last executing test programs: 19m49.351683569s ago: executing program 3 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f00000000c0)=0x0) timer_getoverrun(r1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) unshare(0x22020600) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') setns(r3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r7, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a240104000502010207240705000005082408050400049604000000010302000100060006092403050503060581092403060101040505072404"], 0x0) 19m49.23190804s ago: executing program 4 (id=39): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket(0x23, 0x5, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="139776ff010070", 0x7}], 0x2) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) sched_setscheduler(0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 19m48.500358237s ago: executing program 4 (id=41): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f79f361879473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d068f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c58eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304165d39fd4afe683b2467c60e5b8eae897c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e9efb3e1e7a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r4 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d7e, 0x0, 0x0, 0x0, 0x0) 19m47.738456966s ago: executing program 3 (id=45): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) write$tun(r1, &(0x7f0000000040)={@void, @val={0x3, 0x1, 0xb68a, 0x1709, 0x0, 0xda}, @x25={0x2, 0x81, 0x23, "5e74fbc60c47ce92ad5593c062c2a0df61f4802e165610397bf57aea4d7d071bc20e441f812e31ee6edef2a4c02a7cc12ac52c5a36165358a2"}}, 0x46) syz_emit_ethernet(0x1bb, &(0x7f0000000240)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x1ad, 0x67, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, r0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0xc7, 0x1, 0x0, "69969340bf0b5cb9664af8e6dae9864dffdac1e1c6fcc9f217cb40b562ee105778c7580773dd995a20aa3e5cb2564282564a49a280b66754a12d4821347041349dac608b8dd481c735e1dc12eb44fddb022e36020dd6cd127d8b602fbcdd10f6684559b698d20703757003ea1795d3de37b747cf570be849758e720377afec137480a8b371405a80cc4fa7f85b75cf248a5824a21df34bd4888f11369447136149f77cbf32d43ff3f72e14ea7827f2a61a391e043543f230cb6b485ef084e9d06c1b4c62"}]}}, {"bfb6212f43ed3ed3e786c2295b62281af6e98c39e00fb1b08826bdb3c50944b305658a3849553e3eb02a58298075f39ca0464a9d6b5e335c2191d03a772454f0e0f60297c878b9ca8524312f0bdafd128ff53b14aa695b4bb714b69988805189c1f2667d5b6e9990887f6012d55c8a6c78fc0bb47187b8485309116f7c581a83b7d4c548dbb76985196ddfb6853ef16e96887771c2efbc4bd64d13bee9682df32aaec9fa123e1018813d30885f"}}}}}}, 0x0) 19m47.456477657s ago: executing program 4 (id=46): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="cd7ba83b9a2864a65a5922afbd29467eec366b540e1932", 0x17, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a000000000000611164000000000018000800000000000000000000000000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x17}, 0x9, 0x0, 0x0, 0x24004001}, 0x8001) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x4, 0x8, 0x0, r4, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x2000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x68c}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x4}, {0xfffffffffffffffe}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r8, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 19m46.549803431s ago: executing program 3 (id=49): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r5) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000000000109022400010000400009040000030300000009210000fd01220500090581030000520000"], 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220e00000008196b783be1e8d8cd0bbdc8fdda011fe55b1823aebef8604582"], 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 19m45.807668875s ago: executing program 4 (id=52): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000fda00d6ce00791048001700800008000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000240)={'fscrypt:', @auto=[0x61, 0x61, 0x64, 0x0, 0x33, 0x34, 0x63, 0x5, 0x64, 0x36, 0x64, 0x36, 0x65, 0x30, 0x31, 0x61]}, &(0x7f0000000280)={0x0, "906b102328e5a2d901e5ec156f3529bf82c1bb3235f92ed2e4f8e01f2099453885b6bed381ed3a9cd6f9835f77ba3712848f14614a1c0263600b871769d1a92d", 0x30}, 0x48, 0xfffffffffffffffc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) keyctl$revoke(0x3, r2) 19m43.369027927s ago: executing program 3 (id=56): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000030900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 19m43.171612541s ago: executing program 3 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40008000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x3, 0x3, 0x0, 0x6}, 'syz0\x00', 0x1c}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xffffffffffffffff, r3) setreuid(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x40408c4) recvmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000001500)=""/231, 0xe7}, {&(0x7f0000001600)=""/251, 0xfb}, {&(0x7f0000001700)=""/167, 0xa7}, {&(0x7f0000000080)=""/66, 0x42}], 0x7, &(0x7f00000017c0)=""/162, 0xa2}, 0x8}, {{&(0x7f0000000400)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001880)=""/223, 0xdf}, {&(0x7f0000001980)=""/241, 0xf1}, {&(0x7f0000001a80)=""/246, 0xf6}, {&(0x7f0000001b80)=""/195, 0xc3}, {&(0x7f0000001c80)=""/190, 0xbe}], 0x5, &(0x7f0000001dc0)=""/49, 0x31}}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e80)=""/131, 0x83}, {&(0x7f0000001f40)=""/149, 0x95}, {&(0x7f0000002000)=""/102, 0x66}, {&(0x7f0000002080)=""/178, 0xb2}], 0x4, &(0x7f0000002180)=""/4096, 0x1000}, 0xffffffff}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file1'}, 0xb) close(r6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 19m42.34378456s ago: executing program 4 (id=59): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x0, 0x18}, {0xf, 0x3}, 0x1ff, 0x3, 0x5}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0x1, 0x2003) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x834, 0x4}, 0x10}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) time(0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) sendto$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 19m42.143109001s ago: executing program 3 (id=61): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="cd7ba83b9a2864a65a5922afbd2946", 0xf, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x4, 0x8, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x2000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x68c}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x4}, {0xfffffffffffffffe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = dup2(r9, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r10, 0x7a) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 19m41.626704767s ago: executing program 4 (id=62): r0 = dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg(r3, &(0x7f00000018c0)={&(0x7f0000000440)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="7a9f8f1b5ffc37c9e83d4ba52c8aeb8ee78ab0f7258786ad40d94338c0f1e35037e2bdfae9a4a351a3ec6d8e37f626e6757e4bb985f005fcb489", 0x3a}, {&(0x7f00000004c0)="07e97205652ce5685e706c984171c07fd2f67991fafcc91dadfcdcdc0dc8dbfe2c5762d360bfb9e95a89397a", 0x2c}], 0x2, &(0x7f0000000540)=[{0xc0, 0x104, 0x4353, "14ea5d652b3569af5cb3aa798d7ee39bfc8d1ad65a1bd84d71ed42accb4f5a357613ddd4021f1590d0c3f0c4f941f598d702a583a26cce95d316b2d92d485a6b3014c58e40252512f1172c5cd6cb252e96ab71c3ad0e104a2ca8e095eb79fe11d955151ada3e7e29fb9b25c7ffe994f53968dc4caa64ff0ec05fc8a7dd7c77ce15f42e8e5f53250dd2cffc40ec074213570159c7c154f1c5ce3d5d66aa1d987b76ce7f53ce58dfecdbd9"}, {0xf8, 0x115, 0x3, "6b437ff1fbb20ae99ffeda42eeacd86a2cec435867d2acaf0fa8b9ae690ccafe81a8ae35e143eadc235ab4117c8c9486164c08b919a89b278ad055bf3cf761c393845829f3a794f79add107f5cb8b3611b60877cbcbf99f3dc4daaac73488464a7e00f541b4af3cf8c1d7fd2b103ab672bc4e5c7f2a120224a0027395687adbaf55f6c2fbc6227bc20991859eb27fd93670657ac07b3117689e3f1d805f27d8ae0db285fb288ebdc4d27dea49e4332e01d9acc126a300bde57ce58716b90fdcb1952703464cc884f21640181a55ffafa516b7808208bfbab39f2e836ce6372fc84459c"}, {0x60, 0x110, 0x7fffffff, "ad30ceefc935440d15c6fee755cdbf80bc4be987579d953dfc15e8a7ebb81e873323ef18d3a1d468a6bbdcfab49e35a5f8e86bd67c998528e729ae37d40d664394e7bff353626b2f78"}, {0x50, 0x116, 0xe2, "7a0a8bec5e6c8e4fa9e19bb36780f2e660eacd7b6d1829ca054dbeb015a4b4fca9c3a80cf9427a8f14d1b9f1fde951cfd4ee406c61871a49ef5eff8744398cc1"}, {0xf8, 0xff, 0x4, "34aafc1f2e3260a32920c2f671b0334d8ddaed8f9346cb8260268d05c36357a8bf4a8a85135c02785a30c3db31b9198cfcf5e73effacdcd62eb103cf854965ffeb2ee341f75490819016fcd8834be39d671f014b1fd26429f3935e184b93f2b321aa588e10ae8ce77de6d43e286f91f6bb41181c7216d9f88fc410c0abe2da5afac91283f2c25d3ce5a9dde154956a319722fdd8326a7b462332ab10a9ccc3044c0e78a84b95c614ee6cc28fd6662d05e8d884c191c0d2d9955c2a817ab656e29aa6dd6b1ac33a0a261ffe229998c506f6e672ed996bd36d79475a1876ddb7eb9d58fd1cce5673"}, {0x1010, 0x1, 0x2, "13bfca64c7159897d683e516d34df3a56a614683544b6afcd78374a46b8dd4f0c6c32afb813aa01faf25114fae1557aa4f2d39a8d00ad2004e47c7fe89ce9ea6cf062c8e96da0374dfdd214551e1bcdadf20cf26d655ea5a5632045a5e585e9fa31f11b11ba970e7ff80de4aa3becb09ff3048ee0ce56c630ac81dd38e4a0a0a16fb8ad90f5b8a73815a50ae918853834c7df531c7e7367b51a8aef3ad6afd77507a117ea0e62a82414f90bc9c102a1d632e15b4390b6979741cc8484ae906fad85c4787ba95e8c05d20145ed3d8a2ba069ed698d87db2f841fb72a1cb21fe7a0157bf50f3ce0bb74020cbe8f50fba14c102118e4a74fcf94d1bd6a05673d496a2f73d9d66ec87fd49e072b7fa8dff819f42388e12d2c1cf9ae9c5ac07648e6eb0f64da4efe29a13de7337db255d7435da943e9714aa04a56c6ed526f36212006ef73933ea4a9ae7d20738c4e7db9d739410738e15b124f2d3df65657edea382f9d8a4c5d096350c0a671939055b778cd104c23ad1dea0e29833ce6c25914e5f4fcab3a8159aea2fc76271dd1d19cf1d671974e50ad237bc2c9ae74ca379c65330295423e2cab7bbc5b6a79a2290acf5cbe1fba2959cbeaecd24ecf7db9e5c49efc85809489724b40d67cfeaf2a27716a86443c56e8ed41030ee16d09fecf414d0e097655de83e5dda1b566c6adea5f03c5e93a4f9d1af604dab51630bf3e7ed7e3c4935c1f584a5c5102023aecf1c202c680b2b09287b5e6476e55b907f4f9042711bceeb3c543c85f0cb5f53e4cfa831eb0074c4ee0533aca37a2ec2974b0da0ae02b8de6fc27b822359727ff07fe056e1afeee5db2e36c6a242d270070eb0325f743ba3ad48fa76b9f538b272840de33f5bf8103b930d907e0c85c6d94c3d50fcff437471fd4f07aa827c827c3c9d8d897383b3e79b39778e61faabbcbf9e2494a70ac00d46169a4de0392e6053a673ff502b78cd250deec91106f280304f14dd92174b0584be2fac6f90b6a7a75b7a38b764eeb4fb2f7d2a3a5e34fcad8e12333e5221f802556b809ca858f26f4192c6115e4d94648f06890f04d76855f66b4edc348a2454f0b0dd67ee7335104b1c93f182412a6ff9c28e586a0cb5c9f47c73f0c6c1f1e9d87e79d5b833323a552e180af34b9e349537f7929681525ed000f03bf442d0a64554778c6f3d7dab0c0fb23c4c2cdb680f9759c3b0e5538721d8937e16da6dd97816395a3d606f88adf26bee870e657de2e33b66fd9d40e0340330e44bdaab4e7180c75a31e33a0e27d28e9313ee791669bedcd176df947caa95c6bc5dce4dce6d40b05349d5493054ae9722bdbbe4ff1af5ffb25f17d1e24d7e17c421c2aeda2f7508021762690d0154d71763f5ebe71df2fd1994210507f6262de1ccffd9e4c291ee075777031914a78618482458b52ef053cd40211f469f6ae7e9f32904502946ad243294835d21d767f172d149d322159cd5428ccf7f0014749c3a1a65df7c6092794b0c83cb7159bf395e55950219c7954974a428470b35c57e68dc89fb0fb18e64fd7527429b2f949435c5f231f3f1a5db9763246a294958e7fe42b1812d20b77c727f0174b389e4bf873f56cb3eeffb94eabcafffcb1f0e39dac462a102d3af9ab9e16ce9112004a4a93adfdffa14faf51cc82e48afd5d4477283b0f4998c184f50675e75d38b45b4a239fc8495108382c350e4f963b423d2c66b04de75d3eb3865d19bdfc58cda10d55c55bb6aae818dc8f0afa75dfe531b8cd5f23befc775799b105da2947f99b094b39a125b51f3e9b31437a23da94f91d8556b6e4f7bd08cfba174c5b99fba1262c14e123ef258b416b3c4d372fe697e3c77550802ce852c8cea332bf938cbd98aee16955ca79af0ae47b911dea497125a5757ea6d9a643da1671469d9d14624cbfc40190199c1923b65cb1daeea0cc81f5a19e3e1d158944ecd747087bc3bdb2828b1aa43bc7921882748f6f0277aaa8079282f49b7c4b4c81df6052ee429028478f9f8d9fa66461b0c403de9015bf8e77ae0253372a16a3299733b57611221734debc08bf350c835a4ee7f4d660a5b8f0f12749ace6ac0e332d991eccea3aae12ce8e6c2b13ae8d5a5b2d0e3f67126ea81aac63c3208b37003ffd679ec91670905eb5bf9cb99ec592f8d08385b3cf77fe18208520ba43cbffc448b50d5cc0c4dbd5586634e2e2fa3cd83c144d164dcd4109b7d8847f56f1780c0c6274a16cd73285f73fbffe8194e91f12a51271997d864d3d8274baff268b261ceb965bddf37b20d85dac067a45ec0adb3d4c0ba3a4dd04c6960afbef327bfc3ecf415db7e99692d3bf87ea69b211e4c7484fb5975f58e082d0ad635c42d0cf3ba50b060d8ff167b42f6df003858f064013af46291de0e7409a9685e64bb424fdc6c7e9691bdd9acd316d94d38cd57049d84b049106325ce19e1436fc3473618a1093126919ae5db50639662557c9331a4b0fb077d6f43cdebba714bf4c9418ec3f0e79b1b60ca60a5db3628257b9f4baeab4e3304eabafa85e8121be953b7a460947d10de307b651818d58e678ca3f6a74073a89277519bcb5a4e8693013fac494e1ee239382acc062c09d4be60c6281ec47b65a2a265644f3b7079842aac3386aaebd8ae4b73762e2a1a3462079f549f7708f79635a2215c01ab4d6345d38567538fd31cfb9be38b5cb864d5a6ec9235eb5e9318f6ef71300a7dab3285554a46ad50d4e4640b2464d4a5c7e30ce71ed15fe7c2ba2f5601e9dc5a1ca1a06d5a3dd281182e8e1e2876a36afa99c9865ffdc67946b6ebd7bc8da56f6e9c0641c88b59c08b723814d012d55a64f8ea902d09c983dba70bc3142508284a2a7273986088dafd8bf5693ba7e520b767000a7f78c54ce0829540f094177ca15bbeefdaa310be6fa751d67b867939da508e4237f2c79ed89fee43f000e6839571996535e376e31e89be60385e7c94375c39b30f8f40bf44ccbae2f0083835bd45c1609ca10a56e26fa88ec05e1bd45cd2b3b8b56ce1e6e2578fce7bc939ce56f45f4b2ba474431444538a2985ab30daf030c995ca39b76ba72d97196bd251277b5567b3ba80012c074156626d2ff297fac3777f9b6dc7e8ac4837e44bb083982f956db5d7371cc7f96d3cdcdbaa44ff7b624d212efd8dbc65fedb888825615d21598d735412a2f7e01f1912b40c4b0a8fbb52b64c86b33581014042dbe90b1f9205dd4b7db9295cdbbd87050a040861a31bd674d354eb6bdb9a6972e50f438473a94fe6ecf65cdd9e5b4114076e65b56eb3c38c5f5359ced3cc20ef5dc9e8fc2187a7e44123ed307385c994549649d81204cb0ae5de7d608ecd8c4bf3cfc788009ec877ff77dbdba5971b88cc3e615a38e40d0f48f03e5acd2aa214a97036beb08a581849e9f1c413d2f5e7939fc835e39755f36b181dd68c96ef5583d432c3db2fdd13e3e91bf0a3d2f99d4575a70f88427d857735e5a4cf6ca5a59ddda977c2a7f7fd2a874575341fbf660e65e4e69fcfe90c2ddf2eb3fc9c8e99de87f7a7454ee8b474bed0aab801e266e4408a36040eebc35eb3a6bbeecf91491d32b87e90e40599649d5b979a8c25a51680b0ee2b7924afaa657be48c31bf71e16520aa0110751447546d19faf9c2e0154f0add4ef9094cad653d12c87518cfb976dc02bbb07b4ee61fdfcb07e79d33c5b72de1e7b2b4b0adc5ff953b3699ee9c7ce1734b859d2b93bfdb0956f708343014872f880b1d403c4b585e70e588af9f49dfbc1928beb01f0760e5aca4a6288de24a864cf2c24ae0e7c291b257c3f5cd173539cf49cd38694e37a695edcf4dd1170b8efd8f3f6d54a32de8ab86c301d57a32ecd1e8df1f90ce18554c5d2d04c0723a7c2a7a5c63df106a9c05039b88a0dcbcd945eafa8e8171f4730687c514450e61e8d80ee3b2ee2b2978d74f1a4d393668068c6bc1a54360dfadfc4432fe7910cab2420864a1062b8507e0d17170559a18e084992ffbe7c72c7552c90e9b1c25649b0c4f31a312d411d218d5814a0577ad2c36dc6d5e5f505d1d31e288cddc04816bbd0e67c8d5995560cc4829781cd0d7bfe7c5fd3169d622da53c33ba4f2a5dd848e22fa70807e2bb7a4c069ed447499fad8d7f209379928f6bab2f98f1e05ff4e70dcb41d0479d533b2cd9403f176df6c0df3d6046ece1835167cec178c16ef473e9a53b317e7afc6732238c31d999f0c2cc5063ee42f7ed27fc70e8f4037d56bd0def7280fce29e67fef72d674f630ea078393a54dd1d57e6ffbea2e2768129f709ade66a79e47810af5dc48e877d23d18b522c79b091ccd4ad0ec5fc2e045f04809f139db2805af19a2ead0db22878c593a068e284ca1ba279f387fd53a80b7af6da55ddb157a2911e162ec2214cda9eaf504a561e37fc9d3fa3b668b90adb23a229fcc11050b4becc22ba60094831250c3a7cb653031efedf1ee40f8ccbf02390b74a897e5bbae0c12341d0a134fdf95043642c5ed9825b066a07f3d4e51e8f4e2249f6f75abf16cd282b206fa07bbffeb2a9b3de444dd1b4f0059bb1f58c61ec2a483c96d63546bb06a88946d8a3bcddbc5e773f3f105bd7c5669d7a4c828174a06438a3c8eefb80777aed920f4ee938f8f172f70b4d68a2618ffb9bf7d7cddc9ce738d0f6287d533f1b7455da2e1e83ed348b5df45dd6ed943ae60f306cfcc5722766bc9f1c7530dd2c2daf4cd17d928298107f37e520c47a6aa42169fb206b59ee59e92e9a7bdc228d85c9213c5a2a9fc27ced08981b0d7f5a8fb83fca5b8cea8f2d18b5c5618ee47759cf397391dfbc8e32cf1b208901fc1a5b6ca46c61ab465aef7eb3712c15e6244da11ad439b69075b6fc35a0d771aad50436eaf5c2ec6a84917d6c0b1fb32b1a6f7eb7a88c4614183f0cc92dcd4f5a05eb78866c5c966b4ff349244112545c81d2a92df3f8b1cf40d5aeb48b617a7555d2d72f2195dc84c45659eaa95c5276a9add709ea10009543ddcb23348a2b19795b3d86f64ca48ad949004a367a31e290a76982b8b70b3ce3d42a5447804c14a7dce35a4e07b3cf1ea3064a5b8ffa79d604800ff3394d39607a6ea9c708f629d12f9af5f9df5d050394f31d9fe417f1e1ba17200a635995bebb6741159a2a7f150406f31845f810fa4c5165193778d20dd20cdc1155bda9643fbed58a727044e0a55e2e4df430e35a30b31a0ccab7aef9cc73e56a00020428dfb98a55fb1fade387e5ac95cb141c7e271eaec6ceeda07cf6410179a52326c092c969f94ab36993c36a49db5ab642d5288fb187f9fff9ba0f33b9ab6887131192f668232031385c1eae995194b00c48bf2159a54c84cc55f717d51871d940a1132fec45afb65a7a7e92f58928424a9c4b387a49f1b24649d8fba936e50f4e3ea78d5e1bfb7a477e429ce5e494d153797aaa6fab0296e4adfeb587172bc412364de216a6234561074041028177e9a16204434d9547806107632ed9df32d85e77fa9040763245a7fd7da1eefdd6f040de8fa19fbe68c935f37ade2501ac233cac4830bf4c06dba3b80d1269d8e6c7e51010decb5abb5f9c628fe22f9bd086c903c978a84ad14522531b366f05d559e06e120e43f6222dad23bca921f6c06ae6896b3fa6b9d43e382035261b6d068fa243e9589ecb782f3ab352fcddebab173475a443b04a89e60a4526a3901b56aed2028056778449165575fd2972c3083525b344e4d23126e769c08cd20d9804ec5dd21e8f3afc08dac0b9e9263b81df4c5a7999045647894bb831b25f67f5dd504f4187dbd"}], 0x1370}, 0x4008080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5200000226bd1a2c9163cb5ba0d66352000000a87e9ac268c4529b023a9f96d3aff151127e6facb85f54cabc5249866f59edbd011f8363fec1e3df725ab7a7b6ff7832921d04c1140911ca9ce292146bbfff4e7ecef6e648d2735d41b480b9a03aeb764753690c9b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) 19m20.339785807s ago: executing program 32 (id=61): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="cd7ba83b9a2864a65a5922afbd2946", 0xf, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x8, 0x4, 0x8, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = syz_open_dev$radio(&(0x7f0000000200), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x2000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage=0x68c}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x4}, {0xfffffffffffffffe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = dup2(r9, r0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r10, 0x7a) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) 19m20.140618507s ago: executing program 33 (id=62): r0 = dup(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg(r3, &(0x7f00000018c0)={&(0x7f0000000440)=@vsock={0x28, 0x0, 0x2711, @my=0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="7a9f8f1b5ffc37c9e83d4ba52c8aeb8ee78ab0f7258786ad40d94338c0f1e35037e2bdfae9a4a351a3ec6d8e37f626e6757e4bb985f005fcb489", 0x3a}, {&(0x7f00000004c0)="07e97205652ce5685e706c984171c07fd2f67991fafcc91dadfcdcdc0dc8dbfe2c5762d360bfb9e95a89397a", 0x2c}], 0x2, &(0x7f0000000540)=[{0xc0, 0x104, 0x4353, "14ea5d652b3569af5cb3aa798d7ee39bfc8d1ad65a1bd84d71ed42accb4f5a357613ddd4021f1590d0c3f0c4f941f598d702a583a26cce95d316b2d92d485a6b3014c58e40252512f1172c5cd6cb252e96ab71c3ad0e104a2ca8e095eb79fe11d955151ada3e7e29fb9b25c7ffe994f53968dc4caa64ff0ec05fc8a7dd7c77ce15f42e8e5f53250dd2cffc40ec074213570159c7c154f1c5ce3d5d66aa1d987b76ce7f53ce58dfecdbd9"}, {0xf8, 0x115, 0x3, "6b437ff1fbb20ae99ffeda42eeacd86a2cec435867d2acaf0fa8b9ae690ccafe81a8ae35e143eadc235ab4117c8c9486164c08b919a89b278ad055bf3cf761c393845829f3a794f79add107f5cb8b3611b60877cbcbf99f3dc4daaac73488464a7e00f541b4af3cf8c1d7fd2b103ab672bc4e5c7f2a120224a0027395687adbaf55f6c2fbc6227bc20991859eb27fd93670657ac07b3117689e3f1d805f27d8ae0db285fb288ebdc4d27dea49e4332e01d9acc126a300bde57ce58716b90fdcb1952703464cc884f21640181a55ffafa516b7808208bfbab39f2e836ce6372fc84459c"}, {0x60, 0x110, 0x7fffffff, "ad30ceefc935440d15c6fee755cdbf80bc4be987579d953dfc15e8a7ebb81e873323ef18d3a1d468a6bbdcfab49e35a5f8e86bd67c998528e729ae37d40d664394e7bff353626b2f78"}, {0x50, 0x116, 0xe2, "7a0a8bec5e6c8e4fa9e19bb36780f2e660eacd7b6d1829ca054dbeb015a4b4fca9c3a80cf9427a8f14d1b9f1fde951cfd4ee406c61871a49ef5eff8744398cc1"}, {0xf8, 0xff, 0x4, "34aafc1f2e3260a32920c2f671b0334d8ddaed8f9346cb8260268d05c36357a8bf4a8a85135c02785a30c3db31b9198cfcf5e73effacdcd62eb103cf854965ffeb2ee341f75490819016fcd8834be39d671f014b1fd26429f3935e184b93f2b321aa588e10ae8ce77de6d43e286f91f6bb41181c7216d9f88fc410c0abe2da5afac91283f2c25d3ce5a9dde154956a319722fdd8326a7b462332ab10a9ccc3044c0e78a84b95c614ee6cc28fd6662d05e8d884c191c0d2d9955c2a817ab656e29aa6dd6b1ac33a0a261ffe229998c506f6e672ed996bd36d79475a1876ddb7eb9d58fd1cce5673"}, {0x1010, 0x1, 0x2, "13bfca64c7159897d683e516d34df3a56a614683544b6afcd78374a46b8dd4f0c6c32afb813aa01faf25114fae1557aa4f2d39a8d00ad2004e47c7fe89ce9ea6cf062c8e96da0374dfdd214551e1bcdadf20cf26d655ea5a5632045a5e585e9fa31f11b11ba970e7ff80de4aa3becb09ff3048ee0ce56c630ac81dd38e4a0a0a16fb8ad90f5b8a73815a50ae918853834c7df531c7e7367b51a8aef3ad6afd77507a117ea0e62a82414f90bc9c102a1d632e15b4390b6979741cc8484ae906fad85c4787ba95e8c05d20145ed3d8a2ba069ed698d87db2f841fb72a1cb21fe7a0157bf50f3ce0bb74020cbe8f50fba14c102118e4a74fcf94d1bd6a05673d496a2f73d9d66ec87fd49e072b7fa8dff819f42388e12d2c1cf9ae9c5ac07648e6eb0f64da4efe29a13de7337db255d7435da943e9714aa04a56c6ed526f36212006ef73933ea4a9ae7d20738c4e7db9d739410738e15b124f2d3df65657edea382f9d8a4c5d096350c0a671939055b778cd104c23ad1dea0e29833ce6c25914e5f4fcab3a8159aea2fc76271dd1d19cf1d671974e50ad237bc2c9ae74ca379c65330295423e2cab7bbc5b6a79a2290acf5cbe1fba2959cbeaecd24ecf7db9e5c49efc85809489724b40d67cfeaf2a27716a86443c56e8ed41030ee16d09fecf414d0e097655de83e5dda1b566c6adea5f03c5e93a4f9d1af604dab51630bf3e7ed7e3c4935c1f584a5c5102023aecf1c202c680b2b09287b5e6476e55b907f4f9042711bceeb3c543c85f0cb5f53e4cfa831eb0074c4ee0533aca37a2ec2974b0da0ae02b8de6fc27b822359727ff07fe056e1afeee5db2e36c6a242d270070eb0325f743ba3ad48fa76b9f538b272840de33f5bf8103b930d907e0c85c6d94c3d50fcff437471fd4f07aa827c827c3c9d8d897383b3e79b39778e61faabbcbf9e2494a70ac00d46169a4de0392e6053a673ff502b78cd250deec91106f280304f14dd92174b0584be2fac6f90b6a7a75b7a38b764eeb4fb2f7d2a3a5e34fcad8e12333e5221f802556b809ca858f26f4192c6115e4d94648f06890f04d76855f66b4edc348a2454f0b0dd67ee7335104b1c93f182412a6ff9c28e586a0cb5c9f47c73f0c6c1f1e9d87e79d5b833323a552e180af34b9e349537f7929681525ed000f03bf442d0a64554778c6f3d7dab0c0fb23c4c2cdb680f9759c3b0e5538721d8937e16da6dd97816395a3d606f88adf26bee870e657de2e33b66fd9d40e0340330e44bdaab4e7180c75a31e33a0e27d28e9313ee791669bedcd176df947caa95c6bc5dce4dce6d40b05349d5493054ae9722bdbbe4ff1af5ffb25f17d1e24d7e17c421c2aeda2f7508021762690d0154d71763f5ebe71df2fd1994210507f6262de1ccffd9e4c291ee075777031914a78618482458b52ef053cd40211f469f6ae7e9f32904502946ad243294835d21d767f172d149d322159cd5428ccf7f0014749c3a1a65df7c6092794b0c83cb7159bf395e55950219c7954974a428470b35c57e68dc89fb0fb18e64fd7527429b2f949435c5f231f3f1a5db9763246a294958e7fe42b1812d20b77c727f0174b389e4bf873f56cb3eeffb94eabcafffcb1f0e39dac462a102d3af9ab9e16ce9112004a4a93adfdffa14faf51cc82e48afd5d4477283b0f4998c184f50675e75d38b45b4a239fc8495108382c350e4f963b423d2c66b04de75d3eb3865d19bdfc58cda10d55c55bb6aae818dc8f0afa75dfe531b8cd5f23befc775799b105da2947f99b094b39a125b51f3e9b31437a23da94f91d8556b6e4f7bd08cfba174c5b99fba1262c14e123ef258b416b3c4d372fe697e3c77550802ce852c8cea332bf938cbd98aee16955ca79af0ae47b911dea497125a5757ea6d9a643da1671469d9d14624cbfc40190199c1923b65cb1daeea0cc81f5a19e3e1d158944ecd747087bc3bdb2828b1aa43bc7921882748f6f0277aaa8079282f49b7c4b4c81df6052ee429028478f9f8d9fa66461b0c403de9015bf8e77ae0253372a16a3299733b57611221734debc08bf350c835a4ee7f4d660a5b8f0f12749ace6ac0e332d991eccea3aae12ce8e6c2b13ae8d5a5b2d0e3f67126ea81aac63c3208b37003ffd679ec91670905eb5bf9cb99ec592f8d08385b3cf77fe18208520ba43cbffc448b50d5cc0c4dbd5586634e2e2fa3cd83c144d164dcd4109b7d8847f56f1780c0c6274a16cd73285f73fbffe8194e91f12a51271997d864d3d8274baff268b261ceb965bddf37b20d85dac067a45ec0adb3d4c0ba3a4dd04c6960afbef327bfc3ecf415db7e99692d3bf87ea69b211e4c7484fb5975f58e082d0ad635c42d0cf3ba50b060d8ff167b42f6df003858f064013af46291de0e7409a9685e64bb424fdc6c7e9691bdd9acd316d94d38cd57049d84b049106325ce19e1436fc3473618a1093126919ae5db50639662557c9331a4b0fb077d6f43cdebba714bf4c9418ec3f0e79b1b60ca60a5db3628257b9f4baeab4e3304eabafa85e8121be953b7a460947d10de307b651818d58e678ca3f6a74073a89277519bcb5a4e8693013fac494e1ee239382acc062c09d4be60c6281ec47b65a2a265644f3b7079842aac3386aaebd8ae4b73762e2a1a3462079f549f7708f79635a2215c01ab4d6345d38567538fd31cfb9be38b5cb864d5a6ec9235eb5e9318f6ef71300a7dab3285554a46ad50d4e4640b2464d4a5c7e30ce71ed15fe7c2ba2f5601e9dc5a1ca1a06d5a3dd281182e8e1e2876a36afa99c9865ffdc67946b6ebd7bc8da56f6e9c0641c88b59c08b723814d012d55a64f8ea902d09c983dba70bc3142508284a2a7273986088dafd8bf5693ba7e520b767000a7f78c54ce0829540f094177ca15bbeefdaa310be6fa751d67b867939da508e4237f2c79ed89fee43f000e6839571996535e376e31e89be60385e7c94375c39b30f8f40bf44ccbae2f0083835bd45c1609ca10a56e26fa88ec05e1bd45cd2b3b8b56ce1e6e2578fce7bc939ce56f45f4b2ba474431444538a2985ab30daf030c995ca39b76ba72d97196bd251277b5567b3ba80012c074156626d2ff297fac3777f9b6dc7e8ac4837e44bb083982f956db5d7371cc7f96d3cdcdbaa44ff7b624d212efd8dbc65fedb888825615d21598d735412a2f7e01f1912b40c4b0a8fbb52b64c86b33581014042dbe90b1f9205dd4b7db9295cdbbd87050a040861a31bd674d354eb6bdb9a6972e50f438473a94fe6ecf65cdd9e5b4114076e65b56eb3c38c5f5359ced3cc20ef5dc9e8fc2187a7e44123ed307385c994549649d81204cb0ae5de7d608ecd8c4bf3cfc788009ec877ff77dbdba5971b88cc3e615a38e40d0f48f03e5acd2aa214a97036beb08a581849e9f1c413d2f5e7939fc835e39755f36b181dd68c96ef5583d432c3db2fdd13e3e91bf0a3d2f99d4575a70f88427d857735e5a4cf6ca5a59ddda977c2a7f7fd2a874575341fbf660e65e4e69fcfe90c2ddf2eb3fc9c8e99de87f7a7454ee8b474bed0aab801e266e4408a36040eebc35eb3a6bbeecf91491d32b87e90e40599649d5b979a8c25a51680b0ee2b7924afaa657be48c31bf71e16520aa0110751447546d19faf9c2e0154f0add4ef9094cad653d12c87518cfb976dc02bbb07b4ee61fdfcb07e79d33c5b72de1e7b2b4b0adc5ff953b3699ee9c7ce1734b859d2b93bfdb0956f708343014872f880b1d403c4b585e70e588af9f49dfbc1928beb01f0760e5aca4a6288de24a864cf2c24ae0e7c291b257c3f5cd173539cf49cd38694e37a695edcf4dd1170b8efd8f3f6d54a32de8ab86c301d57a32ecd1e8df1f90ce18554c5d2d04c0723a7c2a7a5c63df106a9c05039b88a0dcbcd945eafa8e8171f4730687c514450e61e8d80ee3b2ee2b2978d74f1a4d393668068c6bc1a54360dfadfc4432fe7910cab2420864a1062b8507e0d17170559a18e084992ffbe7c72c7552c90e9b1c25649b0c4f31a312d411d218d5814a0577ad2c36dc6d5e5f505d1d31e288cddc04816bbd0e67c8d5995560cc4829781cd0d7bfe7c5fd3169d622da53c33ba4f2a5dd848e22fa70807e2bb7a4c069ed447499fad8d7f209379928f6bab2f98f1e05ff4e70dcb41d0479d533b2cd9403f176df6c0df3d6046ece1835167cec178c16ef473e9a53b317e7afc6732238c31d999f0c2cc5063ee42f7ed27fc70e8f4037d56bd0def7280fce29e67fef72d674f630ea078393a54dd1d57e6ffbea2e2768129f709ade66a79e47810af5dc48e877d23d18b522c79b091ccd4ad0ec5fc2e045f04809f139db2805af19a2ead0db22878c593a068e284ca1ba279f387fd53a80b7af6da55ddb157a2911e162ec2214cda9eaf504a561e37fc9d3fa3b668b90adb23a229fcc11050b4becc22ba60094831250c3a7cb653031efedf1ee40f8ccbf02390b74a897e5bbae0c12341d0a134fdf95043642c5ed9825b066a07f3d4e51e8f4e2249f6f75abf16cd282b206fa07bbffeb2a9b3de444dd1b4f0059bb1f58c61ec2a483c96d63546bb06a88946d8a3bcddbc5e773f3f105bd7c5669d7a4c828174a06438a3c8eefb80777aed920f4ee938f8f172f70b4d68a2618ffb9bf7d7cddc9ce738d0f6287d533f1b7455da2e1e83ed348b5df45dd6ed943ae60f306cfcc5722766bc9f1c7530dd2c2daf4cd17d928298107f37e520c47a6aa42169fb206b59ee59e92e9a7bdc228d85c9213c5a2a9fc27ced08981b0d7f5a8fb83fca5b8cea8f2d18b5c5618ee47759cf397391dfbc8e32cf1b208901fc1a5b6ca46c61ab465aef7eb3712c15e6244da11ad439b69075b6fc35a0d771aad50436eaf5c2ec6a84917d6c0b1fb32b1a6f7eb7a88c4614183f0cc92dcd4f5a05eb78866c5c966b4ff349244112545c81d2a92df3f8b1cf40d5aeb48b617a7555d2d72f2195dc84c45659eaa95c5276a9add709ea10009543ddcb23348a2b19795b3d86f64ca48ad949004a367a31e290a76982b8b70b3ce3d42a5447804c14a7dce35a4e07b3cf1ea3064a5b8ffa79d604800ff3394d39607a6ea9c708f629d12f9af5f9df5d050394f31d9fe417f1e1ba17200a635995bebb6741159a2a7f150406f31845f810fa4c5165193778d20dd20cdc1155bda9643fbed58a727044e0a55e2e4df430e35a30b31a0ccab7aef9cc73e56a00020428dfb98a55fb1fade387e5ac95cb141c7e271eaec6ceeda07cf6410179a52326c092c969f94ab36993c36a49db5ab642d5288fb187f9fff9ba0f33b9ab6887131192f668232031385c1eae995194b00c48bf2159a54c84cc55f717d51871d940a1132fec45afb65a7a7e92f58928424a9c4b387a49f1b24649d8fba936e50f4e3ea78d5e1bfb7a477e429ce5e494d153797aaa6fab0296e4adfeb587172bc412364de216a6234561074041028177e9a16204434d9547806107632ed9df32d85e77fa9040763245a7fd7da1eefdd6f040de8fa19fbe68c935f37ade2501ac233cac4830bf4c06dba3b80d1269d8e6c7e51010decb5abb5f9c628fe22f9bd086c903c978a84ad14522531b366f05d559e06e120e43f6222dad23bca921f6c06ae6896b3fa6b9d43e382035261b6d068fa243e9589ecb782f3ab352fcddebab173475a443b04a89e60a4526a3901b56aed2028056778449165575fd2972c3083525b344e4d23126e769c08cd20d9804ec5dd21e8f3afc08dac0b9e9263b81df4c5a7999045647894bb831b25f67f5dd504f4187dbd"}], 0x1370}, 0x4008080) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5200000226bd1a2c9163cb5ba0d66352000000a87e9ac268c4529b023a9f96d3aff151127e6facb85f54cabc5249866f59edbd011f8363fec1e3df725ab7a7b6ff7832921d04c1140911ca9ce292146bbfff4e7ecef6e648d2735d41b480b9a03aeb764753690c9b"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, 0x0, 0x0) 9m13.926554893s ago: executing program 6 (id=1710): syz_usb_connect(0x0, 0x38, &(0x7f0000000040)=ANY=[@ANYBLOB="120110038121e940e60491553994010203010902260001000000000904000002e515bb000905040209000000000905884e"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_read(r0, 0x3, 0x5d, &(0x7f00000001c0)=""/93) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), 0xffffffffffffffff) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000240)={0xfffffff9, 0x5, 0x6, 0x7, 0x42, "ed0f00"}) (async) r2 = getpid() (async) r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x6}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x21800, 0x0) (async) prctl$PR_SET_MM(0x41555856, 0x20000000, &(0x7f0000ffd000/0x2000)=nil) 9m13.629951294s ago: executing program 6 (id=1712): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x8000, 0x10, 0xc6, 0x8, {{0x18, 0x4, 0x1, 0x33, 0x60, 0x65, 0x0, 0x1b, 0x2f, 0x0, @loopback, @multicast1, {[@noop, @cipso={0x86, 0x34, 0x3, [{0x5, 0x4, "eee6"}, {0x6, 0x2}, {0x0, 0x10, "fb69eeb0a4392a107e0ef3effde4"}, {0x7, 0x6, "3071f898"}, {0x0, 0x12, "8d01001ef935e0bb81c32ce71b4fa3bb"}]}, @end, @lsrr={0x83, 0x3, 0xa}, @noop, @timestamp={0x44, 0x8, 0x93, 0x0, 0x8, [0x5]}, @timestamp={0x44, 0x8, 0x98, 0x0, 0xe, [0x1]}]}}}}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x200000100000011, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000016000300686173683a6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084) 9m13.271475422s ago: executing program 6 (id=1716): socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x387, @tick=0x800, 0x0, {}, 0xfc}) r3 = syz_open_dev$vim2m(&(0x7f0000000200), 0x4, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getgroups(0x4, &(0x7f0000000300)=[0x0, 0xee00, 0x0, 0x0]) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r7, &(0x7f0000000180), 0x0}, 0x20) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0x13, 0x1, 0x3, "10e2dd61014b3841d23c1960672f1000", 0x38303553}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) eventfd2(0x0, 0x0) 9m11.51584705s ago: executing program 6 (id=1717): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) syslog(0x1, &(0x7f0000000180)=""/58, 0x3a) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000900)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0xa00, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000140)=0xf, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x800000000000002, 0x4) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, 0x0, 0x0) 9m10.492505786s ago: executing program 6 (id=1720): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = fanotify_init(0x2, 0x8000) fanotify_mark(r1, 0x8, 0x15, r0, &(0x7f0000000080)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000180)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000003000000007a0001f26500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb6, &(0x7f0000000140)=""/182, 0xc1000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1800000, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0xa000000d}) epoll_create1(0x0) close(r6) 9m9.51599705s ago: executing program 6 (id=1725): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)=ANY=[@ANYBLOB="5cc700001700000081"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 8m53.87539064s ago: executing program 34 (id=1725): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)=ANY=[@ANYBLOB="5cc700001700000081"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 6m11.177699456s ago: executing program 1 (id=2266): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={r5, 0x7}, 0x8) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="020a080802000041ba0225be1146"], 0x10}}, 0x240448a0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r9, {0x7, 0x9}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r7, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) ppoll(&(0x7f00000001c0)=[{r6, 0x14}, {r10, 0x503}, {r4, 0x1410}], 0x3, &(0x7f0000002280), &(0x7f00000022c0)={[0xa733]}, 0x8) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0x0, r11}, 0x10) 6m8.920769092s ago: executing program 1 (id=2271): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c8300a0001b4383369060001000a0902000300"], 0xf) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0xac, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x10, 0x0, 0x1, [@typed={0x82, 0x8, 0x0, 0x0, @binary="509d5dba6c50869ca71ec714b69739fc7eb4464e4b4c200003f460a768d2149821eb570d55bdf9c7ec33e87d6b7b3328f40e7a7ee63fd9ecdfdecf44f1ed43b28ac62902ae549e7dffe73df6ffa0b7bd9e7af241ea0bcaccdc07e7e3a67ffdb31dd9ac07c4539116d944d69b30fe22b75efc16ab7259989d89d02bd4a509"}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xac}, 0x1, 0x0, 0x0, 0x40800}, 0x0) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) setresuid(0x0, 0xee01, 0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r1, 0xb) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca000301a670000904000000010300000a2401"], 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x7, 0xc8}}}, 0x5) 6m7.154578602s ago: executing program 1 (id=2274): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061142c00feffffff0700"/32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x420000008b}, 0x0) ptrace(0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x800442d2, 0x200000f3) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x40, 0x400) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) sendto$inet6(r4, &(0x7f00000000c0)='H', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 6m5.333594388s ago: executing program 1 (id=2277): syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x8afa89, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "004080f10700003e0d095d00"}) r2 = syz_open_pts(r1, 0x801) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) lseek(r0, 0x200038, 0x1) unshare(0x2040400) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xb) copy_file_range(r5, &(0x7f0000000080), r4, &(0x7f0000000100), 0xfffffffffffffff8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e21, 0xd, @dev={0xfe, 0x80, '\x00', 0x2c}, 0xcbef}}, 0x9, 0x3ff}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 6m3.509705722s ago: executing program 1 (id=2283): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x207645a}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='afs_make_fs_calli\x00', r3, 0x0, 0x40}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, &(0x7f0000000380)=""/186, 0xba) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="394c82400400000000000000020000000000000000000000000000009f00000004000000726b6f746d6fb8a461646500e10000000000000000ea3bffc7fe58415e90deea7c47e7a0ca1cd86445d4121387020cf470fe9d0683663b7febc9c6ffd2b41f915633b9eb132df59ed65a646daddd0baf1a5a5a8c92aad93d742e9a30acae92c49b78831b33ee45106f9410a225773ee0171adce654d3bfc7874a5c41a91804b5faf61d90339eb96612f7caea82ebe976c9b29c9be30956be53b6c632d12b0f00"], 0x0, 0x0, &(0x7f0000000000)={0x130}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x0, 0x2, 0x2}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 6m0.775067469s ago: executing program 1 (id=2287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0080400000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000040), &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) r4 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x262, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x58, 0x9) r9 = eventfd(0x400) fremovexattr(r9, 0x0) 5m44.813895068s ago: executing program 35 (id=2287): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0xffffffffffffff5a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0080400000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000040), &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0xfe, 0x3, 0x0, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0xa}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0x9}, {0x7, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x60, 0x4, '\x00', 0x12}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x7}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) r4 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x262, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x9, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f00000000c0)=0x58, 0x9) r9 = eventfd(0x400) fremovexattr(r9, 0x0) 19.629060675s ago: executing program 8 (id=3173): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x3, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109023600"], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect(0x5, 0x4f, 0x0, 0x0) 17.099055285s ago: executing program 0 (id=3177): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000180)='4\x00', 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x8, {"a2e3ad21ed6b52f99cfbf4c087f70c1b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295cba0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783f287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4fe5b7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e45df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x101c}}, 0x20002046) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r6, 0x0) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000700), 0x42280, 0x0) r9 = syz_io_uring_setup(0x1e1e, &(0x7f00000002c0)={0x0, 0x86f7, 0x2, 0x0, 0x1000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r9, 0x48e9, 0x0, 0x2, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @remote}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) 16.859868809s ago: executing program 0 (id=3178): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) (rerun: 64) r0 = socket(0xa, 0x40000000002, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x6, 0x7, 0xfffffffffffffa9f, 0x6, 0x1, 0x4b3]}, &(0x7f0000000000)=0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x0, 0x0, 0x2, 0x7, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 16.179833836s ago: executing program 0 (id=3181): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000700000010000034366567f221978756640000730000000000000001f400000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d651833e6e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469de", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) 16.165333698s ago: executing program 8 (id=3182): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 15.431627166s ago: executing program 8 (id=3183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f000053d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3468000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_usb_connect(0x2, 0x54c, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xbc, 0x19, 0xe0, 0x10, 0x553, 0x202, 0xcee1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53a, 0x3, 0xf7, 0x7e, 0x0, 0x8, [{{0x9, 0x4, 0x68, 0x1, 0x6, 0x97, 0x87, 0x4, 0x9, [@hid_hid={0x9, 0x21, 0x1ff, 0xe, 0x1, {0x22, 0x18d}}], [{{0x9, 0x5, 0x6, 0x3, 0x400, 0x2, 0xf, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x37, 0xf}]}}, {{0x9, 0x5, 0x6, 0x10, 0x0, 0x80, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0x7d, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}, @generic={0x82, 0x8, "c7de66c90a609d6809488a36a6335354c019108d662db8cce5cd39a2c4c7386f172f8f974ab82d1fcf61a060d8554dd046a0cc85cd23d70c16aae706e8366641da1b05a7d610fae19d011bd5f7155bb0698613d43f6760aca8d21ae252bb1667a4223f9c2e0471712bf0385eed576e01caa405acb83ea1330265700a29d8017a"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0xf, 0x4, 0x8, [@generic={0xf4, 0x4, "14d453e6f641d49d314763dce7814715459fbde8f4f2e315362cbcab062ed3df97b3dc2f7625b6b135f614b1fc29462c1d03e4ddce3ae64a3e93e75b564afd501972061a1274f492a59dad818a209083452986dd18b5e4dbc712dddb1941a642b55951e854997ba9a40e51bb5fd7620083aeaf84a39ec251801038e232a14c7099f55b80f3993dcceb828d331e4ace9a8095e392ff797db62efc7e056f2bcbb7d10e391dbeec6053d03da06a720fe22cae94b402341d850e1665411c9bfa32c6d0d7e4161a81421dde8b4ecb9c3e0bd2035d2ad7db5f4fd35f6501839aa83d53e66d3095cfcc658fad42261b20ec55dca5ea"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x3, 0x9, 0x9, [@generic={0xe2, 0x0, "64db3099619f994ed34b2e879c5245facd1b3808275be2fad0b4ab4a441e39d02e2cf24f6e7fd32ce414fa7fc8514c3de161b826169f34be1100d976107ef1ddf7abfb8044bab6bf2f4ffd1811b1dae6bdce59f9e475cebf98c2156c6f5a635e779dc33c890260d13e3544f3517d45768334c28a80cba84b104617d29638e59f3875be953ef5e8b783d18e2553d3002d6c3a1342bbb3cfbb708015dfb8509893fa59d63db212ba5911c7f5315076ab370f321c0c7ca8bbb449b996ddb40ac02cfd90b0fbe8bae4e2a5c4bee3cbcda31dbc8a4aa63cffafabb4b3d1ca3a74c321"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0xc6, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4b, 0x7fff}]}}]}}, {{0x9, 0x4, 0xa0, 0x8, 0x3, 0xff, 0xff, 0xff, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x4}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x1, "fbe9bf592b76"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0x24, 0xc, "a3a6c24bdcfa"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x3}, @selector_unit={0x7, 0x24, 0x5, 0x6, 0x7, "8832"}]}], [{{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0x7, 0xd, [@generic={0x15, 0x8, "cd9351f95ae793d6bbcecd28cced2cec372925"}]}}, {{0x9, 0x5, 0x9ead09b57129343d, 0x10, 0x40, 0xf5, 0x0, 0xa, [@generic={0xbe, 0x24, "184e1c76d7689f9267b819dbb3fb43e519d639a8cc6eb2a48a54fb515a726890e5d4bcd363406bc6ade5b2acab5cf9638829dcf5377f886c2ece3e1ba0fd45a931eef21a7c0f9c06ac2bbba915ee9b801f199961abe96f0471f66a6b0c02a636a4847b1aeccf63f7a1617603dcef31bf495192d3d0a521c495dbafeaa7bef57cb0278e0d62791f20442df68168c6671c6ce070fabf86bb7baa1387189da5891b3b0ce1ace0c1c44803a2d4ccec4090cad6611d6d5f91bdd7f80d4237"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x1, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x4}]}}]}}, {{0x9, 0x4, 0xa1, 0x6, 0x3, 0xdd, 0x28, 0x66, 0x1, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3165b63bc6"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x5, 0x7ff}, {0x6, 0x24, 0x1a, 0x53, 0x30}, [@country_functional={0x8, 0x24, 0x7, 0x6, 0x3, [0xfffe]}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0xd, 0xee, 0x8, [@generic={0xd5, 0x23, "565271cdedbd009dda76d701964abe75cfa35b33e4161d810dcac94ede4dc1047e49b9f0dc980578a5e95094fe93f39343d44263a6fd4772c91b5a4a2d2c5d067386f526a4df2aafd83eb2d50de07d94560b617dba591f32e9f0d2586df1f758a2009324a2911272ab7015e6305efbf7e52222de90a78e2190b24ca5af66ce6ac0676b30b37a9d92daa8d12e93abb40df6db4804c5ddb7ddf4d546e9c5951fd5521f6b24d8a11e13f290d26498db14bde6dd86439b3f9363ac3b9db88ce6dd135742232eb8858898b2a5c4e638ad69eeef3f5e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x8}]}}, {{0x9, 0x5, 0xf, 0x2, 0x8, 0xf7, 0x31, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xd075}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x6, 0x8, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x8}]}}]}}]}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x10, 0x8, 0x82, 0x10, 0x9}, 0x6d, &(0x7f0000000300)={0x5, 0xf, 0x6d, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x82, 0xd, 0x2, 0xf08, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0xc, 0x6, 0x6, 0xff0f, 0xa, [0x3fc0, 0x30, 0x30, 0xf, 0x180ff, 0x3f00]}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x4, 0x8}, @ssp_cap={0x24, 0x10, 0xa, 0x1b, 0x6, 0x2, 0xf00, 0x919, [0x30, 0xff3fc0, 0xff00c0, 0xff00cf, 0x1f40, 0xffffc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8e, 0x9, 0x9, 0x4, 0x1}]}, 0xa, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1c01}}, {0x83, &(0x7f0000000400)=@string={0x83, 0x3, "0421eaf6d6fa15d0ce3d7fc1dd7f51c0770c99e31dbd9e6ded62fe76b8f15fa775bd58814e6ed40bd9da5c524c4b532ecfa48a9e84e58e4ab5955022ca94ac8cae7cffa649d94aa3d02bb225781c6979a45807b151bdfd75a64bf776be99969b4c9c1f98d684b30d1caec066bc624c6909f8d8b78c8031b6b07df9dcd48db876a8"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44d}}, {0xb3, &(0x7f0000000c00)=@string={0xb3, 0x3, "57b0165ea70713b1c5cb938a3ac927c1a99c2e92853df7350e0fe3bb629f11cb253e7acdb7aa480fd6a3dae26ec4ed4b7cf1697834af44586c3f004861390a9faa4e830d769e2e5a89854d24ea3da3bc6cdedda8a61e23be01aa2114594f14a820bd526ba04cbd3043d209567177de474fcb21f4756d6e3232f3cc04c74a2a18c5850e59dfe375c1a96b4177d19dfa1e4689eeff5fb36d7b5d069317b7cba931b6bbda16869e85612e2a0d389d59bf0d48"}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x2809}}, {0x96, &(0x7f0000000d00)=@string={0x96, 0x3, "03ada151338e984106690fa0786011a0b86155a1983e0d236ccc0f70c84b1dd92877e175a8693e28d705d1bc5648d3b2848705b93d60cefa791624f7405d2028e5ab6c9e4d43e4abd6e1ec55ccf4dfcf3946677f560b12c81054b2034bcd1b09a2b0f9dd819273d62474208d58dbfe650a9d6a2b0e91a65c548f6afc41d8c76fc12909c545b45dca76bcc25abdec4921be48f0e1"}}]}) syz_usb_connect(0x3, 0x2d, &(0x7f00000052c0)={{0x12, 0x1, 0x300, 0x3, 0x3d, 0xd6, 0x8, 0x6f8, 0xb000, 0x5da8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x9, 0x8, 0xb0, 0x6, [{{0x9, 0x4, 0x5, 0x9, 0x1, 0x84, 0x43, 0x5f, 0x7, [], [{{0x9, 0x5, 0x1, 0x3, 0x0, 0xc0, 0x3}}]}}]}}]}}, &(0x7f00000060c0)={0x0, 0x0, 0x0, 0x0, 0x26}) syz_usb_control_io(r3, &(0x7f0000001080)={0x2c, &(0x7f0000000e80)={0x0, 0x22, 0x4a, {0x4a, 0x1, "b130521256c22d72c3f7c5a7f8bb0a2acc50cc419acf8cd906bd5f1c2006d82f749b5ad05aa5730c3893d9b39eef3233dbb9d7b2ae61a41d19772a6198daa80cc68985c6ef72092a"}}, &(0x7f0000000f00)={0x0, 0x3, 0x58, @string={0x58, 0x3, "31e3fc751cdbc0f6943dd838399b7ad21adbb6d8f5afa9596b15b3bafef508ce8b470989ae11d4a68f6255e062602f6eee84b5fcab90592e0ee6813c7c819d3439f6f7d81233b0df2e0ea29327e1532b9057c2455c44"}}, &(0x7f0000000f80)={0x0, 0xf, 0x56, {0x5, 0xf, 0x56, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x2, 0x32}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x0, 0xf00, 0x4, [0xffff00, 0xff0000, 0xc000, 0x30, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xe, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0xfc, 0x5, 0x5a6a, 0x1100f, 0x3, [0x0, 0xc7, 0xdf80, 0x3fa0, 0x3f00]}]}}, &(0x7f0000001000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x60, 0xc4, 0xb, "ef0d9b89", "933869de"}}, &(0x7f0000001040)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x2, 0x5, 0xc3, 0x6, 0x5ad, 0x57}}}, &(0x7f0000001580)={0x84, &(0x7f00000010c0)={0x900f67aac503f847, 0x0, 0xb0, "4e2669f597e38f298664f582b580ee2bb4fc7928c8c7c1d2d5cdd4a4b1958bee38fd4dc1fa3e4b2b520846b1feaf237b7851931b2953c9397fb7b174142c853c6d1b2f0fe10b5ec86a792129dd1fba54e266a82af7a18c451e53559c2d8cbdd688802dbca6d13e0aaa9327c1af20989ad7ea3d8b47010a80cc1cf96e6039f23bf4628ecd4113033d0bbd3f3549453db689ef1285f4029a0df618f5dca6548609224b998dcb3f0a5eaf12cae0d6c6ddc9"}, &(0x7f0000001180)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001200)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001240)={0x20, 0x0, 0x8, {0x140, 0x2, [0xff0]}}, &(0x7f0000001280)={0x40, 0x7, 0x2}, &(0x7f00000012c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000001300)={0x40, 0xb, 0x2, 'vh'}, &(0x7f0000001340)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001380)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000013c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001400)={0x40, 0x19, 0x2, "e12d"}, &(0x7f0000001440)={0x40, 0x1a, 0x2, 0x8}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x10}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001540)={0x40, 0x21, 0x1, 0x7f}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x80}}}}}}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r7) r8 = inotify_init1(0x0) r9 = gettid() fcntl$setown(r7, 0x8, r9) fcntl$setsig(r8, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 14.700381205s ago: executing program 0 (id=3186): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f00000003c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000000)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) io_uring_enter(0xffffffffffffffff, 0x88, 0x80008a00, 0x8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800c3, 0x0) io_submit(0x0, 0x1, &(0x7f00000019c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x9, 0x200000004}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x81}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x92, &(0x7f00000002c0)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.576283452s ago: executing program 0 (id=3189): r0 = io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xb157, 0x2, 0x0, 0x28c}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_vhci(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r4, 0x30d, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}}]}]}, 0x50}}, 0x0) r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000780), 0x88080, 0x0) io_submit(0x0, 0x5, &(0x7f00000008c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x9, r6, &(0x7f0000000100)="9479070be8efd4768e66fb783f6241bd7e77c017459ec71da969e75480b563a4d1c5", 0x22, 0x7fff, 0x0, 0x1}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x1000, r5, &(0x7f00000005c0)="4883bd1954a18aa05e65af689aa152570d8f6971254cc4ce356b6acd37241df75f9543b2014c2e8923296aed7d390e970394cce97e1fcecb4d5d63e281741cf02bdec5a57f34cbfab154a8b2126cfe21ad", 0x51, 0x9, 0x0, 0x2}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffffffffffffff, &(0x7f0000000640)="65203fc5beae132f775b2a393920d72bc1f1b7b2bc913f6e589fe44eac0f81bf9793a0e2286a1e8f0d865f5de50cb722cb21871f35630398a348098d710874385326d75069d486e0aa4380342476de3ed36c46d99204e06cbae6daf6d8cbee0c59fd44e2c06d0eb63483fc4918e15219b679406dea7304cb7cd9f0e8a8b2da31372df0fd6555398f60045dec922dc1dbbd4f63c2ef71939b9f7edb7a28b4593b1d27cd8c1d24da8cf31f4c739b5e5feef124f0b3f524986bb8b356d721cb7b78", 0xc0, 0x784b68a7, 0x0, 0x1}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x6, r7, &(0x7f0000000740)="f8616342b9be38188548ba2a333e19fd0db78971e1bf38eafa05121c9d3f32399005a0020c09fd78a068a6", 0x2b, 0x7, 0x0, 0x4, r8}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000000800)="cebdc24a8bb0991c771ce05990185acc1de4131e635a2709290f0f85991f4360456988e64401c4aba5d792aeca63ee1f37c15805351b89974f7f9b9884999f7f47de0fa31f0a79d9a09a60aae8be2dcb39af9bdda94d64d492a22522db6161c8ebb24bb56408dd9081127e", 0x6b, 0x5, 0x0, 0x2}]) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r9, 0x541c, &(0x7f0000000bc0)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000000000000000c865e31f0000000000002e00000000000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, &(0x7f0000000480)=""/122, &(0x7f0000000080), &(0x7f0000000500), 0x5, r10}, 0x38) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.833362772s ago: executing program 0 (id=3190): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000b1411012cbd70000000000800030002000000080001000100000008000100020000000800010000000000080001000000000008003f0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0x9bd6aa3085e1bb1d, './file0\x00'}, 0x6e) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x1000000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r8, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) setsockopt$inet_tcp_int(r7, 0x6, 0x10000000013, 0x0, 0x0) 12.071636904s ago: executing program 8 (id=3191): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x14}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000220000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) r4 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xd898, 0xc2, 0x2000, 0x2}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x16, 0x20000002, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000006000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setpriority(0x1, 0x0, 0x477f) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001000370400"/20], 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 10.439684183s ago: executing program 8 (id=3196): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010541820000000000010902240001000000000103000000092100000001230500090581030000000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) shmget$private(0x0, 0x400000, 0x1000, &(0x7f000071d000/0x400000)=nil) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0xe, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) read$hiddev(r1, &(0x7f0000000140)=""/118, 0x76) ioctl$HIDIOCGUSAGE(r6, 0xd01c4813, 0x0) 10.330211885s ago: executing program 5 (id=3197): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='.dead\x00', 0x0, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000310000100030c10000000214e224e0000", 0x58}], 0x1) 9.629426164s ago: executing program 7 (id=3198): mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x4a) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) pread64(r0, &(0x7f0000002a00)=""/53, 0x35, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') r1 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 8.860052008s ago: executing program 5 (id=3200): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x24, r2, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffe68, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x300}, 0x4080) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000002900)={0x1, 0x0, [{0xfadb442058d8a7b1, 0x7e, &(0x7f00000013c0)=""/126}]}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1}) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) 8.323832167s ago: executing program 5 (id=3201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x0, 0x20, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2002) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000240)={'macsec0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x105, 0x8, 0x0, 0x0}}, 0x10) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000023000000000000850000006d000000954149c4aeb82ab5f0c55f110b1557bff51d3a270e9b27257201b961460c2c1d06bc37b10a05a5f92e2fb7f7f0ec23842916466db006e8863af4d7bf30ae54826e520ab04acaacda33c424e5f51a5c14e57499fa8caa338a688462244f45089ce822ee18feca05a785"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tcp_probe\x00', r6, 0x0, 0x3}, 0x18) prlimit64(r0, 0xe, &(0x7f0000000280)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r7, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}, {0x0}], 0x2}, 0x4000081) 8.300896242s ago: executing program 7 (id=3202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 6.899797237s ago: executing program 5 (id=3203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) 6.86431948s ago: executing program 7 (id=3204): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0xc02, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_clone(0x44014000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) io_uring_setup(0x178e, &(0x7f00000000c0)={0x0, 0xb2a0, 0x2000, 0x106}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0xffffffffffffff5a, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f00000000c0)=0x58, 0x9) ptrace$setregs(0x1a, r3, 0xc, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x3}], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) syz_open_dev$sndmidi(0x0, 0x6, 0x410200) 5.762936841s ago: executing program 8 (id=3206): mmap$IORING_OFF_SQ_RING(&(0x7f0000f60000/0x1000)=nil, 0x1000, 0x2000000, 0x13, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000) madvise(&(0x7f0000535000/0x800000)=nil, 0x800000, 0x1) syz_clone(0x200000, &(0x7f0000000540), 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000680)=0xfffffff9, 0x4) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000300)={@remote, @broadcast, @remote}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, 0x0, 0x0) accept(r5, 0x0, 0x0) r8 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x101200) ioctl$NBD_SET_SIZE_BLOCKS(r8, 0xab07, 0x400000000000000) 5.760490925s ago: executing program 5 (id=3207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000010000000a90d00"/20, @ANYRES32, @ANYBLOB='\x00'/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000280)={0x400000000006, 0x800}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x5460, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES32=r3, @ANYBLOB="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"], 0x160}}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000004640), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, 0x0, 0x20008814) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x518, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x448, 0xffffffff, 0xffffffff, 0x448, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x16}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, [0x0, 0x0, 0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x378, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x4, 0x41, 0x0, 0x0, 0x10001, 0x6, 0x3}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x578) iopl(0x3) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) syz_emit_ethernet(0x4c, &(0x7f0000000640)=ANY=[@ANYBLOB="8100000086dd60a07ee9001211fe00000000000000000000ffff00000000200100000000000000000000000000023b040000000000004e244e21000a9078b954"], 0x0) 4.233928249s ago: executing program 2 (id=3208): ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000300)=@mmap={0x3344, 0x1, 0x4, 0x100000, 0x8, {}, {0x2, 0x0, 0x5, 0x2, 0x2, 0x9, "78075ed5"}, 0x10000}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000300000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005"], 0x178}}, 0x0) 4.115881219s ago: executing program 2 (id=3209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x1000, 0x3, 0x8002, 0x0, 0xa396, 0x0, 0x6, 0x2009}, &(0x7f00000001c0)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=@ocfs2={0xc, 0xfe, {0x8, 0x0, 0x10040}}, 0x2e4342) 3.203118602s ago: executing program 2 (id=3210): userfaultfd(0x80801) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x62a1c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) unshare(0x28020400) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x10, 0x8001, 0x200}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x10000, 0xfffffffffffffffc, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) (async) socket$inet6(0xa, 0x4, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) (async) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 3.202273136s ago: executing program 7 (id=3211): mkdir(0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x8000) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01060000000000000000090000002c0004801300010062"], 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb8}, [@ldst={0x4}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.136140752s ago: executing program 2 (id=3212): syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0xa, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 2.255742395s ago: executing program 2 (id=3213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) r6 = inotify_init1(0x0) r7 = gettid() fcntl$setown(r5, 0x8, r7) fcntl$setsig(r6, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x80000010) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) rmdir(&(0x7f0000000100)='./control\x00') 2.250275987s ago: executing program 7 (id=3214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r6 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 2.179741622s ago: executing program 5 (id=3215): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x6, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x38, r5, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd28, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x1}}]}, 0x30}}, 0x44080) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x140}}, 0x0) 850.034µs ago: executing program 2 (id=3216): add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0xb, 0x9, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x208000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x48000) 0s ago: executing program 7 (id=3217): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_setup(0x3454, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a1401"], 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) kernel console output (not intermixed with test programs): id interface number: 228 but max is -1 [ 1063.931828][ T1216] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1063.941090][ T1216] usb 1-1: config 250 has no interface number 0 [ 1063.947440][ T1216] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1064.013059][ T1216] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1064.062294][ T1216] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1064.072966][ T1216] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1064.088276][ T1216] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1064.131185][ T1216] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1064.140301][ T969] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 125 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1064.153750][T17336] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1044 sclass=netlink_tcpdiag_socket pid=17336 comm=syz.7.2674 [ 1064.178490][T17338] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.2673'. [ 1064.188765][ T1216] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1064.208967][T17338] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.2673'. [ 1064.210430][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1064.270922][ T1216] usb 1-1: Product: syz [ 1064.290823][ T1216] usb 1-1: SerialNumber: syz [ 1064.300320][T17318] orangefs_mount: mount request failed with -4 [ 1064.315326][ T1216] hub 1-1:250.228: bad descriptor, ignoring hub [ 1064.327587][ T1216] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1064.377941][ T29] audit: type=1400 audit(1736079125.034:2119): avc: denied { read write } for pid=17307 comm="syz.2.2668" name="lp0" dev="devtmpfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1064.412281][ T29] audit: type=1400 audit(1736079125.034:2120): avc: denied { open } for pid=17307 comm="syz.2.2668" path="/dev/usb/lp0" dev="devtmpfs" ino=3881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1064.524168][T15476] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1064.611476][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.620326][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.650644][T17347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.661030][T17347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.786308][T15476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1064.798316][T15476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1064.811097][T15476] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1064.834060][T15476] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1064.852358][T15476] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.935967][T15476] usb 9-1: Product: syz [ 1064.946928][T15476] usb 9-1: Manufacturer: syz [ 1065.147230][T17310] usb 3-1: reset high-speed USB device number 125 using dummy_hcd [ 1065.827047][T15476] usb 9-1: SerialNumber: syz [ 1065.841008][T15476] usb 9-1: config 0 descriptor?? [ 1066.520082][T15476] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 1066.624676][ T1216] usblp 1-1:250.228: usblp2: USB Bidirectional printer dev 117 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1066.676024][ T1216] usb 1-1: USB disconnect, device number 117 [ 1066.873548][T17372] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=27675 sclass=netlink_xfrm_socket pid=17372 comm=syz.7.2681 [ 1067.201569][ T29] audit: type=1400 audit(1736079127.704:2121): avc: denied { append } for pid=17367 comm="syz.7.2681" name="sg0" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1068.742465][ T969] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1068.872268][ T969] usb 8-1: device descriptor read/64, error -71 [ 1069.112242][ T969] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1069.262397][ T969] usb 8-1: device descriptor read/64, error -71 [ 1070.689181][ T969] usb usb8-port1: attempt power cycle [ 1071.208431][ T969] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1071.303089][ T969] usb 8-1: device descriptor read/8, error -71 [ 1071.552307][ T969] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1071.800634][ T1216] usblp2: removed [ 1071.840543][T17403] orangefs_mount: mount request failed with -4 [ 1072.073052][ T5895] usb 3-1: USB disconnect, device number 125 [ 1072.082951][ T5895] usblp0: removed [ 1072.304223][ T29] audit: type=1804 audit(1736079132.944:2122): pid=17407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2690" name="/newroot/537/file1/bus" dev="ramfs" ino=56105 res=1 errno=0 [ 1072.532394][ T29] audit: type=1804 audit(1736079132.964:2123): pid=17407 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2690" name="/newroot/537/file1/bus" dev="ramfs" ino=56105 res=1 errno=0 [ 1072.580570][ T969] usb 8-1: device descriptor read/8, error -71 [ 1072.624344][ T29] audit: type=1400 audit(1736079133.274:2124): avc: denied { listen } for pid=17411 comm="syz.8.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1072.628072][T14400] usb 9-1: USB disconnect, device number 17 [ 1072.961887][ T969] usb usb8-port1: unable to enumerate USB device [ 1073.130840][T17419] trusted_key: syz.7.2694 sent an empty control message without MSG_MORE. [ 1073.150428][ T29] audit: type=1400 audit(1736079133.814:2125): avc: denied { connect } for pid=17422 comm="syz.8.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1073.332330][ T1216] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1073.521655][ T29] audit: type=1400 audit(1736079134.044:2126): avc: denied { write } for pid=17422 comm="syz.8.2696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1073.562812][ T1216] usb 1-1: Using ep0 maxpacket: 16 [ 1073.641150][ T1216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1073.656111][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1073.697048][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF5, changing to 0x85 [ 1073.746610][ T29] audit: type=1400 audit(1736079134.044:2127): avc: denied { ioctl } for pid=17422 comm="syz.8.2696" path="socket:[57091]" dev="sockfs" ino=57091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1073.762425][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1073.829523][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1073.910823][ T1216] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 1073.922427][ T1216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.935508][ T1216] usb 1-1: Product: syz [ 1073.939929][ T1216] usb 1-1: Manufacturer: syz [ 1073.948428][ T1216] usb 1-1: SerialNumber: syz [ 1073.959733][ T1216] usb 1-1: config 0 descriptor?? [ 1073.966403][ T29] audit: type=1400 audit(1736079134.354:2128): avc: denied { ioctl } for pid=17418 comm="syz.7.2694" path="socket:[57089]" dev="sockfs" ino=57089 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1074.001400][ T1216] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1075.312499][ T29] audit: type=1400 audit(1736079135.974:2129): avc: denied { write } for pid=17416 comm="syz.0.2693" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1075.313310][T17449] random: crng reseeded on system resumption [ 1075.506090][ T1216] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110 [ 1075.515614][ T1216] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1075.556014][ T29] audit: type=1400 audit(1736079135.974:2130): avc: denied { open } for pid=17416 comm="syz.0.2693" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1075.579516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.395640][T17458] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1076.406719][T17458] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.2703'. [ 1076.533803][T17458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.598563][T17417] Restarting kernel threads ... done. [ 1076.605305][ T29] audit: type=1400 audit(1736079137.264:2131): avc: denied { ioctl } for pid=17416 comm="syz.0.2693" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1076.630228][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.636616][T17458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.803902][ T5895] usb 1-1: USB disconnect, device number 118 [ 1076.992629][ T5866] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1077.356429][ T5866] usb 3-1: config 0 has an invalid interface number: 100 but max is 0 [ 1077.379306][ T5866] usb 3-1: config 0 has no interface number 0 [ 1077.395445][ T5866] usb 3-1: config 0 interface 100 altsetting 247 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1077.416632][ T5866] usb 3-1: config 0 interface 100 altsetting 247 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1077.428129][ T5866] usb 3-1: config 0 interface 100 has no altsetting 0 [ 1077.452299][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=cf.b2 [ 1077.468317][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.479666][ T5866] usb 3-1: Product: syz [ 1077.484269][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1077.484284][ T29] audit: type=1400 audit(1736079138.154:2136): avc: denied { remount } for pid=17483 comm="syz.5.2711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1077.486630][ T5866] usb 3-1: Manufacturer: syz [ 1077.879216][ T5866] usb 3-1: SerialNumber: syz [ 1077.895701][T17487] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1077.948889][ T5866] usb 3-1: config 0 descriptor?? [ 1078.783237][T17503] fuse: Bad value for 'fd' [ 1080.634833][T17507] trusted_key: encrypted_key: insufficient parameters specified [ 1080.989889][ T5866] usbtest 3-1:0.100: couldn't get endpoints, -71 [ 1080.996386][ T5866] usbtest 3-1:0.100: probe with driver usbtest failed with error -71 [ 1081.030425][ T5866] usb 3-1: USB disconnect, device number 126 [ 1082.166979][ T29] audit: type=1804 audit(1736079142.724:2137): pid=17525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2722" name="/newroot/60/file1/bus" dev="ramfs" ino=57475 res=1 errno=0 [ 1082.428141][ T29] audit: type=1804 audit(1736079142.744:2138): pid=17525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.2722" name="/newroot/60/file1/bus" dev="ramfs" ino=57475 res=1 errno=0 [ 1082.503423][ T29] audit: type=1804 audit(1736079142.864:2139): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2721" name="/newroot/544/file1/bus" dev="ramfs" ino=57292 res=1 errno=0 [ 1082.910946][ T29] audit: type=1804 audit(1736079142.864:2140): pid=17522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2721" name="/newroot/544/file1/bus" dev="ramfs" ino=57292 res=1 errno=0 [ 1084.776865][T17545] trusted_key: encrypted_key: insufficient parameters specified [ 1087.386955][T17558] fuse: Bad value for 'fd' [ 1087.405928][ T29] audit: type=1400 audit(1736079147.884:2141): avc: granted { setsecparam } for pid=17556 comm="syz.0.2731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 1088.156378][ T29] audit: type=1400 audit(1736079147.884:2142): avc: denied { ioctl } for pid=17556 comm="syz.0.2731" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x70ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1088.312253][ T29] audit: type=1400 audit(1736079147.884:2143): avc: denied { getopt } for pid=17556 comm="syz.0.2731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1088.541698][T17564] syz_tun: entered allmulticast mode [ 1088.583431][T17564] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1089.064671][T17563] syz_tun: left allmulticast mode [ 1090.412545][T17582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.451663][T17582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.102315][T14400] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1092.242299][T14400] usb 3-1: device descriptor read/64, error -71 [ 1092.999220][T14400] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1093.143826][T14400] usb 3-1: device descriptor read/64, error -71 [ 1093.444513][T14400] usb usb3-port1: attempt power cycle [ 1094.174980][T14400] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1094.746719][T17626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.755448][T17626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.916730][T14400] usb 3-1: device descriptor read/8, error -71 [ 1095.171514][ T29] audit: type=1400 audit(1736079155.834:2144): avc: denied { read } for pid=17631 comm="syz.8.2751" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1095.222546][ T29] audit: type=1400 audit(1736079155.834:2145): avc: denied { open } for pid=17631 comm="syz.8.2751" path="/79/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1095.789974][ T29] audit: type=1400 audit(1736079156.454:2146): avc: denied { getopt } for pid=17637 comm="syz.7.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1095.811057][ T969] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 1095.973863][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1095.985266][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.014961][ T969] usb 1-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1096.064962][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.146179][ T969] usb 1-1: config 0 descriptor?? [ 1096.670135][ T969] smartjoyplus 0003:0B43:0003.0019: unknown main item tag 0x0 [ 1096.678774][ T969] smartjoyplus 0003:0B43:0003.0019: unknown main item tag 0x0 [ 1096.698034][T17644] fuse: Unknown parameter 'rotmode' [ 1096.708935][ T969] smartjoyplus 0003:0B43:0003.0019: unknown main item tag 0x0 [ 1096.722071][T14400] IPVS: starting estimator thread 0... [ 1096.730070][ T969] smartjoyplus 0003:0B43:0003.0019: unknown main item tag 0x0 [ 1096.737876][ T969] smartjoyplus 0003:0B43:0003.0019: unknown main item tag 0x0 [ 1096.753154][ T969] smartjoyplus 0003:0B43:0003.0019: hidraw0: USB HID v0.00 Device [HID 0b43:0003] on usb-dummy_hcd.0-1/input0 [ 1096.766666][ T969] smartjoyplus 0003:0B43:0003.0019: no output reports found [ 1096.832835][T17654] IPVS: using max 29 ests per chain, 69600 per kthread [ 1096.851341][T17657] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2759'. [ 1096.860672][T17657] netlink: 'syz.7.2759': attribute type 25 has an invalid length. [ 1096.878848][T17630] 9pnet_fd: Insufficient options for proto=fd [ 1096.904468][T17657] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.914052][T17657] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.922930][T17657] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.931644][T17657] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.161055][T17661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.181753][T17661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.747386][T17671] fuse: Bad value for 'fd' [ 1098.686668][ T5895] usb 1-1: USB disconnect, device number 119 [ 1098.737835][T17676] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2764'. [ 1098.748964][T17676] unsupported nlmsg_type 40 [ 1099.297338][T17676] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2764'. [ 1099.590436][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1099.655693][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1100.222601][T14400] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1100.862464][T14400] usb 1-1: Using ep0 maxpacket: 16 [ 1100.880872][T14400] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1100.918245][T14400] usb 1-1: config 0 has no interface number 0 [ 1100.941552][T14400] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 1100.966773][T14400] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 1101.028247][T14400] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1101.037837][T14400] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1101.048253][T14400] usb 1-1: Product: syz [ 1101.054197][T14400] usb 1-1: SerialNumber: syz [ 1101.102762][T14400] usb 1-1: config 0 descriptor?? [ 1101.133733][T14400] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 1101.145119][T14400] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input36 [ 1101.324192][ C0] cm109_urb_ctl_callback: 198 callbacks suppressed [ 1101.324218][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.338983][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.346956][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.354392][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.361498][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.368803][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.375890][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.383043][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.390471][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.397715][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1101.448478][ T1216] usb 1-1: USB disconnect, device number 120 [ 1101.454805][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1101.476165][ T1216] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1102.152855][ T5895] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1102.337849][ T29] audit: type=1400 audit(1736079163.004:2147): avc: denied { remount } for pid=17727 comm="syz.2.2780" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1102.412407][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 1102.435642][ T5895] usb 8-1: config 0 has an invalid interface number: 98 but max is 0 [ 1102.444690][ T5895] usb 8-1: config 0 has no interface number 0 [ 1102.576025][ T5895] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 1102.651671][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.870506][ T5895] usb 8-1: Product: syz [ 1102.874906][ T5895] usb 8-1: Manufacturer: syz [ 1102.879572][ T5895] usb 8-1: SerialNumber: syz [ 1102.914049][ T5895] usb 8-1: config 0 descriptor?? [ 1103.092371][ T969] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1103.176300][T17723] openvswitch: netlink: IP tunnel dst address not specified [ 1103.262674][ T969] usb 1-1: Using ep0 maxpacket: 8 [ 1103.276131][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.310220][ T5895] viperboard 8-1:0.98: version 0.00 found at bus 008 address 038 [ 1103.330668][ T969] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1103.345709][ T5895] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1103.354598][ T5895] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1103.397958][ T969] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1103.431894][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.450610][ T969] usb 1-1: config 0 descriptor?? [ 1103.452521][ T5895] usb 8-1: USB disconnect, device number 38 [ 1103.517891][T17741] Mount JFS Failure: -22 [ 1103.533874][T17741] jfs_mount failed w/return code = -22 [ 1103.759315][ T969] usbhid 1-1:0.0: can't add hid device: -71 [ 1103.777293][ T969] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1103.792116][ T969] usb 1-1: USB disconnect, device number 121 [ 1104.599695][ T29] audit: type=1400 audit(1736079165.264:2148): avc: denied { setopt } for pid=17749 comm="syz.2.2786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1104.678237][ T5866] IPVS: starting estimator thread 0... [ 1104.817072][T17758] IPVS: using max 31 ests per chain, 74400 per kthread [ 1104.852473][ T5866] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1105.088368][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.169803][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1105.187136][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1105.209015][ T5866] usb 8-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 1105.374762][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.559188][ T5866] usb 8-1: config 0 descriptor?? [ 1106.501884][ T5866] usbhid 8-1:0.0: can't add hid device: -71 [ 1106.508463][ T5866] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1106.603586][ T5866] usb 8-1: USB disconnect, device number 39 [ 1106.741062][T17785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.780794][T17785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.919891][ T29] audit: type=1400 audit(1736079167.584:2149): avc: denied { ioctl } for pid=17787 comm="syz.8.2797" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1107.090233][ T29] audit: type=1400 audit(1736079167.624:2150): avc: denied { block_suspend } for pid=17787 comm="syz.8.2797" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1107.618685][T17799] wg1 speed is unknown, defaulting to 1000 [ 1108.732317][ T5866] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1108.892358][ T5866] usb 9-1: Using ep0 maxpacket: 8 [ 1108.919077][ T5866] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1108.937467][ T5866] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.976071][ T5866] usb 9-1: Product: syz [ 1108.993268][ T5866] usb 9-1: Manufacturer: syz [ 1109.000382][ T5866] usb 9-1: SerialNumber: syz [ 1109.008924][T17783] input: syz1 as /devices/virtual/input/input38 [ 1109.069931][ T5866] usb 9-1: config 0 descriptor?? [ 1109.145804][ T5866] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1109.678666][ T29] audit: type=1804 audit(1736079170.344:2151): pid=17795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.2799" name="/newroot/91/file0/bus" dev="ramfs" ino=58242 res=1 errno=0 [ 1109.682715][ T5866] gspca_sonixj: reg_w1 err -110 [ 1109.725851][ T5895] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1109.733731][ T5866] sonixj 9-1:0.0: probe with driver sonixj failed with error -110 [ 1109.915169][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 1109.922627][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.942293][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1109.973039][ T5895] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1109.982374][T17811] orangefs_mount: mount request failed with -4 [ 1109.992762][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.063498][ T5895] usb 3-1: config 0 descriptor?? [ 1110.339864][ T5895] usbhid 3-1:0.0: can't add hid device: -71 [ 1110.346709][ T5895] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1110.370782][ T5895] usb 3-1: USB disconnect, device number 5 [ 1111.000898][ T29] audit: type=1800 audit(1736079171.634:2152): pid=17795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2799" name="bus" dev="ramfs" ino=58242 res=0 errno=0 [ 1111.145594][ T969] usb 9-1: USB disconnect, device number 18 [ 1111.644467][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2809'. [ 1111.807092][ T29] audit: type=1400 audit(1736079172.474:2153): avc: denied { bind } for pid=17840 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1111.829844][ T29] audit: type=1400 audit(1736079172.474:2154): avc: denied { node_bind } for pid=17840 comm="syz.8.2806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1112.073667][T17845] overlayfs: missing 'lowerdir' [ 1112.079511][ T29] audit: type=1400 audit(1736079172.494:2155): avc: denied { mount } for pid=17840 comm="syz.8.2806" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1112.778967][T17841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1112.955344][T17850] input: syz1 as /devices/virtual/input/input39 [ 1113.640910][ T29] audit: type=1400 audit(1736079174.304:2156): avc: denied { rename } for pid=17840 comm="syz.8.2806" name="bus" dev="tmpfs" ino=519 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1113.782438][ T5866] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1113.809216][T17861] Mount JFS Failure: -22 [ 1113.813937][T17861] jfs_mount failed w/return code = -22 [ 1113.821557][T17860] IPVS: set_ctl: invalid protocol: 27758 50.49.49.0:20000 [ 1113.891303][ T29] audit: type=1400 audit(1736079174.554:2157): avc: denied { unmount } for pid=15438 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1113.932303][ T5866] usb 8-1: Using ep0 maxpacket: 8 [ 1113.941323][ T5866] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 1113.990655][ T5866] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 1113.991185][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2819'. [ 1114.032552][ T5866] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1114.041675][ T5866] usb 8-1: config 250 has no interface number 0 [ 1114.055340][ T5866] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1114.099204][T17870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.123957][ T5866] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1114.169306][ T5866] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1114.184145][ T5866] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1114.218571][ T5866] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1114.270220][ T5866] usb 8-1: config 250 interface 228 has no altsetting 0 [ 1114.295704][ T5866] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1114.318601][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1114.331584][ T5866] usb 8-1: Product: syz [ 1114.369122][ T5866] usb 8-1: SerialNumber: syz [ 1114.585826][T17880] loop5: detected capacity change from 0 to 7 [ 1114.593316][T17880] buffer_io_error: 4 callbacks suppressed [ 1114.593352][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.607980][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.616389][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.624839][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.633242][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.641653][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.649971][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.658118][T17880] ldm_validate_partition_table(): Disk read failed. [ 1114.665088][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.673446][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.681776][T17880] Buffer I/O error on dev loop5, logical block 0, async page read [ 1114.690404][T17880] Dev loop5: unable to read RDB block 0 [ 1114.697004][T17880] loop5: unable to read partition table [ 1114.703930][T17880] loop5: partition table beyond EOD, truncated [ 1114.710225][T17880] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1114.710225][T17880] ) failed (rc=-5) [ 1115.907294][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.946432][ T29] audit: type=1400 audit(1736079176.614:2158): avc: denied { read } for pid=17881 comm="syz.8.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1116.404461][ T5866] usb 8-1: can't set config #250, error -71 [ 1116.450212][ T5866] usb 8-1: USB disconnect, device number 40 [ 1116.525449][T17890] input: syz1 as /devices/virtual/input/input40 [ 1116.760858][ T29] audit: type=1400 audit(1736079177.424:2159): avc: denied { setopt } for pid=17894 comm="syz.8.2828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1116.762696][ T5866] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1117.084045][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2830'. [ 1117.161774][ T5866] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1117.183337][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.599992][ T5866] usb 8-1: config 0 descriptor?? [ 1117.659545][T17914] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1117.675287][T17914] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1117.892948][ T5895] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1117.942853][ T1216] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1118.052369][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 1118.064366][ T5895] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1118.074642][ T5866] ath6kl: Failed to submit usb control message: -71 [ 1118.191935][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1118.253403][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1118.304421][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1118.342342][ T5895] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 50546, setting to 1024 [ 1118.356553][ T1216] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1118.372222][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.382477][ T5866] ath6kl: unable to send the bmi data to the device: -71 [ 1118.406643][ T1216] usb 3-1: Product: syz [ 1118.416633][ T5866] ath6kl: Unable to send get target info: -71 [ 1118.432385][ T5895] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1118.438379][ T1216] usb 3-1: Manufacturer: syz [ 1118.443121][ T5895] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1118.454011][ T5866] ath6kl: Failed to init ath6kl core: -71 [ 1118.474772][ T1216] usb 3-1: SerialNumber: syz [ 1118.475619][ T5866] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1118.490093][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.491839][ T1216] usb 3-1: config 0 descriptor?? [ 1118.512257][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.536859][ T5895] usb 1-1: Product: 뜫嬗嵬⤙쭏폨䳎稦좣鮵읪四Ⰹ꿳冪Ý湋䏆ﺜ㕙䨳䫴䫧퐍u疾᱖й薆쇲֡Ẳ끍뻠䆵ሎ篶ꋙᮐٺ⷟솔ﴒ㤾㥪冎콌ቍ㰠ᬉ晒⳹渶涱蝚쳅곡檯硒謆蘶ᬛ龯볫၉ⶹꢐΫ䞢䊽噀謁鄴몃 [ 1118.582601][ T5866] usb 8-1: USB disconnect, device number 41 [ 1118.606160][ T5895] usb 1-1: Manufacturer: х [ 1118.610716][ T5895] usb 1-1: SerialNumber: В [ 1118.621097][ T5895] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1118.640798][ T5895] usb 1-1: no configuration chosen from 1 choice [ 1118.810586][ T1216] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1118.916053][T17928] overlayfs: missing 'lowerdir' [ 1119.394610][ T969] usb 3-1: USB disconnect, device number 6 [ 1119.753415][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2840'. [ 1120.490848][ T29] audit: type=1804 audit(1736079181.094:2160): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.2843" name="/newroot/223/file1/bus" dev="ramfs" ino=59536 res=1 errno=0 [ 1120.848849][ T29] audit: type=1400 audit(1736079181.504:2161): avc: denied { read write } for pid=17948 comm="syz.2.2844" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1120.885408][T17951] 9pnet_fd: Insufficient options for proto=fd [ 1120.895597][ T1216] usb 1-1: USB disconnect, device number 122 [ 1120.958328][ T29] audit: type=1400 audit(1736079181.504:2162): avc: denied { open } for pid=17948 comm="syz.2.2844" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1121.161333][T17961] kernel profiling enabled (shift: 9) [ 1122.850268][T17969] trusted_key: encrypted_key: insufficient parameters specified [ 1123.275559][T17971] 9pnet: Could not find request transport: B [ 1124.654375][ T29] audit: type=1804 audit(1736079185.314:2163): pid=17987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2852" name="/newroot/566/file1/bus" dev="ramfs" ino=59594 res=1 errno=0 [ 1126.068253][ T29] audit: type=1804 audit(1736079186.684:2164): pid=17993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2853" name="/newroot/564/file1/bus" dev="ramfs" ino=59612 res=1 errno=0 [ 1126.237810][ T29] audit: type=1804 audit(1736079186.704:2165): pid=17993 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2853" name="/newroot/564/file1/bus" dev="ramfs" ino=59612 res=1 errno=0 [ 1126.942452][ T5895] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1127.142744][ T5895] usb 3-1: Using ep0 maxpacket: 32 [ 1127.164251][ T5895] usb 3-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 1127.178517][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.237554][ T5895] usb 3-1: Product: syz [ 1127.243334][ T5895] usb 3-1: Manufacturer: syz [ 1127.258037][ T5895] usb 3-1: SerialNumber: syz [ 1127.297064][ T5895] usb 3-1: config 0 descriptor?? [ 1127.578820][T18018] trusted_key: encrypted_key: insufficient parameters specified [ 1128.067468][ T29] audit: type=1400 audit(1736079188.674:2166): avc: denied { write } for pid=18002 comm="syz.2.2860" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1128.645675][T18020] input: syz0 as /devices/virtual/input/input41 [ 1128.754625][T18028] fuse: Bad value for 'fd' [ 1130.933616][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2865'. [ 1131.094229][T18027] batadv0: entered promiscuous mode [ 1131.356402][T18027] team0: entered promiscuous mode [ 1131.361475][T18027] team_slave_0: entered promiscuous mode [ 1131.367350][T18027] team_slave_1: entered promiscuous mode [ 1131.400592][T18027] hsr1: entered promiscuous mode [ 1131.405612][T18027] hsr1: entered allmulticast mode [ 1131.410635][T18027] batadv0: entered allmulticast mode [ 1131.416042][T18027] team0: entered allmulticast mode [ 1131.421135][T18027] team_slave_0: entered allmulticast mode [ 1131.426976][T18027] team_slave_1: entered allmulticast mode [ 1131.468209][ T5895] usb 3-1: USB disconnect, device number 7 [ 1133.729497][T18077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2878'. [ 1133.957566][T18078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=18078 comm=syz.8.2877 [ 1134.561950][T18088] tmpfs: Unknown parameter 'uVr' [ 1134.864811][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'. [ 1135.105447][T18092] team1: entered promiscuous mode [ 1135.110707][T18092] 8021q: adding VLAN 0 to HW filter on device team1 [ 1135.147983][T18098] netlink: 'syz.5.2882': attribute type 29 has an invalid length. [ 1135.150241][T18105] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2884'. [ 1135.157909][T18098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2882'. [ 1137.045735][ T1216] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1137.368168][T18130] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1137.442394][ T1216] usb 9-1: Using ep0 maxpacket: 8 [ 1137.483697][ T1216] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1137.507697][ T1216] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1137.546046][ T1216] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1137.555544][ T1216] usb 9-1: config 250 has no interface number 0 [ 1137.561844][ T1216] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1137.573704][ T1216] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1137.584352][ T1216] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1137.594855][ T1216] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1137.605406][ T1216] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1137.618973][ T1216] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1137.650277][ T1216] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1137.672237][ T1216] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1137.682242][ T1216] usb 9-1: Product: syz [ 1137.690731][ T1216] usb 9-1: SerialNumber: syz [ 1137.753845][ T1216] hub 9-1:250.228: bad descriptor, ignoring hub [ 1137.760150][ T1216] hub 9-1:250.228: probe with driver hub failed with error -5 [ 1137.842264][ T969] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1137.866052][T18136] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2895'. [ 1138.041614][ T1216] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 19 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1138.122760][ T969] usb 3-1: device descriptor read/64, error -71 [ 1138.152537][T18144] overlayfs: missing 'lowerdir' [ 1138.383408][ T969] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1138.542470][ T969] usb 3-1: device descriptor read/64, error -71 [ 1138.652566][ T969] usb usb3-port1: attempt power cycle [ 1138.855484][T18116] usb 9-1: reset high-speed USB device number 19 using dummy_hcd [ 1139.018092][ T969] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1139.133946][T14400] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1139.346231][ T969] usb 3-1: device descriptor read/8, error -71 [ 1139.451379][T18161] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1139.503729][T14400] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.514199][T14400] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1139.524687][T14400] usb 1-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 1139.540357][T14400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.567132][T14400] usb 1-1: config 0 descriptor?? [ 1139.596411][T14400] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1139.604244][ T969] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1139.643168][ T969] usb 3-1: device descriptor read/8, error -71 [ 1139.792069][ T969] usb usb3-port1: unable to enumerate USB device [ 1140.055092][T14400] pwc: send_video_command error -71 [ 1140.057198][T14400] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1140.061452][T14400] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1140.157254][T14400] usb 1-1: USB disconnect, device number 123 [ 1140.475191][T18168] orangefs_mount: mount request failed with -4 [ 1140.534104][ T969] usb 9-1: USB disconnect, device number 19 [ 1140.540090][ T29] audit: type=1400 audit(1736079201.204:2167): avc: denied { bind } for pid=18172 comm="syz.8.2904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1140.568244][ T29] audit: type=1400 audit(1736079201.204:2168): avc: denied { name_bind } for pid=18172 comm="syz.8.2904" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1140.589104][ C0] vkms_vblank_simulate: vblank timer overrun [ 1140.595523][ T29] audit: type=1400 audit(1736079201.204:2169): avc: denied { node_bind } for pid=18172 comm="syz.8.2904" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1140.619639][ T969] usblp0: removed [ 1141.116038][T18186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.124986][T18186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.137614][T18186] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 1141.333333][ T29] audit: type=1400 audit(1736079202.004:2170): avc: denied { write } for pid=18188 comm="syz.7.2909" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1141.356216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.422644][T15923] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1142.454932][T18201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2911'. [ 1142.592570][T15923] usb 1-1: Using ep0 maxpacket: 8 [ 1142.619870][T15923] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.690166][T15923] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1142.860906][T15923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1142.872101][T15923] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1143.569585][T15923] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1143.579369][T15923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.587590][T15923] usb 1-1: Product: syz [ 1143.591977][T15923] usb 1-1: Manufacturer: syz [ 1143.596773][T15923] usb 1-1: SerialNumber: syz [ 1143.627277][T15923] usb 1-1: config 0 descriptor?? [ 1143.788367][T18209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1143.889181][T18210] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1143.893310][T15923] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 1144.804655][T18198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.814255][T18198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.334837][T18224] trusted_key: encrypted_key: insufficient parameters specified [ 1146.673587][T18225] trusted_key: encrypted_key: insufficient parameters specified [ 1147.630005][T18236] trusted_key: encrypted_key: insufficient parameters specified [ 1149.313888][T18242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'. [ 1149.419396][T15923] imon:send_packet: packet tx failed (-71) [ 1149.442314][T15923] imon 1-1:0.0: panel buttons/knobs setup failed [ 1150.005615][T18243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1150.014762][T18243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.262245][T15923] rc_core: IR keymap rc-imon-pad not found [ 1150.268269][T15923] Registered IR keymap rc-empty [ 1150.273294][T15923] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1150.292298][T15923] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1150.310381][T15923] imon:send_packet: packet tx failed (-71) [ 1150.333003][T15923] imon 1-1:0.0: remote input dev register failed [ 1150.339563][T15923] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 1150.512369][T15923] imon 1-1:0.0: unable to initialize intf0, err 0 [ 1150.518868][T15923] imon:imon_probe: failed to initialize context! [ 1150.874097][T15923] imon 1-1:0.0: unable to register, err -19 [ 1150.901080][T15923] usb 1-1: USB disconnect, device number 124 [ 1151.495238][T18274] trusted_key: encrypted_key: insufficient parameters specified [ 1151.670551][T18276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.679214][T18276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.897070][T18275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.905810][T18275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.849247][ T29] audit: type=1804 audit(1736079213.484:2171): pid=18281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2930" name="/newroot/103/file1/bus" dev="ramfs" ino=60379 res=1 errno=0 [ 1153.104091][T18268] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2926'. [ 1153.520133][ T29] audit: type=1400 audit(1736079214.174:2172): avc: denied { setopt } for pid=18286 comm="syz.7.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1153.547815][ T29] audit: type=1400 audit(1736079214.174:2173): avc: denied { write } for pid=18286 comm="syz.7.2933" path="socket:[60867]" dev="sockfs" ino=60867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1155.567197][T18311] orangefs_mount: mount request failed with -4 [ 1155.910137][T18321] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.2942'. [ 1155.927684][T18321] netlink: 5128 bytes leftover after parsing attributes in process `syz.5.2942'. [ 1155.948159][T18321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.957238][T18321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.042436][ T969] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1156.202225][ T969] usb 9-1: device descriptor read/64, error -71 [ 1156.372361][T15923] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1156.502335][T15923] usb 3-1: device descriptor read/64, error -71 [ 1156.512487][ T969] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1156.685611][ T969] usb 9-1: device descriptor read/64, error -71 [ 1156.812853][ T969] usb usb9-port1: attempt power cycle [ 1156.882383][T15923] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1157.022357][T15923] usb 3-1: device descriptor read/64, error -71 [ 1157.133411][T15923] usb usb3-port1: attempt power cycle [ 1157.532275][ T969] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1157.577737][ T969] usb 9-1: device descriptor read/8, error -71 [ 1157.584345][ T29] audit: type=1400 audit(1736079218.254:2174): avc: denied { map } for pid=18342 comm="syz.5.2947" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1157.631136][ T29] audit: type=1400 audit(1736079218.254:2175): avc: denied { execute } for pid=18342 comm="syz.5.2947" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1157.732370][T15923] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1157.753375][T15923] usb 3-1: device descriptor read/8, error -71 [ 1157.802302][ T5895] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1157.866307][ T969] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1157.893143][ T969] usb 9-1: device descriptor read/8, error -71 [ 1157.952442][ T5895] usb 1-1: Using ep0 maxpacket: 8 [ 1157.964893][ T5895] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1157.973854][ T5895] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1157.985993][ T5895] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1157.995305][T15923] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1158.006998][ T5895] usb 1-1: config 250 has no interface number 0 [ 1158.013086][ T969] usb usb9-port1: unable to enumerate USB device [ 1158.014410][ T5895] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1158.031479][ T5895] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1158.042069][ T5895] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1158.053115][ T5895] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1158.073529][T15923] usb 3-1: device descriptor read/8, error -71 [ 1158.081394][ T5895] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1158.095272][ T5895] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1158.109526][ T5895] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1158.119374][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1158.127796][ T5895] usb 1-1: Product: syz [ 1158.131961][ T5895] usb 1-1: SerialNumber: syz [ 1158.142554][ T5895] hub 1-1:250.228: bad descriptor, ignoring hub [ 1158.148874][ T5895] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1158.182607][T15923] usb usb3-port1: unable to enumerate USB device [ 1158.349422][ T5895] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 125 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1159.023631][T18359] overlayfs: missing 'workdir' [ 1159.453221][T18339] usb 1-1: reset high-speed USB device number 125 using dummy_hcd [ 1159.842400][ T5899] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1160.062477][T15923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1160.281622][T15923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.371502][T15923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1160.464327][T15923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1160.583854][ T5899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.594222][ T5899] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1160.603633][ T5899] usb 9-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1160.629690][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.632101][T15923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.648944][ T5899] usb 9-1: config 0 descriptor?? [ 1160.652768][T18365] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1160.665491][T15923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1161.236193][ T29] audit: type=1400 audit(1736079221.904:2176): avc: denied { write } for pid=18362 comm="syz.8.2951" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1161.329954][ T29] audit: type=1400 audit(1736079221.924:2177): avc: denied { open } for pid=18362 comm="syz.8.2951" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1161.394373][ T29] audit: type=1400 audit(1736079221.934:2178): avc: denied { read append } for pid=18362 comm="syz.8.2951" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1161.453371][ T29] audit: type=1800 audit(1736079222.114:2179): pid=18363 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2951" name="/" dev="9p" ino=2 res=0 errno=0 [ 1161.485091][ T5899] Bluetooth: Can't get state to change to load configuration err [ 1161.508062][ T5899] Bluetooth: Loading sysconfig file failed [ 1161.527398][ T5899] ath3k 9-1:0.0: probe with driver ath3k failed with error -16 [ 1161.543518][ T5899] usb 9-1: USB disconnect, device number 24 [ 1162.607258][ T5895] usb 3-1: USB disconnect, device number 16 [ 1162.886187][ T5899] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1162.941494][ T29] audit: type=1400 audit(1736079223.604:2180): avc: denied { map } for pid=18386 comm="syz.5.2957" path="socket:[61238]" dev="sockfs" ino=61238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1163.122501][ T29] audit: type=1400 audit(1736079223.704:2181): avc: denied { read accept } for pid=18386 comm="syz.5.2957" path="socket:[61238]" dev="sockfs" ino=61238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1163.147165][ T5899] usb 8-1: device descriptor read/64, error -71 [ 1163.433019][ T5899] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1163.753563][ T5899] usb 8-1: device descriptor read/64, error -71 [ 1163.893467][ T5899] usb usb8-port1: attempt power cycle [ 1163.899104][T14400] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1164.072481][T14400] usb 9-1: Using ep0 maxpacket: 16 [ 1164.085331][T14400] usb 9-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1164.103358][T14400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.111487][T14400] usb 9-1: Product: syz [ 1164.129320][T14400] usb 9-1: Manufacturer: syz [ 1164.138873][T14400] usb 9-1: SerialNumber: syz [ 1164.153546][T14400] usb 9-1: config 0 descriptor?? [ 1164.170691][T14400] visor 9-1:0.0: Sony Clie 3.5 converter detected [ 1164.178847][ T29] audit: type=1400 audit(1736079224.844:2182): avc: denied { setopt } for pid=18421 comm="syz.5.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1164.376351][T18414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.390146][T18414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.582283][T14400] usb 9-1: clie_3_5_startup: get config number failed: -71 [ 1164.589640][T14400] visor 9-1:0.0: probe with driver visor failed with error -71 [ 1164.597606][ T1216] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1164.605355][ T5899] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1164.621176][T14400] usb 9-1: USB disconnect, device number 25 [ 1164.646641][ T5899] usb 8-1: device descriptor read/8, error -71 [ 1164.712641][T18339] usb 1-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1164.732154][ T969] usb 1-1: USB disconnect, device number 125 [ 1164.764100][ T969] usblp0: removed [ 1164.776534][ T1216] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1164.839742][ T1216] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1164.857176][ T1216] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.430447][ T5899] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1165.431223][ T1216] usb 3-1: config 0 descriptor?? [ 1165.448978][ T5899] usb 8-1: device descriptor read/8, error -71 [ 1165.562619][ T5899] usb usb8-port1: unable to enumerate USB device [ 1165.786433][ T29] audit: type=1400 audit(1736079226.454:2183): avc: denied { create } for pid=18441 comm="syz.7.2971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1165.806448][ C1] vkms_vblank_simulate: vblank timer overrun [ 1165.985769][T18450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.994442][T18450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.777444][ T1216] usbhid 3-1:0.0: can't add hid device: -71 [ 1166.786448][ T1216] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1166.797652][ T1216] usb 3-1: USB disconnect, device number 17 [ 1166.804011][ T29] audit: type=1400 audit(1736079226.534:2184): avc: denied { ioctl } for pid=18439 comm="syz.5.2970" path="socket:[61290]" dev="sockfs" ino=61290 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1169.122298][ T5895] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1169.130204][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1169.159475][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 1169.332400][ T5895] usb 9-1: Using ep0 maxpacket: 8 [ 1169.348529][ T5895] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1169.372402][ T5895] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1169.381911][ T1216] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1169.405336][ T5895] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1169.431945][ T5895] usb 9-1: config 250 has no interface number 0 [ 1169.617563][ T5895] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1170.579483][ T5895] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1170.590103][ T5895] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1170.600430][ T5895] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1170.610997][ T5895] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1170.624957][ T5895] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1170.798231][T18479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1170.807060][T18479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.152401][ T5895] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1171.163123][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1171.171406][ T5895] usb 9-1: Product: syz [ 1171.176225][ T5895] usb 9-1: SerialNumber: syz [ 1171.205744][ T5895] usb 9-1: can't set config #250, error -71 [ 1171.240881][ T1216] usb 1-1: Using ep0 maxpacket: 8 [ 1171.251208][ T1216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.269721][ T1216] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1171.276120][ T5895] usb 9-1: USB disconnect, device number 26 [ 1171.299392][T18476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1171.308275][T18476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1171.354969][ T1216] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1171.378748][ T1216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.415270][ T1216] usb 1-1: config 0 descriptor?? [ 1171.638716][ T1216] usbhid 1-1:0.0: can't add hid device: -71 [ 1171.652329][ T1216] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1171.681129][ T1216] usb 1-1: USB disconnect, device number 127 [ 1171.716885][ T29] audit: type=1400 audit(1736079232.384:2185): avc: denied { setopt } for pid=18482 comm="syz.8.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1172.758893][T18499] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1172.786494][T18499] PKCS7: Only support pkcs7_signedData type [ 1175.211773][T17739] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1175.817529][T17739] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1175.893804][ T5895] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1175.912880][T17739] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1175.921711][T17739] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1175.931186][T17739] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1175.938738][T17739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1176.053857][ T5895] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1176.066720][T18522] wg1 speed is unknown, defaulting to 1000 [ 1176.072265][ T5895] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1176.082829][ T5895] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1176.091829][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1176.102916][ T5895] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1176.253548][ T5895] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1176.273164][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1176.281281][ T5895] usb 8-1: Product: syz [ 1176.361897][T18532] fuse: Bad value for 'fd' [ 1176.383040][ T969] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1176.506063][ T5895] usb 8-1: Manufacturer: syz [ 1177.389823][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.396329][ T969] usb 1-1: device descriptor read/64, error -71 [ 1177.557419][ T1216] usb 6-1: USB disconnect, device number 75 [ 1177.613211][ T1216] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 1177.631985][ T1216] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 1177.658236][ T969] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1177.914477][ T1216] io_edgeport 6-1:162.209: device disconnected [ 1177.952298][ T969] usb 1-1: device descriptor read/64, error -71 [ 1177.983078][T17739] Bluetooth: hci4: command tx timeout [ 1178.139036][ T969] usb usb1-port1: attempt power cycle [ 1178.496038][ T5895] usb 8-1: can't set config #1, error -71 [ 1178.512384][ T969] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1178.518170][ T5895] usb 8-1: USB disconnect, device number 46 [ 1178.754096][ T969] usb 1-1: device not accepting address 4, error -71 [ 1179.013331][T18522] chnl_net:caif_netlink_parms(): no params data found [ 1179.609414][T18569] openvswitch: netlink: IP tunnel dst address not specified [ 1180.062460][T17739] Bluetooth: hci4: command tx timeout [ 1180.219240][T18577] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3001'. [ 1180.306984][T18522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.402632][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.410794][T18522] bridge_slave_0: entered allmulticast mode [ 1180.483615][T18522] bridge_slave_0: entered promiscuous mode [ 1180.585560][T18522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.688132][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.827733][T18522] bridge_slave_1: entered allmulticast mode [ 1180.864332][T18522] bridge_slave_1: entered promiscuous mode [ 1180.921464][T18586] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1181.080875][T18522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.109758][T18522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.183265][T18522] team0: Port device team_slave_0 added [ 1181.266870][T18522] team0: Port device team_slave_1 added [ 1181.717167][ T969] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1181.754111][T18522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.818500][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.853061][T18522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.867056][T18522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.892305][ T969] usb 1-1: Using ep0 maxpacket: 32 [ 1181.906474][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.031670][T18522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.138699][ T969] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1182.148013][T17739] Bluetooth: hci4: command tx timeout [ 1182.149097][ T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.188643][ T969] usb 1-1: config 0 descriptor?? [ 1182.223492][ T969] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1182.266665][T18522] hsr_slave_0: entered promiscuous mode [ 1182.288766][T18522] hsr_slave_1: entered promiscuous mode [ 1182.526636][T18522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1182.536164][T18522] Cannot create hsr debugfs directory [ 1182.990325][T18522] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.028836][ T969] gspca_nw80x: reg_r err -110 [ 1183.033772][ T969] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 1183.074425][ T5895] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1183.110231][T18522] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.142636][ T5866] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1183.151015][T15923] usb 1-1: USB disconnect, device number 6 [ 1183.209085][T18522] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.232618][ T5895] usb 9-1: Using ep0 maxpacket: 8 [ 1183.239047][ T5895] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 1183.247678][ T5895] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 1183.261772][ T5895] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1183.271387][ T5895] usb 9-1: config 250 has no interface number 0 [ 1183.279041][ T5895] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1183.291081][ T5895] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1183.302658][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1183.308432][ T5895] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1183.318889][ T5895] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1183.320186][T18522] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.331590][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.350558][ T5895] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1183.364844][ T5895] usb 9-1: config 250 interface 228 has no altsetting 0 [ 1183.373391][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.382735][ T5895] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1183.391750][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1183.400221][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1183.408704][ T5895] usb 9-1: Product: syz [ 1183.413035][ T5895] usb 9-1: SerialNumber: syz [ 1183.418154][ T5866] usb 3-1: SerialNumber: syz [ 1183.425936][ T5895] hub 9-1:250.228: bad descriptor, ignoring hub [ 1183.434100][ T5895] hub 9-1:250.228: probe with driver hub failed with error -5 [ 1183.445287][ T5866] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 1183.454707][ T5866] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 1183.461239][ T5866] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 1183.528595][T18522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1183.539199][T18522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1183.550937][T18522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1183.566048][T18522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1183.629424][T18522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.637403][ T5895] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 27 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1183.645984][T18522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.679410][ T969] usb 3-1: USB disconnect, device number 18 [ 1183.687268][T16723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.694410][T16723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.721776][T16723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.728949][T16723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.944290][T18522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.189478][ T29] audit: type=1804 audit(1736079244.754:2186): pid=18628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3014" name="/newroot/592/file1/bus" dev="ramfs" ino=62829 res=1 errno=0 [ 1184.213063][ T29] audit: type=1804 audit(1736079244.764:2187): pid=18628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.3014" name="/newroot/592/file1/bus" dev="ramfs" ino=62829 res=1 errno=0 [ 1184.279544][T17739] Bluetooth: hci4: command tx timeout [ 1184.535926][T18602] usb 9-1: reset high-speed USB device number 27 using dummy_hcd [ 1185.541032][T18522] veth0_vlan: entered promiscuous mode [ 1185.560278][T18522] veth1_vlan: entered promiscuous mode [ 1185.721099][T18522] veth0_macvtap: entered promiscuous mode [ 1185.747513][T18522] veth1_macvtap: entered promiscuous mode [ 1185.755305][T18642] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1185.829643][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.852750][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.863200][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1185.875589][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1185.891582][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.115318][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.230709][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1186.351057][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.478815][T18522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.568001][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.607301][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.630926][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.670264][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.680543][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.692031][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.712669][T18522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1186.730536][T18522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1186.751124][T18522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.838570][T18522] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.858742][T18522] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.870840][T18522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.897290][T18522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.982716][ T969] usb 9-1: USB disconnect, device number 27 [ 1187.008772][ T969] usblp0: removed [ 1187.030054][T18672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'. [ 1188.330296][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.352797][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.391217][T18689] overlayfs: missing 'lowerdir' [ 1188.522357][ T6246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.532037][ T6246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.546014][T18696] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1191.376471][T18713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3035'. [ 1191.856962][T18723] binder: 18717:18723 ioctl c0189379 20000200 returned -22 [ 1191.911096][ T29] audit: type=1400 audit(1736079252.574:2188): avc: denied { call } for pid=18717 comm="syz.5.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1193.140653][T18723] syz.5.3036 (18723): drop_caches: 2 [ 1193.160261][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1193.174924][T18741] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1193.185790][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1193.194029][T18741] netlink: 5128 bytes leftover after parsing attributes in process `syz.7.3041'. [ 1193.218855][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1193.241739][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1193.257129][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1193.265848][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1193.393422][T18739] wg1 speed is unknown, defaulting to 1000 [ 1193.582360][ T5895] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1193.663567][T18752] netlink: 'syz.2.3043': attribute type 2 has an invalid length. [ 1193.671493][T18752] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3043'. [ 1193.803584][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1193.818921][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1194.071090][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1194.108738][T18739] chnl_net:caif_netlink_parms(): no params data found [ 1194.109575][ T5895] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1194.125538][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.136650][ T5895] usb 8-1: Product: syz [ 1194.148164][ T5895] usb 8-1: Manufacturer: syz [ 1194.159173][ T5895] usb 8-1: SerialNumber: syz [ 1194.191719][ T5895] usb 8-1: config 0 descriptor?? [ 1194.359672][T18739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.388822][T18739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.482499][ T29] audit: type=1804 audit(1736079255.124:2189): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3045" name="/newroot/132/file1/bus" dev="ramfs" ino=63181 res=1 errno=0 [ 1194.512952][ T29] audit: type=1804 audit(1736079255.134:2190): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.3045" name="/newroot/132/file1/bus" dev="ramfs" ino=63181 res=1 errno=0 [ 1194.545880][T18739] bridge_slave_0: entered allmulticast mode [ 1194.667455][ T5895] adutux 8-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1194.726229][T18739] bridge_slave_0: entered promiscuous mode [ 1194.844723][T18739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.923308][T18739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.939017][T18739] bridge_slave_1: entered allmulticast mode [ 1194.948329][T18739] bridge_slave_1: entered promiscuous mode [ 1195.094155][T18739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1195.130185][ T1216] usb 8-1: USB disconnect, device number 47 [ 1195.201181][T18739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1195.266120][T18739] team0: Port device team_slave_0 added [ 1195.291048][T18739] team0: Port device team_slave_1 added [ 1195.360095][T17739] Bluetooth: hci0: command tx timeout [ 1195.391980][ T6141] bridge_slave_1: left allmulticast mode [ 1195.413409][ T6141] bridge_slave_1: left promiscuous mode [ 1195.419136][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.513649][ T6141] bridge_slave_0: left allmulticast mode [ 1195.519502][ T6141] bridge_slave_0: left promiscuous mode [ 1195.529773][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.436211][T18772] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3048'. [ 1196.454114][T18772] FAULT_INJECTION: forcing a failure. [ 1196.454114][T18772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.468945][T18772] CPU: 1 UID: 0 PID: 18772 Comm: syz.8.3048 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1196.479739][T18772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1196.489806][T18772] Call Trace: [ 1196.493091][T18772] [ 1196.496021][T18772] dump_stack_lvl+0x16c/0x1f0 [ 1196.500745][T18772] should_fail_ex+0x497/0x5b0 [ 1196.505453][T18772] _copy_from_user+0x2e/0xd0 [ 1196.510071][T18772] copy_msghdr_from_user+0x99/0x160 [ 1196.515289][T18772] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1196.521124][T18772] ___sys_sendmsg+0xff/0x1e0 [ 1196.525731][T18772] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.530940][T18772] ? __pfx_lock_release+0x10/0x10 [ 1196.535963][T18772] ? trace_lock_acquire+0x14e/0x1f0 [ 1196.541169][T18772] ? __fget_files+0x206/0x3a0 [ 1196.545847][T18772] __sys_sendmsg+0x16e/0x220 [ 1196.550439][T18772] ? __pfx___sys_sendmsg+0x10/0x10 [ 1196.555555][T18772] do_syscall_64+0xcd/0x250 [ 1196.560062][T18772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.565975][T18772] RIP: 0033:0x7f41eb985d29 [ 1196.570392][T18772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.590016][T18772] RSP: 002b:00007f41ec7c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.598430][T18772] RAX: ffffffffffffffda RBX: 00007f41ebb76080 RCX: 00007f41eb985d29 [ 1196.606409][T18772] RDX: 0000000004000084 RSI: 0000000020000000 RDI: 000000000000000b [ 1196.614377][T18772] RBP: 00007f41ec7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.622349][T18772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.630324][T18772] R13: 0000000000000000 R14: 00007f41ebb76080 R15: 00007ffeca64a868 [ 1196.638305][T18772] [ 1196.641413][ C1] vkms_vblank_simulate: vblank timer overrun [ 1196.721831][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.754494][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.781366][ T6141] bond0 (unregistering): Released all slaves [ 1196.806759][ T6141] bond1 (unregistering): Released all slaves [ 1196.836236][ T6141] bond2 (unregistering): Released all slaves [ 1197.058871][ T6141] bond3 (unregistering): Released all slaves [ 1197.070377][T18739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.077448][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.103359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.109518][T18739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.194282][T18739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.201270][T18739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.229648][T18739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1197.423712][T17739] Bluetooth: hci0: command tx timeout [ 1198.070421][T18807] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1198.454853][ T29] audit: type=1804 audit(1736079259.104:2191): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3057" name="/newroot/142/file1/bus" dev="ramfs" ino=63355 res=1 errno=0 [ 1198.569980][T18739] hsr_slave_0: entered promiscuous mode [ 1198.589269][T18739] hsr_slave_1: entered promiscuous mode [ 1198.595613][ T29] audit: type=1804 audit(1736079259.104:2192): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3057" name="/newroot/142/file1/bus" dev="ramfs" ino=63355 res=1 errno=0 [ 1198.669373][T18820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1198.696403][T18820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1198.697837][T18823] FAULT_INJECTION: forcing a failure. [ 1198.697837][T18823] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.712302][T18739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1198.854985][T18823] CPU: 1 UID: 0 PID: 18823 Comm: syz.7.3058 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1198.865794][T18823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1198.875851][T18823] Call Trace: [ 1198.879123][T18823] [ 1198.882046][T18823] dump_stack_lvl+0x16c/0x1f0 [ 1198.886724][T18823] should_fail_ex+0x497/0x5b0 [ 1198.891401][T18823] ? fs_reclaim_acquire+0xae/0x150 [ 1198.896512][T18823] should_failslab+0xc2/0x120 [ 1198.901189][T18823] __kmalloc_noprof+0xcb/0x510 [ 1198.905950][T18823] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1198.911586][T18823] tomoyo_realpath_from_path+0xb9/0x720 [ 1198.917130][T18823] ? tomoyo_path_number_perm+0x235/0x590 [ 1198.922757][T18823] ? tomoyo_path_number_perm+0x235/0x590 [ 1198.928387][T18823] tomoyo_path_number_perm+0x248/0x590 [ 1198.933839][T18823] ? tomoyo_path_number_perm+0x235/0x590 [ 1198.939467][T18823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1198.945461][T18823] ? __pfx_lock_release+0x10/0x10 [ 1198.950480][T18823] ? trace_lock_acquire+0x14e/0x1f0 [ 1198.955684][T18823] ? lock_acquire+0x2f/0xb0 [ 1198.960186][T18823] ? __fget_files+0x40/0x3a0 [ 1198.964776][T18823] ? __fget_files+0x206/0x3a0 [ 1198.969454][T18823] security_file_ioctl+0x9b/0x240 [ 1198.974480][T18823] __x64_sys_ioctl+0xb7/0x200 [ 1198.979159][T18823] do_syscall_64+0xcd/0x250 [ 1198.983666][T18823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.989561][T18823] RIP: 0033:0x7f9b8bf85d29 [ 1198.993969][T18823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.013570][T18823] RSP: 002b:00007f9b8ccdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1199.021979][T18823] RAX: ffffffffffffffda RBX: 00007f9b8c175fa0 RCX: 00007f9b8bf85d29 [ 1199.029942][T18823] RDX: 00000000200003c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 1199.037908][T18823] RBP: 00007f9b8ccdb090 R08: 0000000000000000 R09: 0000000000000000 [ 1199.045871][T18823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1199.053835][T18823] R13: 0000000000000000 R14: 00007f9b8c175fa0 R15: 00007ffed9107858 [ 1199.061813][T18823] [ 1199.064944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1199.071468][T18739] Cannot create hsr debugfs directory [ 1199.121638][T15476] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1199.272265][T18823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1199.402259][T15476] usb 6-1: Using ep0 maxpacket: 32 [ 1199.418514][T15476] usb 6-1: config 0 has an invalid interface number: 89 but max is 0 [ 1199.426817][T15476] usb 6-1: config 0 has no interface number 0 [ 1199.438671][T15476] usb 6-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1199.448013][T15476] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.456804][T15476] usb 6-1: Product: syz [ 1199.461547][T15476] usb 6-1: Manufacturer: syz [ 1199.476347][T15476] usb 6-1: SerialNumber: syz [ 1199.493972][T15476] usb 6-1: config 0 descriptor?? [ 1199.506785][T17739] Bluetooth: hci0: command tx timeout [ 1199.539582][T15476] hub 6-1:0.89: bad descriptor, ignoring hub [ 1199.546034][T15476] hub 6-1:0.89: probe with driver hub failed with error -5 [ 1199.562342][T15476] option 6-1:0.89: GSM modem (1-port) converter detected [ 1199.685119][ T6141] hsr_slave_0: left promiscuous mode [ 1199.764840][ T6141] hsr_slave_1: left promiscuous mode [ 1199.902537][T18820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.911084][T18820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1199.949961][T18821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.980292][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.035271][T18838] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3062'. [ 1200.037851][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.197169][T18821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.342497][T15476] usb 6-1: USB disconnect, device number 76 [ 1200.349841][T15476] option 6-1:0.89: device disconnected [ 1200.912297][ T5896] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1200.949081][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 1201.011881][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 1201.073974][ T5896] usb 8-1: no configurations [ 1201.083524][ T5896] usb 8-1: can't read configurations, error -22 [ 1201.222513][ T5896] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1201.410607][ T5896] usb 8-1: no configurations [ 1201.432956][ T5896] usb 8-1: can't read configurations, error -22 [ 1201.439466][ T5896] usb usb8-port1: attempt power cycle [ 1201.586261][T17739] Bluetooth: hci0: command tx timeout [ 1201.803291][ T5896] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1201.824053][ T5896] usb 8-1: no configurations [ 1201.828821][ T5896] usb 8-1: can't read configurations, error -22 [ 1202.012927][ T969] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 1202.062554][T18877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1202.084188][ T5896] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1202.258327][ T5896] usb 8-1: no configurations [ 1202.277122][ T5896] usb 8-1: can't read configurations, error -22 [ 1202.339424][T18877] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1202.372921][ T969] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1202.381546][ T5896] usb usb8-port1: unable to enumerate USB device [ 1202.440705][ T969] usb 6-1: config 0 has no interface number 0 [ 1202.469531][ T969] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 1202.805263][ T6141] IPVS: stop unused estimator thread 0... [ 1202.896160][ T969] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1202.916046][ T969] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1202.936394][ T969] usb 6-1: Manufacturer: syz [ 1202.941005][ T969] usb 6-1: SerialNumber: syz [ 1203.014362][ T969] usb 6-1: config 0 descriptor?? [ 1203.019926][T18868] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1204.958288][T18739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1205.012673][T18739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1205.044260][T18739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1205.076929][T18739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1206.802437][ T969] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 1206.809496][ T969] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1206.855711][T18739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.889442][T18739] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.917028][T18739] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1206.937344][T18739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1206.961258][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.968431][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.973510][ T969] usb 6-1: USB disconnect, device number 77 [ 1206.977124][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.988650][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.859339][T18739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.884985][T18739] veth0_vlan: entered promiscuous mode [ 1207.904400][T18739] veth1_vlan: entered promiscuous mode [ 1207.971340][T18739] veth0_macvtap: entered promiscuous mode [ 1208.125037][T18739] veth1_macvtap: entered promiscuous mode [ 1208.139885][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.150517][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.160495][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.223641][T18953] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3081'. [ 1208.232936][T18953] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3081'. [ 1208.783161][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.794025][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1208.806083][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1208.976827][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.019117][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.069916][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1209.177524][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.217745][T18739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.329323][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.340049][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.350558][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.366414][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.380122][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.418845][ T29] audit: type=1400 audit(1736079270.074:2193): avc: denied { write } for pid=18955 comm="syz.7.3083" path="socket:[65903]" dev="sockfs" ino=65903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1209.427534][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.465176][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.486256][ T29] audit: type=1400 audit(1736079270.084:2194): avc: denied { setattr } for pid=18955 comm="syz.7.3083" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1209.637215][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1209.661609][T18739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1209.701174][T18739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1210.266627][T18739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.306587][T18739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.365647][T18739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.396641][T18739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.441677][T18739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.952223][ T29] audit: type=1400 audit(1736079271.604:2195): avc: denied { getopt } for pid=18981 comm="syz.5.3087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1211.865005][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.879145][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.300639][ T29] audit: type=1326 audit(1736079272.964:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1212.413403][T15218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.421311][T15218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.444102][ T29] audit: type=1326 audit(1736079273.114:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1212.715328][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3038'. [ 1212.728921][ T29] audit: type=1326 audit(1736079273.394:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1212.803273][ T29] audit: type=1326 audit(1736079273.394:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1212.940984][ T29] audit: type=1326 audit(1736079273.394:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1213.052304][ T29] audit: type=1326 audit(1736079273.394:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1213.352721][ T29] audit: type=1326 audit(1736079273.394:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19005 comm="syz.2.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e22385d29 code=0x7fc00000 [ 1215.934071][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1215.934083][ T29] audit: type=1804 audit(1736079276.604:2265): pid=19042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3097" name="/newroot/146/file1/bus" dev="ramfs" ino=65185 res=1 errno=0 [ 1216.972048][ T29] audit: type=1804 audit(1736079276.634:2266): pid=19042 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.3097" name="/newroot/146/file1/bus" dev="ramfs" ino=65185 res=1 errno=0 [ 1219.572416][ T29] audit: type=1326 audit(1736079278.914:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.605022][ T29] audit: type=1326 audit(1736079278.914:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.632889][ T29] audit: type=1326 audit(1736079278.914:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.656456][ T29] audit: type=1326 audit(1736079278.914:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.680459][ T29] audit: type=1326 audit(1736079278.914:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.713745][ T29] audit: type=1326 audit(1736079278.914:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.750402][ T29] audit: type=1326 audit(1736079278.914:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1219.774497][ T29] audit: type=1326 audit(1736079278.914:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19054 comm="syz.7.3100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b8bf85d29 code=0x7ffc0000 [ 1220.342461][ T5896] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1220.394117][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3104'. [ 1220.517155][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 1220.521228][T19095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.566917][T19095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.578439][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.589322][ T5896] usb 6-1: config 0 has no interfaces? [ 1220.595237][ T5896] usb 6-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 1220.604511][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.700683][ T5896] usb 6-1: config 0 descriptor?? [ 1220.902634][T15923] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1224.124932][ T1216] usb 6-1: USB disconnect, device number 78 [ 1224.181396][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1224.181412][ T29] audit: type=1400 audit(1736079284.844:2281): avc: denied { mount } for pid=19132 comm="syz.2.3114" name="/" dev="hugetlbfs" ino=65238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1224.245593][T19140] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3113'. [ 1224.254833][T19140] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3113'. [ 1225.511478][T19154] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3119'. [ 1225.632695][T15476] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1226.979823][ T29] audit: type=1804 audit(1736079287.644:2282): pid=19159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3121" name="/newroot/17/file1/bus" dev="ramfs" ino=65260 res=1 errno=0 [ 1227.261830][ T29] audit: type=1804 audit(1736079287.794:2283): pid=19159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3121" name="/newroot/17/file1/bus" dev="ramfs" ino=65260 res=1 errno=0 [ 1227.393067][T15476] usb 9-1: Using ep0 maxpacket: 32 [ 1227.406293][T19166] trusted_key: encrypted_key: insufficient parameters specified [ 1228.253298][T15476] usb 9-1: device descriptor read/all, error -71 [ 1228.608977][T19181] fuse: Bad value for 'fd' [ 1229.515459][T19180] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3127'. [ 1229.524658][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3127'. [ 1231.465773][T19199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3131'. [ 1233.181712][T19211] overlay: ./file0 is not a directory [ 1233.688080][T15476] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1235.029916][ T29] audit: type=1804 audit(1736079295.654:2284): pid=19228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3137" name="/newroot/22/file1/bus" dev="ramfs" ino=65349 res=1 errno=0 [ 1235.061249][ T29] audit: type=1804 audit(1736079295.654:2285): pid=19228 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3137" name="/newroot/22/file1/bus" dev="ramfs" ino=65349 res=1 errno=0 [ 1235.102578][T15476] usb 9-1: device descriptor read/64, error -71 [ 1236.112272][T15476] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1236.191719][T19232] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 1238.214794][T19246] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1238.223969][T19246] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3139'. [ 1238.819069][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.122401][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1239.319715][ T5899] usb 3-1: device descriptor read/64, error -71 [ 1239.466115][ T969] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1239.620749][ T29] audit: type=1400 audit(1736079300.264:2286): avc: denied { map } for pid=19262 comm="syz.8.3148" path="socket:[66822]" dev="sockfs" ino=66822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1239.662481][ T969] usb 1-1: Using ep0 maxpacket: 16 [ 1239.678755][ T969] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1239.700647][ T969] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.677663][ T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.685824][ T969] usb 1-1: Product: syz [ 1240.689991][ T969] usb 1-1: Manufacturer: syz [ 1240.694663][ T969] usb 1-1: SerialNumber: syz [ 1240.703438][ T969] usb 1-1: config 0 descriptor?? [ 1241.760872][ T969] usb 1-1: USB disconnect, device number 7 [ 1242.918158][ T29] audit: type=1804 audit(1736079303.154:2287): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3154" name="/newroot/27/file1/bus" dev="ramfs" ino=65510 res=1 errno=0 [ 1242.941703][ T29] audit: type=1804 audit(1736079303.154:2288): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.3154" name="/newroot/27/file1/bus" dev="ramfs" ino=65510 res=1 errno=0 [ 1243.872398][T15476] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1244.116360][T15476] usb 6-1: Using ep0 maxpacket: 8 [ 1244.139553][ T5899] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1244.148481][T15476] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.162273][T15476] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1244.176450][T15476] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1244.186619][T15476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.281640][T15476] usb 6-1: config 0 descriptor?? [ 1244.282408][ T1216] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1244.314180][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.332325][ T5899] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1244.359921][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.385779][ T5899] usb 3-1: config 0 descriptor?? [ 1244.393224][T19308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3161'. [ 1244.432284][ T1216] usb 8-1: device descriptor read/64, error -71 [ 1244.503366][T19303] Bluetooth: MGMT ver 1.23 [ 1244.509760][T15476] usbhid 6-1:0.0: can't add hid device: -71 [ 1244.517089][T15476] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1244.545886][T15476] usb 6-1: USB disconnect, device number 79 [ 1244.702484][ T1216] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1244.822475][T19297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3157'. [ 1244.850318][ T5899] viewsonic 0003:2133:0018.001A: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 1244.862647][ T1216] usb 8-1: device descriptor read/64, error -71 [ 1244.972987][ T1216] usb usb8-port1: attempt power cycle [ 1245.047659][ T5899] usb 3-1: USB disconnect, device number 22 [ 1245.332862][ T1216] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1245.409447][ T1216] usb 8-1: device descriptor read/8, error -71 [ 1246.132426][ T1216] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1246.173547][ T1216] usb 8-1: device descriptor read/8, error -71 [ 1246.343981][T19330] netlink: 'syz.8.3168': attribute type 10 has an invalid length. [ 1246.393361][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.404421][T19330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.437040][ T1216] usb usb8-port1: unable to enumerate USB device [ 1247.164128][T19331] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 1247.187359][T19330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.194673][T19330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1247.202383][T19330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.209640][T19330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.248269][T19330] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1247.285312][T14400] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1247.782335][ T29] audit: type=1804 audit(1736079308.334:2289): pid=19339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.8.3169" name="/newroot/170/file1/bus" dev="ramfs" ino=67657 res=1 errno=0 [ 1249.312378][ T29] audit: type=1804 audit(1736079308.334:2290): pid=19339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.8.3169" name="/newroot/170/file1/bus" dev="ramfs" ino=67657 res=1 errno=0 [ 1251.539092][T19349] loop5: detected capacity change from 0 to 7 [ 1251.547043][T19349] buffer_io_error: 4 callbacks suppressed [ 1251.547086][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.561253][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.569537][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.577851][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.587143][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.595457][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.604552][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.613534][T19349] ldm_validate_partition_table(): Disk read failed. [ 1251.620864][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.629831][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.639543][T19349] Buffer I/O error on dev loop5, logical block 0, async page read [ 1251.649171][T19349] Dev loop5: unable to read RDB block 0 [ 1251.657824][T19349] loop5: unable to read partition table [ 1251.665776][T19349] loop5: partition table beyond EOD, truncated [ 1251.672369][T19349] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1251.672369][T19349] ) failed (rc=-5) [ 1252.352476][T14400] usb 3-1: Using ep0 maxpacket: 8 [ 1252.648560][T14400] usb 3-1: device descriptor read/all, error -71 [ 1252.852642][ T46] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1253.002676][ T46] usb 6-1: Using ep0 maxpacket: 8 [ 1253.028336][ T969] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1253.031072][ T46] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 1253.073406][ T1216] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1253.074856][ T46] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 1253.092868][ T46] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1253.111167][ T46] usb 6-1: config 250 has no interface number 0 [ 1253.132443][T14400] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1253.139598][ T46] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1253.154168][ T46] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1253.165377][ T46] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1253.181430][ T46] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1253.192317][ T46] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1253.218722][ T46] usb 6-1: config 250 interface 228 has no altsetting 0 [ 1253.222584][ T969] usb 9-1: Using ep0 maxpacket: 16 [ 1253.227741][ T46] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1253.269166][ T1216] usb 8-1: Using ep0 maxpacket: 8 [ 1253.286208][ T46] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1253.289810][ T969] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.303843][ T46] usb 6-1: Product: syz [ 1253.304996][ T969] usb 9-1: config 0 has no interfaces? [ 1253.314917][ T46] usb 6-1: SerialNumber: syz [ 1253.332507][ T1216] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1253.343945][ T1216] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1253.358686][ T1216] usb 8-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1253.369698][ T1216] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.402296][ T1216] usb 8-1: config 0 descriptor?? [ 1253.414149][T14400] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1253.415691][ T46] hub 6-1:250.228: bad descriptor, ignoring hub [ 1253.433522][ T969] usb 9-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1253.443478][T14400] usb 3-1: not running at top speed; connect to a high speed hub [ 1253.453812][ T969] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.461938][ T969] usb 9-1: Product: syz [ 1253.467159][ T46] hub 6-1:250.228: probe with driver hub failed with error -5 [ 1253.468596][ T969] usb 9-1: Manufacturer: syz [ 1253.481135][T14400] usb 3-1: config 2 has an invalid interface number: 131 but max is 0 [ 1253.490245][T14400] usb 3-1: config 2 has no interface number 0 [ 1253.498349][T14400] usb 3-1: config 2 interface 131 has no altsetting 0 [ 1253.508576][ T969] usb 9-1: SerialNumber: syz [ 1253.574569][T14400] usb 3-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30 [ 1253.588288][ T969] usb 9-1: config 0 descriptor?? [ 1253.594030][T14400] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.603342][T14400] usb 3-1: Product: syz [ 1253.613116][T14400] usb 3-1: Manufacturer: syz [ 1253.627897][ T46] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 80 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1253.635562][ T1216] usbhid 8-1:0.0: can't add hid device: -71 [ 1253.651674][ T1216] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1253.662353][T14400] usb 3-1: SerialNumber: syz [ 1253.682780][ T1216] usb 8-1: USB disconnect, device number 56 [ 1253.880596][T19352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1253.889502][T19352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1253.922962][T14400] em28xx 3-1:2.131: New device syz syz @ 12 Mbps (2013:8461, interface 131, class 131) [ 1253.941105][T14400] em28xx 3-1:2.131: Device initialization failed. [ 1253.948561][T14400] em28xx 3-1:2.131: Device must be connected to a high-speed USB 2.0 port. [ 1253.976976][T14400] usb 3-1: USB disconnect, device number 24 [ 1254.039448][ T1216] usb 9-1: USB disconnect, device number 33 [ 1254.093185][T19368] wg1 speed is unknown, defaulting to 1000 [ 1254.229960][ T29] audit: type=1400 audit(1736079314.894:2291): avc: denied { setopt } for pid=19372 comm="syz.7.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1254.472296][T15476] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1254.632517][T15476] usb 8-1: Using ep0 maxpacket: 16 [ 1254.691954][T15476] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1254.715778][T15476] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.765921][T15476] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.139423][T15476] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.149725][T15476] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.158923][T15476] usb 8-1: Product: syz [ 1255.164417][T15476] usb 8-1: Manufacturer: syz [ 1255.169129][T15476] usb 8-1: SerialNumber: syz [ 1255.892323][T14400] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 1256.167354][T14400] usb 9-1: config 247 has an invalid interface number: 104 but max is 2 [ 1256.226782][T14400] usb 9-1: config 247 has an invalid interface number: 20 but max is 2 [ 1256.353996][T15476] usb 8-1: 0:2 : does not exist [ 1256.375944][T15476] usb 8-1: USB disconnect, device number 57 [ 1256.384247][T14400] usb 9-1: config 247 has an invalid interface number: 160 but max is 2 [ 1256.420181][T14400] usb 9-1: config 247 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.463298][ T5895] usb 6-1: USB disconnect, device number 80 [ 1256.471309][ T5895] usblp0: removed [ 1256.481232][T14400] usb 9-1: config 247 has 4 interfaces, different from the descriptor's value: 3 [ 1256.565835][T19390] loop5: detected capacity change from 0 to 7 [ 1256.576908][T14400] usb 9-1: config 247 has no interface number 0 [ 1256.583318][T14400] usb 9-1: config 247 has no interface number 1 [ 1256.589594][T14400] usb 9-1: config 247 has no interface number 3 [ 1256.619189][T14400] usb 9-1: config 247 interface 104 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1256.633330][T14400] usb 9-1: config 247 interface 104 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1256.640430][T19390] buffer_io_error: 4 callbacks suppressed [ 1256.640448][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1256.646390][T14400] usb 9-1: config 247 interface 104 altsetting 1 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1256.646427][T14400] usb 9-1: config 247 interface 104 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1256.646457][T14400] usb 9-1: config 247 interface 104 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 1256.646484][T14400] usb 9-1: too many endpoints for config 247 interface 20 altsetting 212: 83, using maximum allowed: 30 [ 1256.674204][ T7837] udevd[7837]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1256.682797][T14400] usb 9-1: config 247 interface 20 altsetting 212 endpoint 0xD has an invalid bInterval 198, changing to 4 [ 1256.740434][T14400] usb 9-1: config 247 interface 20 altsetting 212 has 2 endpoint descriptors, different from the interface descriptor's value: 83 [ 1256.762859][T14400] usb 9-1: config 247 interface 160 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.773451][ T29] audit: type=1804 audit(1736079317.404:2292): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.3186" name="/newroot/17/file1/bus" dev="ramfs" ino=67748 res=1 errno=0 [ 1256.776205][T14400] usb 9-1: too many endpoints for config 247 interface 2 altsetting 1: 251, using maximum allowed: 30 [ 1256.812240][T14400] usb 9-1: config 247 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 251 [ 1256.828697][T14400] usb 9-1: config 247 interface 104 has no altsetting 0 [ 1256.836999][T14400] usb 9-1: config 247 interface 20 has no altsetting 0 [ 1256.844769][T14400] usb 9-1: config 247 interface 160 has no altsetting 0 [ 1256.852544][T14400] usb 9-1: config 247 interface 2 has no altsetting 0 [ 1257.067986][T14400] usb 9-1: New USB device found, idVendor=0553, idProduct=0202, bcdDevice=ce.e1 [ 1257.093826][T14400] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.104070][T14400] usb 9-1: Product: ᰁ [ 1257.108862][T14400] usb 9-1: Manufacturer: ည [ 1257.119922][T14400] usb 9-1: SerialNumber: ℄𥳐퀕㷎셿翝쁑౷봝涞拭盾ꝟ뵵腘湎௔剜䭌⹓꓏麊䪎閵≐铊責粮꛿ꍊ⯐▲ᱸ祩墤넇뵑痽䮦盷馾鮖鱌頟蓖ඳ긜曀押楌럘肌똱綰跔皸 [ 1257.173504][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.215603][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.233776][T19388] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1257.272712][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.303094][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.311058][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.355126][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.382566][T19390] ldm_validate_partition_table(): Disk read failed. [ 1257.401855][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.425122][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.450163][T19387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.451128][T19390] Buffer I/O error on dev loop5, logical block 0, async page read [ 1257.458862][T19387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.474406][T19390] Dev loop5: unable to read RDB block 0 [ 1257.539319][T19390] loop5: unable to read partition table [ 1257.559037][T19390] loop5: partition table beyond EOD, truncated [ 1257.605162][T19390] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1257.605162][T19390] ) failed (rc=-5) [ 1257.622854][ T969] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1257.702941][T19406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3189'. [ 1258.002290][ T969] usb 8-1: Using ep0 maxpacket: 16 [ 1258.012547][ T969] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1258.032921][ T969] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1258.076067][ T969] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1258.175012][T19410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3190'. [ 1258.214747][ T969] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1258.231480][ T969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.244494][T19410] veth1_virt_wifi: entered promiscuous mode [ 1258.263242][ T969] usb 8-1: Product: syz [ 1258.283407][ T969] usb 8-1: Manufacturer: syz [ 1258.306557][ T969] usb 8-1: SerialNumber: syz [ 1258.323607][ T969] usb 8-1: config 0 descriptor?? [ 1259.192334][ T29] audit: type=1400 audit(1736079319.854:2293): avc: denied { mounton } for pid=19409 comm="syz.0.3190" path="/19/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1259.322587][T14400] usb 9-1: USB disconnect, device number 34 [ 1259.496185][T19417] Mount JFS Failure: -22 [ 1259.500644][T19417] jfs_mount failed w/return code = -22 [ 1259.687718][ T29] audit: type=1400 audit(1736079320.184:2294): avc: denied { read } for pid=19401 comm="syz.7.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1259.711651][T19417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.720504][T19417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.000884][T19421] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3191'. [ 1260.184491][T19418] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3191'. [ 1260.200484][T19419] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3192'. [ 1260.247527][T19409] veth1_virt_wifi: left promiscuous mode [ 1260.308084][ T969] usb 8-1: Can not set alternate setting to 1, error: -71 [ 1260.316081][ T969] synaptics_usb 8-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1260.349367][ T969] usb 8-1: USB disconnect, device number 58 [ 1262.057834][T19442] netlink: 'syz.2.3199': attribute type 3 has an invalid length. [ 1262.086202][T19442] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1262.232835][ T5895] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1262.453123][ T5895] usb 9-1: device descriptor read/64, error -71 [ 1264.192314][ T5895] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1265.048568][ T29] audit: type=1400 audit(1736079325.714:2295): avc: denied { append } for pid=19458 comm="syz.7.3204" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1265.411582][T19473] openvswitch: netlink: IP tunnel dst address not specified [ 1266.722931][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3208'. [ 1267.599048][T19474] xt_hashlimit: size too large, truncated to 1048576 [ 1267.809335][T19495] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 1267.968455][T19497] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 1268.055096][T19498] netlink: 108 bytes leftover after parsing attributes in process `syz.7.3211'. [ 1268.064338][T19498] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3211'. [ 1269.297057][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3215'. [ 1270.480395][T19515] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 1270.946081][ T12] [ 1270.948438][ T12] ====================================================== [ 1270.955458][ T12] WARNING: possible circular locking dependency detected [ 1270.962452][ T12] 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 Not tainted [ 1270.969533][ T12] ------------------------------------------------------ [ 1270.976523][ T12] kworker/u8:1/12 is trying to acquire lock: [ 1270.982482][ T12] ffff888025bf2330 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_unregister_queue+0x125/0x2e0 [ 1270.992023][ T12] [ 1270.992023][ T12] but task is already holding lock: [ 1270.999358][ T12] ffff888025bf23c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xdb/0x2e0 [ 1271.009156][ T12] [ 1271.009156][ T12] which lock already depends on the new lock. [ 1271.009156][ T12] [ 1271.019533][ T12] [ 1271.019533][ T12] the existing dependency chain (in reverse order) is: [ 1271.028522][ T12] [ 1271.028522][ T12] -> #5 (&q->sysfs_dir_lock){+.+.}-{4:4}: [ 1271.036399][ T12] __mutex_lock+0x19b/0xa60 [ 1271.041406][ T12] blk_mq_sysfs_unregister_hctxs+0x92/0x2d0 [ 1271.047808][ T12] __blk_mq_update_nr_hw_queues+0x93f/0x14e0 [ 1271.054288][ T12] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 1271.060329][ T12] nbd_start_device+0x15b/0xd70 [ 1271.065680][ T12] nbd_ioctl+0x21a/0xfd0 [ 1271.070423][ T12] blkdev_ioctl+0x276/0x6d0 [ 1271.075431][ T12] __x64_sys_ioctl+0x190/0x200 [ 1271.080695][ T12] do_syscall_64+0xcd/0x250 [ 1271.085701][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.092097][ T12] [ 1271.092097][ T12] -> #4 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 1271.100689][ T12] __bio_queue_enter+0x4c6/0x740 [ 1271.106130][ T12] blk_mq_submit_bio+0x7ca/0x24c0 [ 1271.111651][ T12] __submit_bio+0x384/0x540 [ 1271.116653][ T12] submit_bio_noacct_nocheck+0x698/0xd70 [ 1271.122844][ T12] submit_bio_noacct+0x93a/0x1e20 [ 1271.128379][ T12] mpage_readahead+0x41d/0x590 [ 1271.133649][ T12] read_pages+0x1a8/0xdc0 [ 1271.138476][ T12] page_cache_ra_unbounded+0x3dc/0x750 [ 1271.144442][ T12] force_page_cache_ra+0x24b/0x340 [ 1271.150048][ T12] page_cache_sync_ra+0x110/0x9c0 [ 1271.155571][ T12] filemap_get_pages+0xd7b/0x1be0 [ 1271.161102][ T12] filemap_read+0x3ca/0xd70 [ 1271.166147][ T12] blkdev_read_iter+0x187/0x480 [ 1271.171499][ T12] vfs_read+0x87f/0xbe0 [ 1271.176153][ T12] ksys_read+0x12b/0x250 [ 1271.180890][ T12] do_syscall_64+0xcd/0x250 [ 1271.185894][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.192290][ T12] [ 1271.192290][ T12] -> #3 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 1271.200779][ T12] down_read+0x9a/0x330 [ 1271.205453][ T12] page_cache_ra_unbounded+0x173/0x750 [ 1271.211406][ T12] page_cache_ra_order+0x8f2/0xc80 [ 1271.217014][ T12] filemap_fault+0x14a5/0x2820 [ 1271.222277][ T12] __do_fault+0x10a/0x490 [ 1271.227106][ T12] do_pte_missing+0xebd/0x3e00 [ 1271.232365][ T12] __handle_mm_fault+0x103c/0x2a40 [ 1271.237980][ T12] handle_mm_fault+0x3fa/0xaa0 [ 1271.243239][ T12] __get_user_pages+0x8d9/0x3b50 [ 1271.248687][ T12] get_user_pages_unlocked+0x1c2/0x780 [ 1271.254676][ T12] hva_to_pfn+0x8be/0xc20 [ 1271.259506][ T12] kvm_follow_pfn+0x29f/0x3f0 [ 1271.264690][ T12] __kvm_faultin_pfn+0x11c/0x1a0 [ 1271.270144][ T12] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 1271.275847][ T12] kvm_tdp_page_fault+0x182/0x3d0 [ 1271.281417][ T12] kvm_mmu_do_page_fault+0x58d/0x690 [ 1271.287210][ T12] kvm_mmu_page_fault+0x20f/0x1bb0 [ 1271.292829][ T12] handle_ept_violation+0x25a/0x640 [ 1271.298530][ T12] vmx_handle_exit+0x733/0x1f70 [ 1271.303883][ T12] vcpu_run+0x3047/0x4f50 [ 1271.308729][ T12] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 1271.314778][ T12] kvm_vcpu_ioctl+0x6ce/0x1520 [ 1271.320046][ T12] __x64_sys_ioctl+0x190/0x200 [ 1271.325568][ T12] do_syscall_64+0xcd/0x250 [ 1271.330568][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.336958][ T12] [ 1271.336958][ T12] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 1271.344485][ T12] __might_fault+0x11b/0x190 [ 1271.349574][ T12] _copy_from_user+0x29/0xd0 [ 1271.354667][ T12] __blk_trace_setup+0xa8/0x180 [ 1271.360015][ T12] blk_trace_setup+0x47/0x70 [ 1271.365118][ T12] sg_ioctl+0x65e/0x2750 [ 1271.369861][ T12] __x64_sys_ioctl+0x190/0x200 [ 1271.375131][ T12] do_syscall_64+0xcd/0x250 [ 1271.380131][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.386533][ T12] [ 1271.386533][ T12] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1271.394320][ T12] __mutex_lock+0x19b/0xa60 [ 1271.399319][ T12] blk_register_queue+0x13c/0x4f0 [ 1271.404842][ T12] add_disk_fwnode+0x785/0x1300 [ 1271.410188][ T12] brd_alloc.isra.0+0x5a2/0x840 [ 1271.415536][ T12] brd_init+0x12b/0x1d0 [ 1271.420189][ T12] do_one_initcall+0x128/0x700 [ 1271.425454][ T12] kernel_init_freeable+0x5c7/0x900 [ 1271.431151][ T12] kernel_init+0x1c/0x2b0 [ 1271.435974][ T12] ret_from_fork+0x45/0x80 [ 1271.440884][ T12] ret_from_fork_asm+0x1a/0x30 [ 1271.446151][ T12] [ 1271.446151][ T12] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 1271.453689][ T12] __lock_acquire+0x249e/0x3c40 [ 1271.459048][ T12] lock_acquire.part.0+0x11b/0x380 [ 1271.464654][ T12] __mutex_lock+0x19b/0xa60 [ 1271.469669][ T12] blk_unregister_queue+0x125/0x2e0 [ 1271.475368][ T12] del_gendisk+0x2de/0xb20 [ 1271.480286][ T12] nbd_dev_remove+0x3b/0xe0 [ 1271.485284][ T12] process_one_work+0x9c5/0x1ba0 [ 1271.490716][ T12] worker_thread+0x6c8/0xf00 [ 1271.495813][ T12] kthread+0x2c1/0x3a0 [ 1271.500417][ T12] ret_from_fork+0x45/0x80 [ 1271.505373][ T12] ret_from_fork_asm+0x1a/0x30 [ 1271.510649][ T12] [ 1271.510649][ T12] other info that might help us debug this: [ 1271.510649][ T12] [ 1271.520877][ T12] Chain exists of: [ 1271.520877][ T12] &q->sysfs_lock --> &q->q_usage_counter(io)#55 --> &q->sysfs_dir_lock [ 1271.520877][ T12] [ 1271.535020][ T12] Possible unsafe locking scenario: [ 1271.535020][ T12] [ 1271.542553][ T12] CPU0 CPU1 [ 1271.547892][ T12] ---- ---- [ 1271.553229][ T12] lock(&q->sysfs_dir_lock); [ 1271.557967][ T12] lock(&q->q_usage_counter(io)#55); [ 1271.565837][ T12] lock(&q->sysfs_dir_lock); [ 1271.573008][ T12] lock(&q->sysfs_lock); [ 1271.577365][ T12] [ 1271.577365][ T12] *** DEADLOCK *** [ 1271.577365][ T12] [ 1271.585596][ T12] 3 locks held by kworker/u8:1/12: [ 1271.590686][ T12] #0: ffff888025ab6948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1271.601276][ T12] #1: ffffc90000117d80 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1271.612903][ T12] #2: ffff888025bf23c0 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: blk_unregister_queue+0xdb/0x2e0 [ 1271.623143][ T12] [ 1271.623143][ T12] stack backtrace: [ 1271.629004][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0 [ 1271.639648][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1271.649685][ T12] Workqueue: nbd-del nbd_dev_remove_work [ 1271.655305][ T12] Call Trace: [ 1271.658560][ T12] [ 1271.661469][ T12] dump_stack_lvl+0x116/0x1f0 [ 1271.666138][ T12] print_circular_bug+0x419/0x5d0 [ 1271.671140][ T12] check_noncircular+0x31a/0x400 [ 1271.676059][ T12] ? __pfx_check_noncircular+0x10/0x10 [ 1271.681497][ T12] ? stack_depot_save_flags+0x38f/0x9c0 [ 1271.687050][ T12] ? lockdep_lock+0xc6/0x200 [ 1271.691650][ T12] ? __pfx_lockdep_lock+0x10/0x10 [ 1271.696653][ T12] ? __call_rcu_common.constprop.0+0x99/0x7a0 [ 1271.702698][ T12] ? kernfs_put+0x47/0x50 [ 1271.707001][ T12] __lock_acquire+0x249e/0x3c40 [ 1271.711833][ T12] ? __pfx___lock_acquire+0x10/0x10 [ 1271.717017][ T12] lock_acquire.part.0+0x11b/0x380 [ 1271.722475][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.727829][ T12] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1271.733453][ T12] ? rcu_is_watching+0x12/0xc0 [ 1271.738195][ T12] ? trace_lock_acquire+0x14e/0x1f0 [ 1271.743379][ T12] ? lockdep_hardirqs_on+0x7c/0x110 [ 1271.748552][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.753905][ T12] ? lock_acquire+0x2f/0xb0 [ 1271.758396][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.763765][ T12] __mutex_lock+0x19b/0xa60 [ 1271.768268][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.773633][ T12] ? kobj_kset_leave+0x12/0x200 [ 1271.778493][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.783851][ T12] ? kobject_put+0xab/0x5a0 [ 1271.788347][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 1271.793350][ T12] ? kobject_del+0x47/0x60 [ 1271.797746][ T12] ? __pfx_blk_mq_sysfs_unregister+0x10/0x10 [ 1271.803726][ T12] ? blk_unregister_queue+0x125/0x2e0 [ 1271.809078][ T12] blk_unregister_queue+0x125/0x2e0 [ 1271.814273][ T12] del_gendisk+0x2de/0xb20 [ 1271.818678][ T12] ? __pfx_del_gendisk+0x10/0x10 [ 1271.823614][ T12] ? trace_lock_acquire+0x14e/0x1f0 [ 1271.828798][ T12] ? process_one_work+0x921/0x1ba0 [ 1271.833888][ T12] nbd_dev_remove+0x3b/0xe0 [ 1271.838367][ T12] process_one_work+0x9c5/0x1ba0 [ 1271.843283][ T12] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1271.849942][ T12] ? __pfx_process_one_work+0x10/0x10 [ 1271.855313][ T12] ? rcu_is_watching+0x12/0xc0 [ 1271.860056][ T12] ? assign_work+0x1a0/0x250 [ 1271.864631][ T12] worker_thread+0x6c8/0xf00 [ 1271.869217][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1271.874321][ T12] kthread+0x2c1/0x3a0 [ 1271.878382][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 1271.883565][ T12] ? __pfx_kthread+0x10/0x10 [ 1271.888148][ T12] ret_from_fork+0x45/0x80 [ 1271.892551][ T12] ? __pfx_kthread+0x10/0x10 [ 1271.897135][ T12] ret_from_fork_asm+0x1a/0x30 [ 1271.901898][ T12] [ 1271.985635][T19519] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3217'. [ 1272.712835][ T969] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1272.825904][ T6141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.866358][ T6141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.876714][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 1272.883060][ T969] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 1272.891327][ T969] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 1272.904487][ T969] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1272.918275][ T969] usb 3-1: config 250 has no interface number 0 [ 1272.926336][ T969] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1272.940079][ T969] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1272.959110][ T6141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.975524][ T969] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1272.988730][ T969] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1272.999599][ T969] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1273.016864][ T969] usb 3-1: config 250 interface 228 has no altsetting 0 [ 1273.036006][ T6141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.048078][ T969] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1273.057488][ T969] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1273.066502][ T969] usb 3-1: Product: syz [ 1273.070737][ T969] usb 3-1: SerialNumber: syz [ 1273.078929][ T969] hub 3-1:250.228: bad descriptor, ignoring hub [ 1273.085470][ T969] hub 3-1:250.228: probe with driver hub failed with error -5 [ 1273.182329][ T6141] bridge_slave_1: left allmulticast mode [ 1273.188005][ T6141] bridge_slave_1: left promiscuous mode [ 1273.199334][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.216029][ T6141] bridge_slave_0: left allmulticast mode [ 1273.221697][ T6141] bridge_slave_0: left promiscuous mode [ 1273.237727][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.288411][ T969] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 25 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1273.343508][ T2150] kworker/1:2 (2150) used greatest stack depth: 19216 bytes left [ 1273.450640][ T6141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.472567][ T6141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.495193][ T6141] bond0 (unregistering): Released all slaves [ 1273.752970][ T6141] hsr_slave_0: left promiscuous mode [ 1273.758753][ T6141] hsr_slave_1: left promiscuous mode [ 1273.772714][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.780140][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.804226][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.811663][ T6141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.834128][ T6141] veth1_macvtap: left promiscuous mode [ 1273.839863][ T6141] veth0_macvtap: left promiscuous mode [ 1273.846065][ T6141] veth1_vlan: left promiscuous mode [ 1273.851324][ T6141] veth0_vlan: left promiscuous mode [ 1273.989997][ T6141] team0 (unregistering): Port device team_slave_1 removed [ 1274.031945][ T6141] team0 (unregistering): Port device team_slave_0 removed [ 1274.182513][T19522] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 1276.514953][ T46] usb 3-1: USB disconnect, device number 25 [ 1276.524564][ T46] usblp0: removed