(785.557:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15393 comm="syz.4.2335" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x0 [ 784.840014][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 784.940641][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.971955][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.089229][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.113810][ T5882] usb 4-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 785.151254][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.353516][ T5882] usb 4-1: config 0 descriptor?? [ 786.752935][ T5929] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 786.890786][ T5882] usbhid 4-1:0.0: can't add hid device: -71 [ 786.890875][ T5882] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 786.896876][ T5882] usb 4-1: USB disconnect, device number 80 [ 786.954284][ T30] audit: type=1400 audit(787.927:1643): avc: denied { write } for pid=15406 comm="syz.4.2338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 786.990077][ T5929] usb 6-1: Using ep0 maxpacket: 32 [ 787.000332][ T5929] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 787.026809][ T5929] usb 6-1: config 0 has no interface number 0 [ 787.052331][ T5929] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.085590][ T5929] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 787.122749][ T5929] usb 6-1: config 0 interface 85 has no altsetting 0 [ 787.131739][ T5929] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 787.222173][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.230954][ T5929] usb 6-1: Product: syz [ 787.235155][ T5929] usb 6-1: Manufacturer: syz [ 787.239775][ T5929] usb 6-1: SerialNumber: syz [ 787.247605][ T5929] usb 6-1: config 0 descriptor?? [ 787.518770][ T5929] appletouch 6-1:0.85: Failed to read mode from device. [ 787.600279][ T5929] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 787.752828][ T5929] usb 6-1: USB disconnect, device number 11 [ 787.821152][T14560] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 788.009996][T14560] usb 5-1: Using ep0 maxpacket: 8 [ 788.031920][T14560] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 788.039718][T14560] usb 5-1: can't read configurations, error -61 [ 788.180310][T14560] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 788.299201][T15444] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 788.310069][T15444] bridge4: entered promiscuous mode [ 788.315296][T15444] bridge4: entered allmulticast mode [ 788.350058][T14560] usb 5-1: Using ep0 maxpacket: 8 [ 788.363734][T14560] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 788.372727][T14560] usb 5-1: can't read configurations, error -61 [ 788.383736][T14560] usb usb5-port1: attempt power cycle [ 788.449552][ T30] audit: type=1400 audit(789.407:1644): avc: denied { read } for pid=15447 comm="syz.3.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 788.470434][ T5929] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 788.532087][T12541] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 788.649142][ T5929] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 224, setting to 64 [ 788.850067][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0 [ 788.863390][T12541] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 788.873538][T15453] ceph: No mds server is up or the cluster is laggy [ 788.874849][T12541] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.880443][ T5929] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.889891][T12541] usb 6-1: Product: syz [ 788.898068][ T5813] libceph: connect (1)[c::]:6789 error -101 [ 788.902112][T12541] usb 6-1: Manufacturer: syz [ 788.910003][T14560] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 788.912836][T12541] usb 6-1: SerialNumber: syz [ 788.948450][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 788.960133][ T5813] libceph: mon0 (1)[c::]:6789 connect error [ 788.963376][T12541] usb 6-1: config 0 descriptor?? [ 788.978174][ T5929] usb 3-1: Product: syz [ 788.982884][ T5929] usb 3-1: Manufacturer: syz [ 788.987510][ T5929] usb 3-1: SerialNumber: syz [ 788.993027][T14560] usb 5-1: Using ep0 maxpacket: 8 [ 789.034002][T14560] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 789.041824][T14560] usb 5-1: can't read configurations, error -61 [ 789.058369][ T5929] usb 3-1: config 0 descriptor?? [ 789.108128][ T5929] usb 3-1: selecting invalid altsetting 0 [ 789.172918][T14560] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 789.228676][T14560] usb 5-1: Using ep0 maxpacket: 8 [ 789.258257][T14560] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 789.270020][T14560] usb 5-1: can't read configurations, error -61 [ 789.287330][T14560] usb usb5-port1: unable to enumerate USB device [ 789.844558][T15442] comedi comedi0: adq12b: I/O port conflict (0x3,16) [ 789.869429][T12541] usb 3-1: USB disconnect, device number 59 [ 790.400955][T15482] loop9: detected capacity change from 0 to 7 [ 790.420640][T15482] Dev loop9: unable to read RDB block 7 [ 790.435653][T15482] loop9: unable to read partition table [ 790.448937][T15482] loop9: partition table beyond EOD, truncated [ 790.474394][T15482] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 790.639410][T15490] netlink: 'syz.2.2360': attribute type 3 has an invalid length. [ 790.647348][T15490] netlink: 666 bytes leftover after parsing attributes in process `syz.2.2360'. [ 791.697315][ T5929] usb 6-1: USB disconnect, device number 12 [ 792.020059][T14560] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 792.622904][T15515] netlink: 'syz.5.2365': attribute type 1 has an invalid length. [ 792.671813][T15515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 792.703588][T14560] usb 2-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 792.768843][T14560] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 792.930147][T14560] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 792.941703][T14560] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.953387][T14560] usb 2-1: config 0 descriptor?? [ 793.071925][T15515] bond3: (slave veth7): Enslaving as an active interface with a down link [ 793.085979][T14560] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 793.760040][T14560] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 793.960030][T14560] usb 3-1: Using ep0 maxpacket: 32 [ 793.996866][T14560] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.156784][T14560] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 794.204958][T14560] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.218586][T14560] usb 3-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.00 [ 794.254727][T14560] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.315513][T14560] usb 3-1: config 0 descriptor?? [ 795.181864][ T5882] usb 2-1: USB disconnect, device number 83 [ 795.423248][T14560] saitek 0003:0738:1705.0017: report_id 0 is invalid [ 795.430049][T14560] saitek 0003:0738:1705.0017: item 0 0 1 8 parsing failed [ 795.474611][T14560] saitek 0003:0738:1705.0017: parse failed [ 795.520049][T14560] saitek 0003:0738:1705.0017: probe with driver saitek failed with error -22 [ 796.032285][T15573] netlink: 'syz.5.2378': attribute type 1 has an invalid length. [ 796.089899][T15571] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2373'. [ 796.135057][T15560] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.136831][T15560] bond0: (slave bond6): Enslaving as an active interface with a down link [ 796.175747][T15573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 796.244950][T15572] bond4: (slave veth9): Enslaving as an active interface with a down link [ 797.675470][T14560] usb 3-1: USB disconnect, device number 60 [ 797.867083][T15590] misc userio: No port type given on /dev/userio [ 798.250024][T12541] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 798.352806][ T30] audit: type=1400 audit(799.257:1645): avc: denied { read write } for pid=15597 comm="syz.1.2384" name="file0" dev="tmpfs" ino=2683 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 798.800880][T12541] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 798.820401][T12541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.848626][T12541] usb 5-1: Product: syz [ 798.868220][T12541] usb 5-1: Manufacturer: syz [ 798.895053][T12541] usb 5-1: SerialNumber: syz [ 799.044113][T12541] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 799.639668][ T5860] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 799.674114][T15620] loop2: detected capacity change from 0 to 7 [ 799.728215][T15620] loop2: [ 799.731992][T15620] loop2: partition table partially beyond EOD, truncated [ 800.074766][T15624] binder: 15623:15624 ioctl 4018620d 200000000040 returned -22 [ 800.175206][T15591] lo speed is unknown, defaulting to 1000 [ 800.357167][ T43] usb 5-1: USB disconnect, device number 68 [ 800.580047][T12541] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 800.751340][T12541] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 800.760635][T12541] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.774132][ T5860] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 800.787079][ T5860] ath9k_htc: Failed to initialize the device [ 800.797048][T12541] usb 6-1: config 0 descriptor?? [ 800.807643][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 800.942681][T15639] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.954818][T15639] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.091582][T15644] loop9: detected capacity change from 0 to 7 [ 801.177871][ T30] audit: type=1400 audit(802.147:1646): avc: denied { write } for pid=15631 comm="syz.5.2394" path="socket:[56934]" dev="sockfs" ino=56934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 801.206100][ T6611] Dev loop9: unable to read RDB block 7 [ 801.213600][T15639] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.223671][T15639] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.241494][ T6611] loop9: unable to read partition table [ 801.258211][ T6611] loop9: partition table beyond EOD, truncated [ 801.289579][T15644] Dev loop9: unable to read RDB block 7 [ 801.295346][T15644] loop9: unable to read partition table [ 801.300005][T14560] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 801.305489][T15644] loop9: partition table beyond EOD, truncated [ 801.353337][T15639] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.365206][T15639] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.379249][T15644] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 801.450337][T14560] usb 4-1: Using ep0 maxpacket: 8 [ 801.474258][T14560] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 801.496833][T15639] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 801.512581][T15639] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.522973][T14560] usb 4-1: config 0 has no interface number 0 [ 801.533453][T12541] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 801.541181][T14560] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 801.543358][T12541] [drm:udl_init] *ERROR* Selecting channel failed [ 801.558081][T14560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.585147][T14560] usb 4-1: config 0 descriptor?? [ 801.591265][T12541] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 801.603984][T12541] [drm] Initialized udl on minor 2 [ 801.604094][T14560] snd-usb-audio 4-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 801.639465][T12541] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 801.736468][T12541] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 801.759841][ T43] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 801.776725][ T43] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 801.783822][T12541] usb 6-1: USB disconnect, device number 13 [ 802.695378][T15664] loop2: detected capacity change from 0 to 7 [ 802.710314][ T6611] loop2: [ 802.713372][ T6611] loop2: partition table partially beyond EOD, truncated [ 802.725431][T15664] loop2: [ 802.728460][T15664] loop2: partition table partially beyond EOD, truncated [ 802.997112][ T30] audit: type=1326 audit(803.967:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.036898][ T30] audit: type=1326 audit(803.967:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.062068][ T30] audit: type=1326 audit(803.967:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.086400][ T30] audit: type=1326 audit(803.967:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.115729][ T30] audit: type=1326 audit(803.967:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.139651][ T30] audit: type=1326 audit(803.967:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.163392][ T30] audit: type=1326 audit(803.977:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.190622][ T30] audit: type=1326 audit(803.977:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15670 comm="syz.4.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27bb8efc9 code=0x7ffc0000 [ 803.214010][ T43] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 803.365900][T15675] netlink: 'syz.4.2407': attribute type 2 has an invalid length. [ 803.374294][T15675] netlink: 'syz.4.2407': attribute type 1 has an invalid length. [ 803.689788][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 803.710070][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.718678][ T43] usb 3-1: Product: syz [ 803.723966][ T43] usb 3-1: Manufacturer: syz [ 803.728936][ T43] usb 3-1: SerialNumber: syz [ 804.264075][ T5942] usb 4-1: USB disconnect, device number 81 [ 804.961147][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 804.978580][T15686] [U]  [ 804.983685][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 805.014959][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 805.035448][ T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 805.402725][T15699] loop2: detected capacity change from 0 to 7 [ 805.416416][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.426465][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.458524][ T5942] usb 3-1: USB disconnect, device number 61 [ 805.472637][T15699] loop2: [ 805.486243][T15699] loop2: partition table partially beyond EOD, truncated [ 805.760159][ T5813] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 805.923790][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.950128][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.971347][ T5813] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 805.982034][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.994502][ T5813] usb 6-1: config 0 descriptor?? [ 806.121118][T15716] overlayfs: overlapping lowerdir path [ 806.140182][T15716] overlayfs: failed to verify upper (510/file0, ino=2760, err=-116) [ 806.148235][T15716] overlayfs: failed to verify index dir 'upper' xattr [ 806.155776][T15716] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 806.300359][T12541] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 806.450013][T12541] usb 5-1: Using ep0 maxpacket: 32 [ 806.461297][T12541] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 806.473246][T15704] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 806.475113][T12541] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 806.479777][T15704] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 806.484250][T15704] vhci_hcd vhci_hcd.0: Device attached [ 806.489220][T12541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.510289][T12541] usb 5-1: Product: syz [ 806.514452][T12541] usb 5-1: Manufacturer: syz [ 806.519143][T12541] usb 5-1: SerialNumber: syz [ 806.528300][T12541] usb 5-1: config 0 descriptor?? [ 806.534528][T15721] vhci_hcd vhci_hcd.0: port 0 already used [ 806.544370][T12541] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54 [ 806.575054][ T5813] pyra 0003:1E7D:2CF6.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 806.750444][T14560] usb 44-1: SetAddress Request (2) to port 0 [ 806.769225][T14560] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 806.964413][ T5813] pyra 0003:1E7D:2CF6.0018: couldn't init struct pyra_device [ 806.972054][ T5813] pyra 0003:1E7D:2CF6.0018: couldn't install mouse [ 806.977087][T15719] vhci_hcd: connection reset by peer [ 806.980156][ T5813] pyra 0003:1E7D:2CF6.0018: probe with driver pyra failed with error -71 [ 806.992524][T13876] vhci_hcd: stop threads [ 807.000072][T13876] vhci_hcd: release socket [ 807.003304][ T5813] usb 6-1: USB disconnect, device number 14 [ 807.006481][T13876] vhci_hcd: disconnect device [ 807.121343][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 807.167641][T15735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2421'. [ 808.368329][T15742] [U]  [ 808.565041][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 808.579681][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.690037][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.820718][T15754] netlink: 'syz.3.2426': attribute type 29 has an invalid length. [ 808.828669][T15754] netlink: 'syz.3.2426': attribute type 3 has an invalid length. [ 808.836692][T15754] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2426'. [ 809.112298][T15756] loop2: detected capacity change from 0 to 7 [ 809.131391][T15756] loop2: [ 809.134376][T15756] loop2: partition table partially beyond EOD, truncated [ 809.157523][T12541] usb 5-1: USB disconnect, device number 69 [ 809.404992][T15761] loop9: detected capacity change from 0 to 7 [ 809.464138][T15761] Dev loop9: unable to read RDB block 7 [ 809.478063][T15761] loop9: unable to read partition table [ 809.508634][T15761] loop9: partition table beyond EOD, truncated [ 809.545577][T15761] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 809.780974][T12541] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 809.786210][T15771] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 811.171501][T12541] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.183182][T12541] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 811.581005][T12541] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.600471][T12541] usb 3-1: config 0 descriptor?? [ 811.866536][ T5929] hid-generic 0005:15C2:1010.0019: item fetching failed at offset 0/1 [ 811.877658][ T5929] hid-generic 0005:15C2:1010.0019: probe with driver hid-generic failed with error -22 [ 811.902996][T14560] usb 44-1: device descriptor read/8, error -110 [ 812.529441][ T5942] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 812.569336][T12541] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 812.596096][T12541] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input55 [ 812.717350][ T5942] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 812.732795][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.741674][ T5942] usb 2-1: Product: syz [ 812.745867][ T5942] usb 2-1: Manufacturer: syz [ 812.750823][ T5942] usb 2-1: SerialNumber: syz [ 812.778692][T15768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.799458][T15768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.818905][T15768] random: crng reseeded on system resumption [ 812.827844][T14560] usb usb44-port1: attempt power cycle [ 812.883334][T12541] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 813.230567][ T5925] usb 3-1: USB disconnect, device number 62 [ 813.441749][ T5942] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 813.457084][T14560] usb usb44-port1: unable to enumerate USB device [ 813.723149][ T5942] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 813.982204][ T5942] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 813.991275][T12435] block nbd0: Possible stuck request ffff8880263ce000: control (read@0,1024B). Runtime 120 seconds [ 814.010014][T12541] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 814.021339][ T5942] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 814.160066][T12541] usb 4-1: Using ep0 maxpacket: 8 [ 814.229829][T12541] usb 4-1: config 0 has an invalid interface number: 236 but max is 0 [ 814.260547][T12541] usb 4-1: config 0 has no interface number 0 [ 814.337603][T12541] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 814.380136][T12541] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.444352][T12541] usb 4-1: config 0 descriptor?? [ 814.482181][T12541] snd-usb-audio 4-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 814.791985][T15823] loop9: detected capacity change from 0 to 7 [ 814.830386][T12541] usb 4-1: USB disconnect, device number 82 [ 814.859993][T12435] block nbd0: Possible stuck request ffff8880263ce1c0: control (read@1024,1024B). Runtime 120 seconds [ 814.870357][T15823] Dev loop9: unable to read RDB block 7 [ 814.871175][T12435] block nbd0: Possible stuck request ffff8880263ce380: control (read@2048,1024B). Runtime 120 seconds [ 814.876572][T15823] loop9: unable to read partition table [ 814.938201][T15823] loop9: partition table beyond EOD, truncated [ 814.943402][T12435] block nbd0: Possible stuck request ffff8880263ce540: control (read@3072,1024B). Runtime 120 seconds [ 814.963342][T15791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.985428][T15823] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 815.054016][T15791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.580072][ T5942] usb 2-1: USB disconnect, device number 84 [ 817.762805][T15845] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 818.141402][T15847] netlink: 'syz.1.2452': attribute type 10 has an invalid length. [ 818.176183][T15847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.187143][T15847] batadv0: entered promiscuous mode [ 818.195090][T15847] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 818.221381][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 818.221393][ T30] audit: type=1326 audit(819.197:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.260354][ T30] audit: type=1326 audit(819.227:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.283792][ T30] audit: type=1326 audit(819.227:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.306659][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.314697][ T30] audit: type=1326 audit(819.227:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.337786][T15847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14865 sclass=netlink_route_socket pid=15847 comm=syz.1.2452 [ 818.350968][ T30] audit: type=1326 audit(819.227:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.373822][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.539776][ T30] audit: type=1326 audit(819.227:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.571185][ T30] audit: type=1326 audit(819.227:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.594037][ C1] vkms_vblank_simulate: vblank timer overrun [ 818.649507][ T30] audit: type=1326 audit(819.237:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15830 comm="syz.2.2448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a678efc9 code=0x7ffc0000 [ 818.672398][ C1] vkms_vblank_simulate: vblank timer overrun [ 819.620981][ T43] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 819.781864][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.793287][ T43] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 819.802927][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.816959][ T43] usb 5-1: config 0 descriptor?? [ 819.899571][T15869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 820.179994][ T5925] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 820.234689][ T43] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 820.247796][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input56 [ 820.327706][ T43] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 820.346292][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 820.369412][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.384156][ T5925] usb 3-1: Product: syz [ 820.388438][ T5925] usb 3-1: Manufacturer: syz [ 820.394335][ T5925] usb 3-1: SerialNumber: syz [ 820.401636][ T5925] usb 3-1: config 0 descriptor?? [ 820.440313][T15864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 820.463378][T15864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 820.473206][T15864] random: crng reseeded on system resumption [ 820.613664][ T5925] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 821.181648][ T5929] usb 5-1: USB disconnect, device number 70 [ 821.532532][T15880] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2461'. [ 821.544380][ T30] audit: type=1400 audit(822.517:1679): avc: denied { accept } for pid=15878 comm="syz.3.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 821.802601][ T5925] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 822.355982][ T30] audit: type=1400 audit(823.187:1680): avc: denied { bind } for pid=15881 comm="syz.3.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 822.614223][T15895] macsec1: entered allmulticast mode [ 822.619665][T15895] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 822.716188][ T43] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 823.060614][ T5925] usb 3-1: USB disconnect, device number 63 [ 823.133853][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 823.142058][ T43] usb 5-1: config 0 has no interface number 0 [ 823.150472][ T43] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 823.159572][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.171743][ T43] usb 5-1: Product: syz [ 823.175963][ T43] usb 5-1: Manufacturer: syz [ 823.182525][ T43] usb 5-1: SerialNumber: syz [ 823.189345][ T43] usb 5-1: config 0 descriptor?? [ 823.205898][T15900] batman_adv: batadv0: Interface deactivated: gretap1 [ 823.222659][T14428] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.232849][T14428] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.247495][T14428] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.267169][T14428] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.432907][ T43] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 823.447597][T15908] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20003 [ 823.462479][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 823.474409][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 823.487302][ T43] usb 5-1: media controller created [ 823.549355][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 823.612754][ T30] audit: type=1400 audit(824.577:1681): avc: denied { write } for pid=15911 comm="syz.2.2472" path="socket:[58582]" dev="sockfs" ino=58582 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 823.760388][ T5860] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 823.941825][ T5860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.953363][ T5860] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 823.967715][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.000802][ T5860] usb 2-1: config 0 descriptor?? [ 824.821857][ T43] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 824.832110][ T5860] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 824.880229][T15914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.881767][ T5860] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.001C/input/input57 [ 824.897416][T15914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.034011][ T5860] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 825.734261][ T5860] usb 2-1: USB disconnect, device number 85 [ 825.826797][ T5925] usb 5-1: USB disconnect, device number 71 [ 826.077304][T15938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2479'. [ 826.086789][T15938] netlink: 19 bytes leftover after parsing attributes in process `syz.3.2479'. [ 826.098316][T15938] netlink: 'syz.3.2479': attribute type 6 has an invalid length. [ 826.109983][T15938] netlink: 'syz.3.2479': attribute type 4 has an invalid length. [ 826.443147][ T5860] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 826.681325][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 826.705223][ T5860] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 826.717745][ T5860] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 826.831959][ T5860] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 826.843179][ T5860] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 826.859266][ T5860] usb 4-1: config 0 interface 0 has no altsetting 0 [ 826.874631][ T5860] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 826.886501][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.915614][ T5860] usb 4-1: Product: syz [ 826.919979][ T5860] usb 4-1: Manufacturer: syz [ 826.924629][ T5860] usb 4-1: SerialNumber: syz [ 826.955659][ T5860] usb 4-1: config 0 descriptor?? [ 826.975449][T15949] netlink: zone id is out of range [ 826.981590][T15949] netlink: set zone limit has 8 unknown bytes [ 827.172686][ T5860] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58 [ 827.199714][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.227405][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.288494][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.309030][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.366302][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 827.379769][ T5929] usb 4-1: USB disconnect, device number 83 [ 827.426435][ T5170] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 827.514749][ T5982] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 827.702111][T15945] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 828.332491][ T30] audit: type=1800 audit(829.307:1682): pid=15960 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2485" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 828.580209][T15962] loop6: detected capacity change from 0 to 524287999 [ 828.931880][T13070] Bluetooth: hci2: command 0x0c1a tx timeout [ 830.742638][ T43] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 830.750428][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 830.880083][ T43] usb 4-1: device descriptor read/64, error -71 [ 830.901918][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.913258][ T24] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 830.923133][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.935574][ T24] usb 5-1: config 0 descriptor?? [ 831.120126][ T43] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 831.260416][ T43] usb 4-1: device descriptor read/64, error -71 [ 831.380763][ T43] usb usb4-port1: attempt power cycle [ 831.393144][ T24] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 831.403264][T15999] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2495'. [ 831.418886][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001D/input/input59 [ 831.517268][ T24] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 831.594817][T15983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.603960][T15983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.700106][T12541] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 831.750166][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 831.771281][ T43] usb 4-1: device descriptor read/8, error -71 [ 831.851641][T12541] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 831.862675][T12541] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 831.874019][T12541] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 831.886486][T12541] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 831.900794][T12541] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.909967][T12541] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.918021][T12541] usb 2-1: Product: syz [ 831.922780][T12541] usb 2-1: Manufacturer: syz [ 831.927501][T12541] usb 2-1: SerialNumber: syz [ 831.949519][T14560] usb 5-1: USB disconnect, device number 72 [ 831.960102][T16001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 831.983361][T12541] cdc_mbim 2-1:1.0: skipping garbage [ 832.020156][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 832.041027][ T43] usb 4-1: device descriptor read/8, error -71 [ 832.150432][ T43] usb usb4-port1: unable to enumerate USB device [ 832.190954][T16001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 832.199079][T16001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 833.195663][T16001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 833.203351][T16001] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 833.212927][T12541] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 833.224124][T12541] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 833.246113][T12541] wwan wwan0: port wwan0mbim0 attached [ 833.269180][T12541] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 86:a3:bc:17:99:86 [ 833.355450][T16018] veth1_to_bond: entered allmulticast mode [ 833.377728][T16018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2502'. [ 833.378124][ T5136] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 833.414820][ T5136] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 833.495347][ T5136] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 833.498212][T12541] usb 2-1: USB disconnect, device number 86 [ 833.504125][ T5136] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 833.509331][T12541] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 833.516469][ T5136] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 833.610594][T16018] bond0: (slave bond_slave_1): Releasing backup interface [ 833.615232][T16031] tipc: Can't bind to reserved service type 2 [ 833.737836][ T30] audit: type=1800 audit(834.677:1683): pid=16031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2504" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 833.802190][T12541] wwan wwan0: port wwan0mbim0 disconnected [ 833.818359][T16020] lo speed is unknown, defaulting to 1000 [ 833.960228][T16049] input: syz0 as /devices/virtual/input/input60 [ 834.107199][T14560] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 834.302515][T14560] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.320873][T14560] usb 5-1: config 0 has no interface number 0 [ 834.702512][T14560] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 834.729196][T14560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.748341][T16020] chnl_net:caif_netlink_parms(): no params data found [ 834.790923][T14560] usb 5-1: config 0 descriptor?? [ 834.811773][T14560] usb 5-1: selecting invalid altsetting 1 [ 834.818755][T14560] dvb_ttusb_budget: ttusb_init_controller: error [ 834.911782][T14560] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 835.122879][ T5929] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 835.163523][T16020] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.277679][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2507'. [ 835.641182][ T30] audit: type=1400 audit(836.337:1684): avc: denied { remount } for pid=16039 comm="syz.4.2507" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 835.660899][ T5136] Bluetooth: hci6: command tx timeout [ 836.050358][T16020] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.057604][T16020] bridge_slave_0: entered allmulticast mode [ 836.073407][T16020] bridge_slave_0: entered promiscuous mode [ 836.081175][T16020] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.088539][T16020] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.095789][T16020] bridge_slave_1: entered allmulticast mode [ 836.102767][T16020] bridge_slave_1: entered promiscuous mode [ 836.131853][T14560] DVB: Unable to find symbol cx22700_attach() [ 836.252026][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 836.826601][T16077] bridge0: entered allmulticast mode [ 836.835196][T16020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.840090][ T5929] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 836.847082][T16020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.907778][ T5929] usb 2-1: config 0 has no interface number 0 [ 836.914526][T14560] DVB: Unable to find symbol tda10046_attach() [ 836.922708][T16020] team0: Port device team_slave_0 added [ 836.934367][T16020] team0: Port device team_slave_1 added [ 836.956010][T14560] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 836.972479][ T5929] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=f9.2e [ 837.002552][T16020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.020592][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.043167][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.092618][ T5929] usb 2-1: config 0 descriptor?? [ 837.175227][ T5929] snd-usb-audio 2-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 837.184509][ T24] usb 5-1: USB disconnect, device number 73 [ 837.194568][T16020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.269870][T16020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.276849][T16020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.441002][T16020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.510042][ T43] usb 2-1: USB disconnect, device number 87 [ 837.669106][T16020] hsr_slave_0: entered promiscuous mode [ 837.687691][T16020] hsr_slave_1: entered promiscuous mode [ 837.714399][T16020] debugfs: 'hsr0' already exists in 'hsr' [ 837.730120][ T5136] Bluetooth: hci6: command tx timeout [ 837.733943][T16020] Cannot create hsr debugfs directory [ 838.437836][T16020] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 838.558273][T16020] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 838.610393][T16020] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 838.708202][T16020] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 839.388916][T16020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.415122][T16020] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.434401][T13876] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.441523][T13876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.460856][T15689] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.467976][T15689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.619988][ T24] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 839.750368][ T24] usb 3-1: device descriptor read/64, error -71 [ 839.806794][T16020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.814124][ T5136] Bluetooth: hci6: command tx timeout [ 839.935623][ T30] audit: type=1326 audit(840.907:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 839.990105][ T24] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 839.997974][ T30] audit: type=1326 audit(840.917:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 840.146066][ T30] audit: type=1326 audit(840.917:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 840.467509][ T24] usb 3-1: device descriptor read/64, error -71 [ 840.624416][ T24] usb usb3-port1: attempt power cycle [ 840.880775][ T30] audit: type=1326 audit(840.917:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 840.990035][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 841.015915][ T30] audit: type=1326 audit(840.917:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.049259][ T30] audit: type=1326 audit(840.917:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.070967][ T24] usb 3-1: device descriptor read/8, error -71 [ 841.086655][ T30] audit: type=1326 audit(840.917:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.148220][ T30] audit: type=1326 audit(840.917:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.160303][T16020] veth0_vlan: entered promiscuous mode [ 841.194130][ T30] audit: type=1326 audit(840.917:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.231496][T16020] veth1_vlan: entered promiscuous mode [ 841.250320][ T30] audit: type=1326 audit(840.917:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16112 comm="syz.1.2516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24558efc9 code=0x7ffc0000 [ 841.330042][ T24] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 841.351805][ T24] usb 3-1: device descriptor read/8, error -71 [ 841.460221][ T24] usb usb3-port1: unable to enumerate USB device [ 841.496770][T16020] veth0_macvtap: entered promiscuous mode [ 841.512426][T16020] veth1_macvtap: entered promiscuous mode [ 841.599068][T16135] overlayfs: overlapping lowerdir path [ 841.670656][T16137] overlayfs: failed to verify upper (506/file0, ino=2825, err=-116) [ 841.678775][T16137] overlayfs: failed to verify index dir 'upper' xattr [ 841.685611][T16137] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 841.964287][ T5136] Bluetooth: hci6: command tx timeout [ 842.002667][T16020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.013866][T16020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.045699][ T1091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.224441][ T1091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.253597][ T1091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.298962][ T1091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.476409][T15689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.510009][T15689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.985334][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.993619][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.094351][ T31] INFO: task syz.0.2063:14257 blocked for more than 143 seconds. [ 843.102818][ T31] Not tainted syzkaller #0 [ 843.111632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 843.150362][ T31] task:syz.0.2063 state:D stack:28856 pid:14257 tgid:14255 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 843.288788][ T31] Call Trace: [ 843.400008][ T31] [ 843.402990][ T31] __schedule+0x1190/0x5de0 [ 843.407887][ T31] ? __lock_acquire+0x622/0x1c90 [ 843.450290][ T31] ? __pfx___schedule+0x10/0x10 [ 843.455191][ T31] ? find_held_lock+0x2b/0x80 [ 843.469921][ T31] ? schedule+0x2d7/0x3a0 [ 843.474284][ T31] ? bdev_open+0xa2/0xe40 [ 843.478610][ T31] schedule+0xe7/0x3a0 [ 843.500312][ T31] schedule_preempt_disabled+0x13/0x30 [ 843.505809][ T31] __mutex_lock+0x818/0x1060 [ 843.513252][ T31] ? bdev_open+0xa2/0xe40 [ 843.517605][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 843.530145][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 843.535802][ T31] ? bdev_open+0xa2/0xe40 [ 843.550137][ T31] bdev_open+0xa2/0xe40 [ 843.554312][ T31] ? iput+0x35/0x40 [ 843.558117][ T31] bdev_file_open_by_dev+0x182/0x210 [ 843.607163][ T31] setup_bdev_super+0x39b/0x730 [ 843.620072][ T31] get_tree_bdev_flags+0x363/0x620 [ 843.625211][ T31] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 843.640160][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 843.645811][ T31] ? bpf_lsm_capable+0x9/0x10 [ 843.660157][ T31] ? security_capable+0x7e/0x260 [ 843.665121][ T31] vfs_get_tree+0x8e/0x340 [ 843.669538][ T31] path_mount+0x7b9/0x23a0 [ 843.680096][ T31] ? __pfx_path_mount+0x10/0x10 [ 843.684967][ T31] ? putname+0x154/0x1a0 [ 843.689186][ T31] ? putname+0x154/0x1a0 [ 843.737157][ T31] ? putname+0x154/0x1a0 [ 843.755919][ T31] ? __x64_sys_mount+0x293/0x310 [ 843.761158][ T31] __x64_sys_mount+0x293/0x310 [ 843.765957][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 843.771697][ T31] do_syscall_64+0xcd/0xfa0 [ 843.776217][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.782479][ T31] RIP: 0033:0x7f9cddd8efc9 [ 843.786901][ T31] RSP: 002b:00007f9cdeb5c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 843.795767][ T31] RAX: ffffffffffffffda RBX: 00007f9cddfe6090 RCX: 00007f9cddd8efc9 [ 843.803983][ T31] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00002000000000c0 [ 843.812456][ T31] RBP: 00007f9cdde11f91 R08: 0000000000000000 R09: 0000000000000000 [ 843.821036][ T31] R10: 000000000000808c R11: 0000000000000246 R12: 0000000000000000 [ 843.829006][ T31] R13: 00007f9cddfe6128 R14: 00007f9cddfe6090 R15: 00007ffdae41cd58 [ 843.841222][ T31] [ 843.844303][ T31] [ 843.844303][ T31] Showing all locks held in the system: [ 843.993683][ T31] 1 lock held by khungtaskd/31: [ 843.998569][ T31] #0: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 844.055583][ T31] 3 locks held by kworker/1:1/43: [ 844.069931][ T31] #0: ffff88813ff11948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 844.115698][ T31] #1: ffffc90000b37d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 844.170064][ T31] #2: ffff88802b70f240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b6/0x6da0 [ 844.200114][ T31] 3 locks held by kworker/u8:4/62: [ 844.205248][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 844.250038][ T31] #1: ffffc9000211fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 844.269975][ T31] #2: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 844.279091][ T31] 2 locks held by getty/5577: [ 844.287114][ T31] #0: ffff88814e0990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 844.297545][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 844.307894][ T31] 1 lock held by udevd/6610: [ 844.312958][ T31] #0: ffff888026363358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 844.322535][ T31] 2 locks held by syz.1.1524/11955: [ 844.327724][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 844.337283][ T31] #1: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 844.347565][ T31] 4 locks held by syz.4.1894/13464: [ 844.352944][ T31] #0: ffff88806832cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 844.362742][ T31] #1: ffff88806832c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 844.373793][ T31] #2: ffffffff9035b0c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 844.380204][T12435] block nbd0: Possible stuck request ffff8880263ce000: control (read@0,1024B). Runtime 150 seconds [ 844.386545][ T31] #3: ffff888032438b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 844.410085][ T31] 2 locks held by syz.0.2063/14257: [ 844.415311][ T31] #0: ffff88802890e0e0 (&type->s_umount_key#91/1){+.+.}-{4:4}, at: alloc_super+0x1e3/0xb60 [ 844.425495][ T31] #1: ffff888026363358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 844.435032][ T31] 7 locks held by kworker/u8:8/14428: [ 844.440461][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 844.450504][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 844.460049][ T31] #2: ffff88807d330788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x580 [ 844.471212][ T31] #3: ffffffff9aceaaf8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0x146/0x2f0 [ 844.481901][ T31] #4: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 844.491675][ T31] #5: ffffffff8e3c4720 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x33/0x4f0 [ 844.501657][ T31] #6: ffff88813ff16078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x10f/0x310 [ 844.512601][ T31] 2 locks held by kworker/0:0/14560: [ 844.517875][ T31] #0: ffff8880b843a398 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 844.528053][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 844.537227][ T31] 3 locks held by kworker/u8:14/15689: [ 844.542764][ T31] #0: ffff88814d261148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 844.553876][ T31] #1: ffffc90004f4fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 844.566099][ T31] #2: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 844.575665][ T31] 1 lock held by syz.3.2521/16136: [ 844.580794][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 844.589727][ T31] 1 lock held by syz.1.2522/16142: [ 844.594872][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 844.603903][ T31] 1 lock held by syz.2.2523/16147: [ 844.608984][ T31] #0: ffffffff900e7248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 844.618002][ T31] 1 lock held by syz.6.2500/16158: [ 844.623127][ T31] #0: ffffffff8e3cfcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 844.633465][ T31] [ 844.635793][ T31] ============================================= [ 844.635793][ T31] [ 844.652510][ T31] NMI backtrace for cpu 1 [ 844.652526][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 844.652545][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.652555][ T31] Call Trace: [ 844.652561][ T31] [ 844.652569][ T31] dump_stack_lvl+0x116/0x1f0 [ 844.652599][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 844.652619][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 844.652644][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 844.652672][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 844.652695][ T31] watchdog+0xf3f/0x1170 [ 844.652721][ T31] ? rcu_is_watching+0x12/0xc0 [ 844.652743][ T31] ? __pfx_watchdog+0x10/0x10 [ 844.652763][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 844.652790][ T31] ? __kthread_parkme+0x19e/0x250 [ 844.652817][ T31] ? __pfx_watchdog+0x10/0x10 [ 844.652839][ T31] kthread+0x3c5/0x780 [ 844.652862][ T31] ? __pfx_kthread+0x10/0x10 [ 844.652880][ T31] ? rcu_is_watching+0x12/0xc0 [ 844.652901][ T31] ? __pfx_kthread+0x10/0x10 [ 844.652919][ T31] ret_from_fork+0x675/0x7d0 [ 844.652933][ T31] ? __pfx_kthread+0x10/0x10 [ 844.652947][ T31] ret_from_fork_asm+0x1a/0x30 [ 844.652977][ T31] [ 844.652984][ T31] Sending NMI from CPU 1 to CPUs 0: [ 844.782249][ C0] NMI backtrace for cpu 0 [ 844.782263][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 844.782279][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 844.782288][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 844.782313][ C0] Code: e7 6c 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a6 29 00 fb f4 3c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 844.782326][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 844.782338][ C0] RAX: 00000000031b068d RBX: 0000000000000000 RCX: ffffffff8b6082a9 [ 844.782347][ C0] RDX: 0000000000000000 RSI: ffffffff8da2b0a2 RDI: ffffffff8bf07040 [ 844.782357][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 844.782366][ C0] R10: ffff8880b84332ab R11: 0000000000000001 R12: 0000000000000000 [ 844.782374][ C0] R13: ffffffff8e097a00 R14: ffffffff908203d0 R15: 0000000000000000 [ 844.782384][ C0] FS: 0000000000000000(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 844.782399][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.782408][ C0] CR2: 00002000003c7030 CR3: 000000000e182000 CR4: 00000000003526f0 [ 844.782417][ C0] Call Trace: [ 844.782422][ C0] [ 844.782427][ C0] default_idle+0x13/0x20 [ 844.782441][ C0] default_idle_call+0x6c/0xb0 [ 844.782455][ C0] do_idle+0x38d/0x500 [ 844.782473][ C0] ? __pfx_do_idle+0x10/0x10 [ 844.782490][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 844.782507][ C0] cpu_startup_entry+0x4f/0x60 [ 844.782524][ C0] rest_init+0x16b/0x2b0 [ 844.782538][ C0] ? acpi_subsystem_init+0x133/0x180 [ 844.782555][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 844.782574][ C0] start_kernel+0x3f6/0x4e0 [ 844.782591][ C0] x86_64_start_reservations+0x18/0x30 [ 844.782607][ C0] x86_64_start_kernel+0x130/0x190 [ 844.782624][ C0] common_startup_64+0x13e/0x148 [ 844.782644][ C0] [ 844.980061][T12435] block nbd0: Possible stuck request ffff8880263ce1c0: control (read@1024,1024B). Runtime 150 seconds [ 844.991180][T12435] block nbd0: Possible stuck request ffff8880263ce380: control (read@2048,1024B). Runtime 150 seconds [ 845.002471][T12435] block nbd0: Possible stuck request ffff8880263ce540: control (read@3072,1024B). Runtime 150 seconds [ 845.764395][ T62] batman_adv: batadv0: Removing interface: gretap1 [ 845.794572][ T62] dvmrp1 (unregistering): left allmulticast mode [ 845.809041][ T62] bond4 (unregistering): (slave geneve2): Releasing active interface [ 846.004602][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 846.013771][ T62] bond0 (unregistering): Released all slaves [ 846.101430][ T62] bond1 (unregistering): (slave vlan2): Releasing active interface [ 846.109829][ T62] bond1 (unregistering): Released all slaves [ 846.196750][ T62] bond2 (unregistering): Released all slaves [ 846.207883][ T62] bond3 (unregistering): Released all slaves [ 846.288764][ T62] bond4 (unregistering): Released all slaves [ 846.651345][ T62] hsr_slave_0: left promiscuous mode [ 846.657624][ T62] hsr_slave_1: left promiscuous mode [ 846.663643][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.672202][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.064330][ T62] team0 (unregistering): Port device team_slave_1 removed [ 847.094697][ T62] team0 (unregistering): Port device team_slave_0 removed [ 847.599098][ T62] IPVS: stop unused estimator thread 0... [ 847.954865][ T62] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.034601][ T62] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.101244][ T62] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.167301][ T62] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.297970][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 848.384314][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 848.456675][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 848.545692][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 848.651460][ T62] bridge_slave_1: left allmulticast mode [ 848.657131][ T62] bridge_slave_1: left promiscuous mode [ 848.666062][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.677960][ T62] bridge_slave_0: left allmulticast mode [ 848.686056][ T62] bridge_slave_0: left promiscuous mode [ 848.699397][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.106327][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 849.116624][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 849.126280][ T62] bond0 (unregistering): Released all slaves [ 849.582925][ T62] bond1 (unregistering): (slave veth3): Releasing backup interface [ 849.592080][ T62] bond1 (unregistering): Released all slaves [ 849.677432][ T62] bond2 (unregistering): (slave veth5): Releasing active interface [ 849.687033][ T62] bond2 (unregistering): Released all slaves [ 849.768311][ T62] bond3 (unregistering): Released all slaves [ 849.850696][ T62] bond0 (unregistering): (slave veth9): Releasing active interface [ 849.860415][ T62] bond0 (unregistering): (slave bond6): Releasing active interface [ 849.868957][ T62] bond0 (unregistering): Released all slaves [ 849.950356][ T62] bond4 (unregistering): (slave veth11): Releasing active interface [ 849.959291][ T62] bond4 (unregistering): Released all slaves [ 850.042514][ T62] bond5 (unregistering): (slave veth13): Releasing active interface [ 850.051691][ T62] bond5 (unregistering): Released all slaves [ 850.136448][ T62] bond6 (unregistering): Released all slaves [ 850.234420][ T62] : left promiscuous mode [ 850.315881][ T62] tipc: Left network mode [ 850.596538][ T62] mac80211_hwsim hwsim7 wlan1 (unregistering): left allmulticast mode [ 850.816028][ T62] hsr_slave_0: left promiscuous mode [ 850.826547][ T62] hsr_slave_1: left promiscuous mode [ 850.834802][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.842560][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 850.852279][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.859660][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.871634][ T62] hsr_slave_0: left promiscuous mode [ 850.877283][ T62] hsr_slave_1: left promiscuous mode [ 850.883771][ T62] batman_adv: batadv0: Removing interface: virt_wifi0 [ 850.908113][ T62] veth1_macvtap: left promiscuous mode [ 850.914282][ T62] veth0_macvtap: left promiscuous mode [ 850.919835][ T62] veth1_vlan: left promiscuous mode [ 850.925371][ T62] veth0_vlan: left promiscuous mode [ 851.236473][ T62] team0 (unregistering): Port device team_slave_1 removed [ 851.270976][ T62] team0 (unregistering): Port device team_slave_0 removed [ 851.575132][ T62] pim6reg (unregistering): left allmulticast mode [ 852.617807][ T62] IPVS: stop unused estimator thread 0...