last executing test programs: 8m12.904188523s ago: executing program 1 (id=256): syz_open_dev$video(&(0x7f0000002140), 0x1ad, 0x101080) 8m12.463122366s ago: executing program 1 (id=257): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x67, @broadcast, 0x4620, 0x3, 'rr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x67, @broadcast, 0x4620, 0x3, 'rr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x445, 0x401}, 0x10) (async) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x445, 0x401}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) (async) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x800) (async) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) (async) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 8m11.194107398s ago: executing program 1 (id=261): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) r3 = socket$l2tp(0x2, 0x2, 0x73) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x5, 0x9, 0x2]}, &(0x7f0000000300)=0x44) bind$alg(0xffffffffffffffff, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)) timer_create(0x3, 0x0, &(0x7f0000002900)) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) socket(0x1, 0xa, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x143040) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x68, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x3c}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x101, &(0x7f0000000080)=""/219, 0xdb, 0x2, 0x1e}}, &(0x7f0000000280)={0x0, 0x20, 0x38}}}, @release, @acquire_done={0x40106309, 0x3}], 0xdf, 0x0, &(0x7f00000003c0)="48e4e7f60e5f9bee00c13ca7bbc8c7e19ad7ec2f62acfa54149b76d70fe695b9a94c065cac72961996c7f17d4ef32bbcec03b387fdaf051914e0d1b02292f7a86343a8834f638bf4a1d352435a1532ce5a4d5f3334b6b9e00ddd7cccae4e82c4d87720b2aa1a8985eeb57bfab17cf3f50a67495ccb220dcab22643fe7441c5e79059159b6bb60f75c8e71655b8e423a43bad8c39efb3476cfcb4df8d8f4a9ad22ee818bdd2b4f50d4969b6ff1073ff5309cf57fdd6ff76d3d90bab727b45948032bac45f591c6269548597cb4537af9c9924cbecb882eec679316aacfa0aca"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500)={0xff, 0x0, 0x8, 0x85, 0x1, 0x0, 0x79, 0x0, 0x20, 0x0, 0x0, 0x3, 0x0, 0x93}, 0xe) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="08000e000900000008000300", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) capget(0x0, 0x0) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) 8m9.50964475s ago: executing program 1 (id=265): syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x2b, 0x0, 0x2, 0x1, 0xf5ff}]}}}}}, 0x0) 8m9.489338025s ago: executing program 1 (id=266): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0xfffffffffffffe04) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x56}}], 0x68000, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r1, 0x0, 0x25, 0xa, @void}, 0x10) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) syz_open_dev$sndctrl(0x0, 0x2, 0xe8e80) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f6, 0x10100, 0x3, 0x394}, 0x0, 0x0) io_uring_enter(r7, 0x48e9, 0x0, 0x2, 0x0, 0x0) 8m8.430604229s ago: executing program 1 (id=271): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x2) 7m53.082911725s ago: executing program 32 (id=271): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:tape_device_t:s0\x00', 0x23, 0x2) 3m52.95733791s ago: executing program 4 (id=1151): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) syz_clone3(&(0x7f0000000840)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000180)={0x60, 0x0, &(0x7f00001ab000/0x1000)=nil, &(0x7f0000a8c000/0xc000)=nil, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0xe4, 0x8}) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2000c0d0) ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, 0x0) listen(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000f3c7c820da059a0095620102030109023400010000000009049200030f6276000905000000000000000705e37e1b82e60905f2020000060000090501"], 0x0) 3m50.463354434s ago: executing program 4 (id=1161): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "4ca4625e00b5aa95a443d782d859cb2df816a3bc9bd3bf1d11d8b4a7ba9fc6dfb72a8a253215874b349abc806123fd11b1d23eb79cf0385a4cd7b494621f0b26b593bbccdfdf13dbc79be9e9f18b5fb46b9d5a74d7a6dd151c0f37b9e89825f2f99217fb0091568ce14c98b5b462555908260a0e7c7c33fc1ba12df6d0d8fc11847c4b29bd4752fa53802767e26e11475a905215a4d1cfb8a8cc88d605e68145d97c3c2836b7935b66b3583d6633efe51a9cb5426092d85d47a8ca52fe5b7c2083596186c5b4e98f1052759d2233c3fb1e62e4333f0898f89b770b6abe57c92ba6f0e1c64a714686c6f22f7c8f6f79ee56c56d09e95001654229a197d0462e6f", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r1}}, 0x120) 3m50.248403432s ago: executing program 4 (id=1162): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2067012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002240)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bind$llc(r3, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x1, 0x3, 0x81, 0x1, 0x100}) sendmsg$nl_route(r5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000800)=[@code={0xa, 0x4f, {"66b87c008ee0c05b0195b9800000c00f3235000800000f30410f01f80f32c4c1a17463e6b9290b00000f32440f20c03509000000440f22c040dbc90f01c5"}}, @set_irq_handler={0xc8, 0x20, {0x51, 0x2}}, @enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}, @in_dx={0x69, 0x20, {0xfef1}}, @nested_load_code={0x12e, 0x71, {0x1, "b9e90a00000f3266baf80cb80246248aef66bafc0cb000ee66420f38805cd50a2e2ef2450f2dfdb9010200000f3266440f38804d00b9800000c00f3235000400000f30b9800000c00f3235000100000f30f244f4f3410fc733"}}, @set_irq_handler={0xc8, 0x20, {0xd6}}, @uexit={0x0, 0x18, 0xc}, @wrmsr={0x65, 0x20, {0x175, 0xa0}}, @code={0xa, 0x67, {"c4c1fe70feb7650f2282430f3066baf80cb800816f89ef66bafc0cb81991db66efb9800000c00f3235004000000f3066b884000f00d00f01cb3e2e26f3410f1b430366baa000b82c4f2a19ef8fa878c1870a0000002b"}}, @rdmsr={0x66, 0x18, {0xad}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x57a, 0x2, 0xfffffffffffffffe, 0xbb}}], 0x23f}) signalfd(r4, 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 3m49.366728929s ago: executing program 4 (id=1165): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @remote}, {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) 3m48.383699375s ago: executing program 4 (id=1170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x240, 0x40}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, r3, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r3, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}, r3}}, 0x120) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x3}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x4, 0x1, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @enum={0x3}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/138, 0x71, 0x8a, 0x1}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m47.016909468s ago: executing program 4 (id=1174): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x564f, &(0x7f0000000640)={0x0, 0x55d4, 0x400, 0x5, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd=r6, 0x5f5, &(0x7f0000000300)=""/93, 0x5d, 0x2, 0x3, {0x0, r7}}) 3m35.157419097s ago: executing program 5 (id=1206): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x60) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r3, 0x0, 0x0, 0x12002, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x88, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002c0007010000000100dbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) 3m31.937678734s ago: executing program 33 (id=1174): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x564f, &(0x7f0000000640)={0x0, 0x55d4, 0x400, 0x5, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) r6 = socket$nl_crypto(0x10, 0x3, 0x15) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x4004, @fd=r6, 0x5f5, &(0x7f0000000300)=""/93, 0x5d, 0x2, 0x3, {0x0, r7}}) 3m30.651405955s ago: executing program 5 (id=1217): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x0, 0x0}) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r2, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500000015000000feffffff00000000581b33b525cf94038dde774a23f287acdf56d9a39e4a42de309edd03d5fc60bcd74ea2974b18"], 0x48}, 0x1, 0x0, 0x0, 0x6686ae64641a9d97}, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc5696000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) write(r4, 0x0, 0x0) 3m28.426367278s ago: executing program 5 (id=1222): r0 = socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x84) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e23, @empty}}) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r4 = dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000640)={0x1, {{0x2, 0x4e21, @multicast2}}}, 0x90) 3m26.166676737s ago: executing program 5 (id=1224): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002540)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2244, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x7) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000003800010326bd700203dcdf0512"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @private0, @local, 0x5, 0x4, 0x0, 0x500, 0x8, 0x2000110}) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = eventfd2(0x7, 0x0) io_submit(r5, 0x2090, &(0x7f00000001c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x9, r2, &(0x7f00000004c0)="50a4", 0x0, 0xb, 0x0, 0x3, r6}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0x8, r1, &(0x7f0000000780)="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", 0x0, 0x3, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x4, r1, &(0x7f0000000500)="138bfb5be8a0584a87542c2c0d458472c2d4eefc8f105b2281abb38944e0e34a1da5e0fcae10262bf55ee9c1d092009ba5981438924224fd1e78b31ab2bf9d0ce86fb7d24d71c6974710c7d0cc9b165f968197a3897618242e6664debfd678b0a89969738025a26767dd9c86e5eea9970f1f33035552f560dba534696a3fb04d1cf79947e4e3f23e4a24a7b3b883121de82f66273a5ebaa49a8dc13a575a", 0x0, 0x0, 0x0, 0x2, r7}]) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000002600)={{r6}, 0x0, 0x1a, @inherit={0x70, &(0x7f0000000400)={0x1, 0x5, 0x7, 0x8, {0x24, 0x800, 0xb0c4, 0x8727, 0x6}, [0x8dd, 0x0, 0x4, 0x1, 0x1000]}}, @subvolid=0x4}) 3m25.259094539s ago: executing program 5 (id=1230): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x11) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r2, 0x0, 0x0, 0x2, 0x0, 0x60) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r3, 0x0, 0x0, 0x12002, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x0, 0x88, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002c0007010000000100dbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) 3m23.898921765s ago: executing program 5 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5a, 0x80000) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delqdisc={0xb0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {0xfff2, 0xd}, {0x1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0xb, 0x5}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x21, 0x19}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x81}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3, 0x7ff, 0x2, 0x401, 0x7, 0x9}}, {0x16, 0x2, [0x7, 0x9, 0xff, 0x7ae, 0x96, 0x3ff, 0x400, 0x25, 0xe11]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x40408c0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m22.905168253s ago: executing program 34 (id=1233): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0xe5a, 0x80000) r1 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@delqdisc={0xb0, 0x25, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {0xfff2, 0xd}, {0x1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_RATE={0x6, 0x5, {0xb, 0x5}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x21, 0x19}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x81}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x3, 0x7ff, 0x2, 0x401, 0x7, 0x9}}, {0x16, 0x2, [0x7, 0x9, 0xff, 0x7ae, 0x96, 0x3ff, 0x400, 0x25, 0xe11]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xb0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x34, 0x2c, 0x605, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x4, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x20004084) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SG_IO(r4, 0x2285, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x80000000) sendmsg$key(r1, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x40408c0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.469048482s ago: executing program 0 (id=1836): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x2, 0x6}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=""/151, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000002c0)) (async) timer_create(0x0, 0x0, &(0x7f00000002c0)) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, &(0x7f0000000200)=0x6e, 0xc0000) bind$unix(r2, 0x0, 0x0) mknod$loop(0x0, 0x2480, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') getsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0xfffffffffffffffd, &(0x7f0000000340)) (async) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, 0xfffffffffffffffd, &(0x7f0000000340)) write(0xffffffffffffffff, &(0x7f00000000c0)='&\x00\x00', 0x3) socket$key(0xf, 0x3, 0x2) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x4) (async) sendmsg$key(r6, 0x0, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000140)='vfat\x00', 0x209040, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000190a010100bb000000000000020000000988028c3abe39c6ae80410784935820692b2b5ef2623d0df4abc3b1ddbff3165b88304fc5e7d4b388f6a34dfbbdc896c56c10040b4bb3485f312445f1d639f81edff32b4e43895ca32a845e60345519ed505874371ca8d5a67b0cde465ff60ce91a94e790eb38b439d94759785f24080b5193c49976416d390aaa8bffafc81391944ceb9537344a274571179e7ba1f6f5f0a4e2f11f86e90354a2457b7d792a173a10e66c9271a584f2b2aafbcc5c9f692cf5810105977b0000", @ANYRESHEX=r6], 0x2c}}, 0x8004) 31.063276809s ago: executing program 0 (id=1837): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r1, 0x103100) dup3(r6, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) 29.999552854s ago: executing program 6 (id=1842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 29.932420809s ago: executing program 0 (id=1844): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000040)='timerslack_ns\x00') 29.869333011s ago: executing program 6 (id=1846): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c80806666f9c4a78fb407d7ba0fccd16a2752646eca58296eea9eca8d91ac1496969e980eddd04bdc4639e57c7ec935291033458e5fd91cebc8"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x2, 0x1, 0x1, 0xffff, 0x7fffffff, 0xc, 0x6, 0x8, 0x4, 0x8, 0xfffffffffffffffc, 0x0, 0x4, 0x10001, 0xb19]}, &(0x7f0000000100)=0x100) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080006000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) shutdown(0xffffffffffffffff, 0x0) 29.74920531s ago: executing program 0 (id=1848): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={r3, 0x2}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x3000)=nil, 0x5000) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x80000003) r5 = dup2(r4, r4) read$FUSE(r5, &(0x7f00000063c0)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) add_key$fscrypt_provisioning(&(0x7f0000000340), 0x0, &(0x7f0000000440)={0x3, 0x0, @a}, 0x48, 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002001, 0x0) 27.414559159s ago: executing program 2 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\\\\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 27.299485244s ago: executing program 2 (id=1860): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0x0, 0x10e000}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 26.975497134s ago: executing program 0 (id=1864): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x42002, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffb000/0x3000)=nil) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 26.285075029s ago: executing program 0 (id=1865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) socket$packet(0x11, 0x3, 0x300) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000010c0)={&(0x7f0000001080)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), 0xffffffffffffffff) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast1, 0x49}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000180000000000000029000000360000003b000000000000006b3f3ea5e1e770ba667cd081ed6685349ac9939f38b0d1d07a07e16fc21cb52a06587d43d54429adb4ccfa0c13acb5e6e18b3f7e0de7d89bdc4aa782786537ae5f487eeb33198e31cb"], 0x30}, 0x4004000) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001600)={0x200, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4be8e7dd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x740}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ea16cc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fbfffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb32}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x2004c051}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4072, 0x100000000, 0xfe8}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00e4880000000213"]}, 0x0) syz_usb_control_io(r9, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000304000004034c04"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) 26.260430792s ago: executing program 6 (id=1866): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x7fff, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) close(r4) 26.110298519s ago: executing program 7 (id=1867): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_open_dev$evdev(0x0, 0x3, 0x822b01) 26.104617837s ago: executing program 7 (id=1868): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, 0x0}, 0x20) userfaultfd(0x801) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x11) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x20000000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x27}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) pread64(r2, &(0x7f00000001c0)=""/200, 0xc8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x4080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, r7, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x20008081) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f0000000400)=ANY=[@ANYBLOB="664067cf643d", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES16=r5, @ANYBLOB="44b3"]) syz_fuse_handle_req(r9, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c14f5ed1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c699acbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000000500)={&(0x7f0000000000)={0x50, 0x0, 0x203, {0x7, 0x29, 0xf4ad, 0x0, 0xdcf, 0x8, 0xb, 0x1, 0x0, 0x0, 0x8, 0x9e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xa, {0xb, 0x0, 0x0, {0x5, 0x80800000009, 0x5, 0x90000005, 0x40000000000003, 0x6, 0x0, 0x35741061, 0x0, 0xa593e9c1ca988eda, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) 25.457547173s ago: executing program 7 (id=1869): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r6 = syz_open_pts(r1, 0x103100) dup3(r6, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) 25.454184904s ago: executing program 2 (id=1870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r0}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x240, 0x40}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @mcast2, 0xb}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e28, 0x711, @loopback, 0x206}, {0xa, 0x4e21, 0x0, @empty, 0x8}, 0xffffffffffffffff, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0xfffffffd, 0xffff, "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", 0x2, 0x4, 0x5, 0x3, 0xfe, 0x0, 0x0, 0x1}}}, 0x120) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x3}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x9, [{0x4, 0x1, 0x3}]}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x1ff}}, @enum={0x3}]}, {0x0, [0x2e, 0x61, 0x5f]}}, &(0x7f00000000c0)=""/138, 0x71, 0x8a, 0x1}, 0x28) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 25.222142614s ago: executing program 3 (id=1872): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x9) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=@delqdisc={0x114, 0x25, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {0xfff1, 0xfff3}, {0x1, 0x2}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7149}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x31}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x11}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0xfdbe}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x801}, 0x26004014) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)=@phonet={0x23, 0x9, 0x0, 0xc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 25.22172523s ago: executing program 6 (id=1873): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) prlimit64(r1, 0xa, &(0x7f0000000140)={0x5, 0x8}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000480)=0x2) sched_setaffinity(0x0, 0x4d, &(0x7f0000000280)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x44800) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000300), 0x4) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d000f80b6aa883c187282c63edaa1b302338fad461472d9973f4b9006980268bcd4d2c4f146ba798bb88410e2247554e77adbc729a361e05fb3477db89e064fa08f0bc31e9d7cb387e35f346f"], 0x64}}, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r11, 0x1, 0x0, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x0) r12 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r12, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x21}, {0xe, 0x0, 0x4, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@private, 0x0, 0x33}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x0, 0x7e5e}}, 0xe8) sendmmsg(r12, &(0x7f0000000480), 0x2e9, 0x0) 24.474331501s ago: executing program 7 (id=1874): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) 24.299921603s ago: executing program 3 (id=1875): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}}, 0x20}, 0x1, 0x0, 0x0, 0x9005}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020) 23.910983886s ago: executing program 3 (id=1876): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x0, 0x3d, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x3d, 0xa3, 0x77, 0x20, 0x572, 0xcafe, 0x5501, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x96, 0xdb, 0xa8}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xa, 0xde, 0xef, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7}]}}]}}]}}]}}, 0x0) sysinfo(&(0x7f0000000000)=""/196) 23.792040274s ago: executing program 2 (id=1877): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000029ada87657466cf3635197369ebe50ca759939d1bbeb6cdcbe03d71f92ec30d6077afaacd079730f63900d5b593613c1eb17e3f06508bd51c103dceac530fdb2914be5aa2a34fc17aff2aca7ea55ff18811d10353292c886e34", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="070000000000010000e0edfbe70000000080000000692e5feb41216a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000201000085000000820000008500000005000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r3, 0x29, 0x3, 0x2, 0x7f, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x40, 0x6, 0x41}}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_vm_writev(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000100)=0x2, 0x4) 23.608669785s ago: executing program 2 (id=1878): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x25, &(0x7f0000000340)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="670e2b12d882f9da3bb0e685619e52672ed924b81378e4aab467490a1ffdd548a0f06b126469e9c26153ebe61bf66cb10078eaef7ffcaecbb2ecf9aaf0f15aff9328534a1fbc5fecde908b7322b7953f95bc3cbbe8b7f5867b68a7d2d8398778ff81f167800775"], 0x15) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x1b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x1}, &(0x7f0000000080)=0x8) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000500)={0x9, 0x207, 0x5, 0x691}, 0x10) 23.575880357s ago: executing program 6 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)=@random={'os2.', '\')\\{^:\x00'}, &(0x7f0000000100)='nfs_export=on', 0xd, 0x5) statx(0xffffffffffffffff, &(0x7f0000000300)='./file1/file0\x00', 0x0, 0x10, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@redirect_dir_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@smackfshat}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@uid_eq={'uid', 0x3d, r3}}, {@subj_type={'subj_type', 0x3d, 'nfs_export=on'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@audit}, {@dont_measure}, {@flag='ro'}, {@seclabel}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 23.45928752s ago: executing program 7 (id=1880): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc0006}]}) times(0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000340)=0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 23.157329288s ago: executing program 3 (id=1881): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=;unix,\x00']) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000000c0), 0x8) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newtaction={0xbc, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x6, 0x0, 0xf4a}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xbc}}, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) 22.85767708s ago: executing program 2 (id=1882): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x2, 0x7, 0xfffffff8, 0xd, 0x10, 0x2, 0x8}, &(0x7f0000000100)=0x9c) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002", 0x29}, {&(0x7f0000000100)="c40ad38ae96bf7e8ef19243a4a63c9ede45421a4cc1ea4504d47866824674eaddcad792a2f1f58188c59fff4b1fb0b49630d4e7f229064316790a791", 0x3c}], 0x2}, 0x4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x8, 0x400040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 22.171809588s ago: executing program 3 (id=1883): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x1, {{0xa, 0x4e23, 0x0, @mcast1, 0xfffffffe}}, {{0xa, 0x0, 0x94, @empty, 0x8001}}}, 0x108) 22.149217224s ago: executing program 6 (id=1884): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000068000000060a010400000000000000000500400008000b4000000000400004803c0001800b00010074756e6e656c00002c0002800800034000000000080001400000000108000340000000020800014000000000080002400000000c0900010073797a30"], 0x5d54}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 22.062951963s ago: executing program 7 (id=1885): ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xa, 0x4, &(0x7f0000006680)) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000000300)="cb17", 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2fdfffffd}, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c881}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2000c010) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x80003, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 22.060982017s ago: executing program 3 (id=1886): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) clock_gettime(0x6, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x104) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r5, &(0x7f0000000200), 0x0, 0x5}]) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r7 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) fcntl$notify(r7, 0x402, 0x2) shutdown(r0, 0x1) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) recvfrom$inet(r0, 0x0, 0x0, 0x40000001, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x0, 0x1}, {0x4a, 0x2}, @period={0x5d, 0xa370, 0x0, 0x83, 0x2, {0x1, 0x3, 0x4, 0x2}, 0x0, 0x0}}) ioctl$SIOCRSGCAUSE(r7, 0x89e0, &(0x7f0000000140)) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) 0s ago: executing program 35 (id=1865): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040010) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x202) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) socket$packet(0x11, 0x3, 0x300) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000010c0)={&(0x7f0000001080)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001180), 0xffffffffffffffff) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r8, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e22, 0x2, @mcast1, 0x49}, 0x1c, &(0x7f0000000100), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="180000000000000029000000360000000000000000000000180000000000000029000000360000003b000000000000006b3f3ea5e1e770ba667cd081ed6685349ac9939f38b0d1d07a07e16fc21cb52a06587d43d54429adb4ccfa0c13acb5e6e18b3f7e0de7d89bdc4aa782786537ae5f487eeb33198e31cb"], 0x30}, 0x4004000) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001600)={0x200, r7, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4be8e7dd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x740}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ea16cc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fbfffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xb32}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x2004c051}, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000040)=""/4072, 0x100000000, 0xfe8}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r9 = syz_usb_connect$uac1(0x0, 0x95, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, '\x00\x00'}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x6, 0x4, 0xe80, 0x5, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="00e4880000000213"]}, 0x0) syz_usb_control_io(r9, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000304000004034c04"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, 0x0) kernel console output (not intermixed with test programs): nf: prefix option has invalid lifetime [ 465.294617][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1121'. [ 465.350370][T10386] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1121'. [ 465.393017][T10386] geneve2: entered promiscuous mode [ 465.433636][T10386] geneve2: entered allmulticast mode [ 466.087679][T10392] FAULT_INJECTION: forcing a failure. [ 466.087679][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.100783][T10392] CPU: 1 UID: 0 PID: 10392 Comm: syz.2.1122 Not tainted syzkaller #0 PREEMPT(full) [ 466.100806][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.100817][T10392] Call Trace: [ 466.100823][T10392] [ 466.100829][T10392] dump_stack_lvl+0x16c/0x1f0 [ 466.100851][T10392] should_fail_ex+0x512/0x640 [ 466.100876][T10392] _copy_from_user+0x2e/0xd0 [ 466.100901][T10392] copy_msghdr_from_user+0x98/0x160 [ 466.100926][T10392] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 466.100961][T10392] ___sys_sendmsg+0xfe/0x1d0 [ 466.100986][T10392] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.101008][T10392] ? __lock_acquire+0x622/0x1c90 [ 466.101056][T10392] __sys_sendmsg+0x16d/0x220 [ 466.101081][T10392] ? __pfx___sys_sendmsg+0x10/0x10 [ 466.101121][T10392] do_syscall_64+0xcd/0xfa0 [ 466.101140][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.101157][T10392] RIP: 0033:0x7fa70718f749 [ 466.101171][T10392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.101188][T10392] RSP: 002b:00007fa7053d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.101206][T10392] RAX: ffffffffffffffda RBX: 00007fa7073e6180 RCX: 00007fa70718f749 [ 466.101217][T10392] RDX: 0000000000008800 RSI: 0000200000000000 RDI: 000000000000000c [ 466.101227][T10392] RBP: 00007fa7053d5090 R08: 0000000000000000 R09: 0000000000000000 [ 466.101237][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.101247][T10392] R13: 00007fa7073e6218 R14: 00007fa7073e6180 R15: 00007ffd11263458 [ 466.101270][T10392] [ 466.263198][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.646659][T10395] IPVS: set_ctl: invalid protocol: 27 224.0.0.1:20002 [ 467.294940][T10406] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.768201][T10406] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.095865][ T5881] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 468.201691][T10418] overlayfs: missing 'lowerdir' [ 468.474637][T10406] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.588179][ T5881] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 468.603395][ T5881] usb 1-1: config 7 has no interface number 0 [ 468.615679][ T5881] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 468.615765][T10406] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.624932][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.663180][ T30] audit: type=1800 audit(1764248672.218:771): pid=10426 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1136" name="nullb0" dev="tmpfs" ino=1596 res=0 errno=0 [ 468.663813][ T5881] usb 1-1: Product: syz [ 468.695177][ T5881] usb 1-1: Manufacturer: syz [ 468.700136][ T5881] usb 1-1: SerialNumber: syz [ 468.741213][ T180] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.770863][ T180] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.100975][T10410] macsec1: entered promiscuous mode [ 469.110867][T10410] macsec1: entered allmulticast mode [ 469.166474][ T79] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.178156][T10410] can0: slcan on ttyS3. [ 469.183916][T10410] comedi comedi4: bad chanlist[0]=0x00000009 chan=9 range length=2 [ 469.236502][ T6355] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.393318][ T9] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 469.555540][ T9] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 469.565601][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.593378][ T9] usb 5-1: config 0 has no interface number 0 [ 469.614022][ T9] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 469.645509][ T9] usb 5-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 469.808097][ T5881] as10x_usb: device has been detected [ 469.974821][ T5881] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 470.017680][ T9] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 470.033618][ T5881] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 470.046628][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.093878][ T9] usb 5-1: Product: syz [ 470.098172][ T5881] as10x_usb: error during firmware upload part1 [ 470.113506][ T9] usb 5-1: Manufacturer: syz [ 470.118205][ T9] usb 5-1: SerialNumber: syz [ 470.124413][ T5881] Registered device Elgato EyeTV DTT Deluxe [ 470.173968][ T9] usb 5-1: config 0 descriptor?? [ 470.290672][T10409] can0 (unregistered): slcan off ttyS3. [ 470.313453][ T24] usb 1-1: USB disconnect, device number 41 [ 470.350994][ T24] Unregistered device Elgato EyeTV DTT Deluxe [ 470.352867][ T24] as10x_usb: device has been disconnected [ 470.375692][T10437] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 470.384757][T10454] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1139'. [ 470.439545][ T9] usb-storage 5-1:0.20: USB Mass Storage device detected [ 470.459425][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 470.497685][ T9] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 470.635498][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.644801][T10466] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.528528][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 471.816739][ T24] usb 5-1: USB disconnect, device number 35 [ 472.217564][T10499] siw: device registration error -23 [ 472.911298][ T30] audit: type=1400 audit(1764248676.468:772): avc: denied { write } for pid=10506 comm="syz.0.1149" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 473.600431][T10517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=10517 comm=syz.3.1152 [ 473.663001][T10519] input: syz1 as /devices/virtual/input/input45 [ 473.724874][T10517] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1152'. [ 473.868065][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 474.053357][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 474.060201][ T10] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 474.068940][ T10] usb 5-1: config 0 has no interface number 0 [ 474.088588][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 474.096248][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 474.109425][ T10] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 474.139074][ T10] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 474.163368][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 474.174802][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 474.185055][ T10] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 474.197008][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 474.206946][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 474.217035][ T10] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 474.229502][ T10] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 474.239650][ T10] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 474.255531][ T10] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 474.264717][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.272707][ T10] usb 5-1: Product: syz [ 474.277008][ T10] usb 5-1: Manufacturer: syz [ 474.281596][ T10] usb 5-1: SerialNumber: syz [ 474.295327][ T10] usb 5-1: config 0 descriptor?? [ 474.300895][T10513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.309824][T10513] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 474.335590][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 474.373707][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 474.381505][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 474.399787][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 474.451368][ T10] scsi host1: microtekX6 [ 474.594693][ T10] usb 5-1: USB disconnect, device number 36 [ 474.618499][T10536] overlayfs: missing 'lowerdir' [ 474.633384][ T56] microtek usb (rev 0.4.3): error -19 submitting URB [ 474.742827][T10522] ceph: No mds server is up or the cluster is laggy [ 474.942193][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 474.977901][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 475.702557][T10545] netlink: 'syz.3.1158': attribute type 3 has an invalid length. [ 476.391466][T10562] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1163'. [ 476.903415][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1165'. [ 477.176595][T10572] program syz.2.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.584929][ T977] libceph: connect (1)[c::]:6789 error -101 [ 477.590940][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 477.763372][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 477.863938][ T977] libceph: connect (1)[c::]:6789 error -101 [ 477.884663][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 477.953656][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 477.993842][ T24] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 478.043177][ T24] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.057436][T10601] lo speed is unknown, defaulting to 1000 [ 478.630792][ T24] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 478.644844][ T977] libceph: connect (1)[c::]:6789 error -101 [ 478.650962][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 478.657139][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.672799][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.710188][T10584] ceph: No mds server is up or the cluster is laggy [ 479.785279][T10617] netlink: 'syz.2.1167': attribute type 10 has an invalid length. [ 480.225211][T10624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 481.303322][ T5860] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 481.470995][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.482170][ T5860] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 481.510945][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.542784][ T5860] usb 6-1: config 0 descriptor?? [ 481.765067][ T5860] usbhid 6-1:0.0: can't add hid device: -71 [ 481.771180][ T5860] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 481.789682][ T5860] usb 6-1: USB disconnect, device number 24 [ 482.031825][ T24] usb 3-1: USB disconnect, device number 32 [ 482.283347][ T5860] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 482.325783][ T30] audit: type=1400 audit(1764248685.888:773): avc: denied { mount } for pid=10646 comm="syz.2.1182" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 482.578110][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 482.603039][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 482.625112][ T30] audit: type=1400 audit(1764248685.908:774): avc: denied { mounton } for pid=10646 comm="syz.2.1182" path="/214/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 482.653217][ T5860] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 482.680128][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.693156][ T5860] usb 6-1: config 0 descriptor?? [ 482.900921][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.910034][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.942154][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.953692][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.093910][ T5860] waterforce 0003:1044:7A4D.000F: hidraw0: USB HID v0.05 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 483.157164][ T30] audit: type=1400 audit(1764248686.718:775): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 483.189262][ T5860] waterforce 0003:1044:7A4D.000F: fw version request failed with -38 [ 483.254424][T10655] netlink: 'syz.3.1185': attribute type 10 has an invalid length. [ 483.328808][ T24] libceph: connect (1)[c::]:6789 error -101 [ 483.345970][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 483.526247][ T24] usb 6-1: USB disconnect, device number 25 [ 483.628489][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 483.643332][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 484.073757][T10657] ceph: No mds server is up or the cluster is laggy [ 484.391727][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1189'. [ 485.050989][ T5860] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 485.343624][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 485.384923][ T5860] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 485.393704][ T5860] usb 3-1: config 0 has no interface number 0 [ 485.399770][ T5860] usb 3-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=ca.f7 [ 485.421985][T10680] netlink: 'syz.5.1190': attribute type 11 has an invalid length. [ 485.477968][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.542238][ T5860] usb 3-1: config 0 descriptor?? [ 485.764793][ T5860] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 485.803850][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 485.849067][ T5860] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 485.885566][ T5860] usb 3-1: media controller created [ 485.957668][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 485.968940][T10677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=10677 comm=syz.2.1188 [ 485.997016][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.062049][T10692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1188'. [ 486.210819][ T5860] DVB: Unable to find symbol dib8000_attach() [ 486.217548][ T5860] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 486.240727][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 486.405304][ T5860] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 486.509873][T10700] xt_TPROXY: Can be used only with -p tcp or -p udp [ 486.647149][ T5860] usb 3-1: media controller created [ 486.801198][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 486.960765][ T5860] DVB: Unable to find symbol dib8000_attach() [ 486.970031][ T5860] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 487.103322][ T5860] rc_core: IR keymap rc-dib0700-rc5 not found [ 487.142826][ T5860] Registered IR keymap rc-empty [ 487.153712][ T5860] dvb-usb: could not initialize remote control. [ 487.163498][ T5860] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 488.401019][T10710] siw: device registration error -23 [ 488.565233][ T5860] usb 3-1: USB disconnect, device number 33 [ 488.718214][T10714] siw: device registration error -23 [ 489.182772][ T5860] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 489.442635][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 489.794184][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 490.065307][T10720] ceph: No mds server is up or the cluster is laggy [ 490.809890][T10739] netlink: 'syz.3.1204': attribute type 4 has an invalid length. [ 490.817692][T10739] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1204'. [ 490.837694][T10739] rdma_rxe: rxe_newlink: failed to add lo [ 491.796942][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1206'. [ 491.937311][ T30] audit: type=1400 audit(1764248695.478:776): avc: denied { setopt } for pid=10747 comm="syz.2.1208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 492.013354][ T30] audit: type=1400 audit(1764248695.478:777): avc: denied { ioctl } for pid=10747 comm="syz.2.1208" path="socket:[28014]" dev="sockfs" ino=28014 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 492.271009][T10757] netlink: 'syz.3.1210': attribute type 4 has an invalid length. [ 492.278831][T10757] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1210'. [ 492.312531][T10757] rdma_rxe: rxe_newlink: failed to add lo [ 493.768202][T10763] lo speed is unknown, defaulting to 1000 [ 493.825218][ T30] audit: type=1400 audit(1764248697.208:778): avc: denied { read } for pid=10749 comm="syz.0.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 495.328213][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.374436][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.382346][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.390245][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.895127][ T30] audit: type=1326 audit(1764248699.008:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10777 comm="syz.5.1217" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f115f38f749 code=0x0 [ 495.962733][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 495.996060][ T30] audit: type=1400 audit(1764248699.078:780): avc: denied { connect } for pid=10777 comm="syz.5.1217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 496.158141][T10776] lo speed is unknown, defaulting to 1000 [ 497.655605][T10797] netlink: 'syz.0.1221': attribute type 4 has an invalid length. [ 497.663429][T10797] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1221'. [ 497.701504][T10797] rdma_rxe: rxe_newlink: failed to add lo [ 498.054416][ T5828] Bluetooth: hci5: command tx timeout [ 499.719765][T10776] chnl_net:caif_netlink_parms(): no params data found [ 499.901371][T10812] sp0: Synchronizing with TNC [ 500.143354][ T5828] Bluetooth: hci5: command tx timeout [ 500.545439][T10776] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.563350][T10776] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.576497][T10776] bridge_slave_0: entered allmulticast mode [ 500.593857][T10776] bridge_slave_0: entered promiscuous mode [ 500.611916][T10776] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.619478][T10776] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.629406][T10776] bridge_slave_1: entered allmulticast mode [ 500.650840][T10776] bridge_slave_1: entered promiscuous mode [ 500.913974][T10834] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 501.297455][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.303825][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.677332][T10776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.725660][T10776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.380766][ T5828] Bluetooth: hci5: command tx timeout [ 502.469506][T10776] team0: Port device team_slave_0 added [ 502.559971][T10776] team0: Port device team_slave_1 added [ 502.747415][ T6355] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.036068][T10776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.079947][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.239450][T10776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.272394][ T6355] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.430540][T10852] __vm_enough_memory: pid: 10852, comm: syz.3.1236, bytes: 4503599627366400 not enough memory for the allocation [ 503.755891][T10776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.762870][T10776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.806503][T10776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.817389][T10854] netlink: 'syz.2.1237': attribute type 11 has an invalid length. [ 503.844621][ T6355] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.997157][T10776] hsr_slave_0: entered promiscuous mode [ 504.005098][T10776] hsr_slave_1: entered promiscuous mode [ 504.011444][T10776] debugfs: 'hsr0' already exists in 'hsr' [ 504.236629][T10776] Cannot create hsr debugfs directory [ 504.272144][T10858] netlink: 'syz.3.1238': attribute type 10 has an invalid length. [ 504.291087][ T5135] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 504.300426][ T5135] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 504.313307][ T5135] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 504.334544][ T5135] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 504.344319][ T5135] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.347685][ T6355] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.453344][ T5828] Bluetooth: hci5: command tx timeout [ 504.759614][T10856] lo speed is unknown, defaulting to 1000 [ 505.186954][ T6355] bridge_slave_1: left allmulticast mode [ 505.192622][ T6355] bridge_slave_1: left promiscuous mode [ 505.251220][T10875] input: syz1 as /devices/virtual/input/input47 [ 505.346294][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.554505][ T6355] bridge_slave_0: left allmulticast mode [ 505.560174][ T6355] bridge_slave_0: left promiscuous mode [ 505.607127][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 505.616655][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.374838][ T5828] Bluetooth: hci1: command tx timeout [ 506.554606][T10886] overlayfs: missing 'lowerdir' [ 507.072300][T10893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=10893 comm=syz.3.1247 [ 507.110040][T10893] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1247'. [ 507.245703][ T6355] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.257291][ T6355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.266005][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 507.280666][ T6355] bond0 (unregistering): (slave team0): Releasing backup interface [ 507.290125][ T6355] bond0 (unregistering): Released all slaves [ 507.423385][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 507.457451][T10776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 507.464325][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 507.482764][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.531565][ T10] usb 1-1: Product: syz [ 507.536409][ T10] usb 1-1: Manufacturer: syz [ 507.541072][ T10] usb 1-1: SerialNumber: syz [ 507.577996][T10776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 507.585706][ T10] usb 1-1: config 0 descriptor?? [ 507.590802][ T30] audit: type=1400 audit(1764248711.128:781): avc: denied { mount } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 507.625972][ T30] audit: type=1400 audit(1764248711.178:782): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.627066][ T10] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 507.648195][ T30] audit: type=1400 audit(1764248711.178:783): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.682261][T10776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 507.695338][ T30] audit: type=1400 audit(1764248711.178:784): avc: denied { read open } for pid=10898 comm="syz.2.1248" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.718774][ T30] audit: type=1400 audit(1764248711.178:785): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.755572][ T30] audit: type=1400 audit(1764248711.178:786): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.780923][T10776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 507.840196][ T30] audit: type=1400 audit(1764248711.178:787): avc: denied { add_name } for pid=10898 comm="syz.2.1248" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.880104][ T30] audit: type=1400 audit(1764248711.178:788): avc: denied { create } for pid=10898 comm="syz.2.1248" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 507.909330][ T30] audit: type=1400 audit(1764248711.188:789): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 507.945087][ T30] audit: type=1400 audit(1764248711.188:790): avc: denied { search } for pid=10898 comm="syz.2.1248" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 508.024685][T10891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.074735][T10891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.095861][T10916] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10916 comm=syz.3.1250 [ 508.463802][ T5828] Bluetooth: hci1: command tx timeout [ 508.581128][T10924] lo speed is unknown, defaulting to 1000 [ 508.780954][ T10] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 508.885184][T10776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.902631][T10776] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.947151][T10932] siw: device registration error -23 [ 508.952265][T10776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 508.983374][T10776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 509.010221][T10856] chnl_net:caif_netlink_parms(): no params data found [ 509.042283][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.049428][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.058568][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.062111][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1253'. [ 509.065699][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.240496][ T6355] mac80211_hwsim hwsim12 wlan0 (unregistering): left allmulticast mode [ 509.356229][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.367626][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.388660][T10856] bridge_slave_0: entered allmulticast mode [ 509.396402][T10856] bridge_slave_0: entered promiscuous mode [ 509.405235][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.412451][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.421705][T10856] bridge_slave_1: entered allmulticast mode [ 509.431342][T10856] bridge_slave_1: entered promiscuous mode [ 510.047697][ T10] usb 1-1: USB disconnect, device number 42 [ 510.474650][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 510.517998][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 510.533682][ T5828] Bluetooth: hci1: command tx timeout [ 510.595520][T10958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.690467][T10961] xt_hashlimit: max too large, truncated to 1048576 [ 510.698968][T10961] xt_limit: Overflow, try lower: 0/0 [ 510.730397][T10856] team0: Port device team_slave_0 added [ 510.744906][ T6355] hsr_slave_0: left promiscuous mode [ 510.813186][ T6355] hsr_slave_1: left promiscuous mode [ 510.827976][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.840716][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.852876][ T6355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.861838][ T6355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.896631][ T6355] veth1_macvtap: left promiscuous mode [ 510.904527][ T6355] veth0_macvtap: left promiscuous mode [ 510.910267][ T6355] veth1_vlan: left promiscuous mode [ 510.915932][ T6355] veth0_vlan: left promiscuous mode [ 511.354139][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 511.826420][T10979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 511.913558][ T6355] team0 (unregistering): Port device team_slave_1 removed [ 512.042792][ T6355] team0 (unregistering): Port device team_slave_0 removed [ 512.393547][T10981] overlayfs: failed to clone upperpath [ 512.613740][ T5828] Bluetooth: hci1: command tx timeout [ 512.747456][T10987] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.062279][T10995] overlayfs: failed to clone lowerpath [ 513.076031][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 513.076059][ T30] audit: type=1400 audit(1764248716.618:793): avc: denied { mount } for pid=10990 comm="syz.3.1265" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 514.679094][T10856] team0: Port device team_slave_1 added [ 514.724581][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.731606][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.758536][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.777782][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.792329][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.800425][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.826818][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.000072][T10856] hsr_slave_0: entered promiscuous mode [ 515.017973][T10856] hsr_slave_1: entered promiscuous mode [ 515.028421][T10856] debugfs: 'hsr0' already exists in 'hsr' [ 515.034498][T10856] Cannot create hsr debugfs directory [ 515.153084][T11017] lo speed is unknown, defaulting to 1000 [ 516.593110][T11036] lo speed is unknown, defaulting to 1000 [ 517.184668][T10856] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 517.301490][T10856] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 517.329622][T10856] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 517.340313][T10856] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 517.375570][T10776] veth0_vlan: entered promiscuous mode [ 517.424712][T10776] veth1_vlan: entered promiscuous mode [ 517.588444][T10776] veth0_macvtap: entered promiscuous mode [ 517.606139][T10776] veth1_macvtap: entered promiscuous mode [ 517.639778][T10776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.667299][T10776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.707607][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.723686][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.779659][ T1144] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.962589][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.988075][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.028607][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.419644][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.426861][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.492920][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.500105][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.527326][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.567174][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.760894][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.812615][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.033418][ T30] audit: type=1400 audit(1764248722.578:794): avc: denied { mounton } for pid=10776 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 519.543329][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 519.764539][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 519.809986][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 519.875565][T10856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.918249][ T10] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.088063][ T10] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 520.105284][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.127743][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.243395][ T5881] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 520.404827][ T5881] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 520.413122][ T5881] usb 3-1: config 7 has no interface number 0 [ 520.425378][ T5881] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 520.434853][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.470742][ T5881] usb 3-1: Product: syz [ 520.479994][ T5881] usb 3-1: Manufacturer: syz [ 520.484922][ T5881] usb 3-1: SerialNumber: syz [ 520.500673][T11119] overlayfs: missing 'lowerdir' [ 520.562816][T10856] veth0_vlan: entered promiscuous mode [ 520.577753][T10856] veth1_vlan: entered promiscuous mode [ 520.647230][T10856] veth0_macvtap: entered promiscuous mode [ 520.667315][T10856] veth1_macvtap: entered promiscuous mode [ 521.255250][T11123] netlink: 'syz.0.1280': attribute type 10 has an invalid length. [ 521.524700][T10856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.565169][T10856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.615324][ T6355] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.626500][ T6355] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.636544][ T6355] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.650023][ T6355] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.741224][ T3543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.749269][ T3543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.801452][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.809882][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.959156][T11128] lo speed is unknown, defaulting to 1000 [ 522.624147][ T5860] usb 1-1: USB disconnect, device number 43 [ 523.145992][ T5881] as10x_usb: device has been detected [ 523.162242][ T5881] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 523.276617][ T5881] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 523.317081][ T30] audit: type=1400 audit(1764248726.878:795): avc: denied { firmware_load } for pid=5881 comm="kworker/0:6" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 523.318083][ T5881] as10x_usb: error during firmware upload part1 [ 523.377183][ T5881] Registered device Elgato EyeTV DTT Deluxe [ 523.386005][ T5881] usb 3-1: USB disconnect, device number 34 [ 523.436407][T11149] Illegal XDP return value 4294967274 on prog (id 335) dev N/A, expect packet loss! [ 523.488185][ T5881] Unregistered device Elgato EyeTV DTT Deluxe [ 523.489509][ T5881] as10x_usb: device has been disconnected [ 523.542237][T11149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.831910][ T30] audit: type=1400 audit(1764248726.978:796): avc: denied { mounton } for pid=11142 comm="syz.6.1287" path="/proc/10/task" dev="proc" ino=31200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 523.854923][T11149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.913574][ T5860] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 524.061683][T11161] overlayfs: failed to clone upperpath [ 524.093375][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 524.113098][T10089] libceph: connect (1)[c::]:6789 error -101 [ 524.119222][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 524.123011][ T5860] usb 1-1: config 0 has an invalid interface number: 151 but max is 1 [ 524.159867][ T5860] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.238912][ T5860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 524.271509][ T5860] usb 1-1: config 0 has no interface number 0 [ 524.278332][ T5860] usb 1-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.312268][ T5860] usb 1-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 524.343548][ T5860] usb 1-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 524.354020][ T5860] usb 1-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 524.370642][ T5860] usb 1-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 524.401199][T10089] libceph: connect (1)[c::]:6789 error -101 [ 524.401294][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.408282][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 524.415608][ T5860] usb 1-1: Product: syz [ 524.475408][ T5860] usb 1-1: Manufacturer: syz [ 524.583505][ T5860] usb 1-1: SerialNumber: syz [ 524.607878][ T5860] usb 1-1: config 0 descriptor?? [ 524.647181][T11148] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 524.736474][ T5860] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.874087][T11161] ceph: No mds server is up or the cluster is laggy [ 524.928281][T11172] overlayfs: missing 'lowerdir' [ 524.947313][ T5860] usb 1-1: USB disconnect, device number 44 [ 525.238260][ T30] audit: type=1400 audit(1764248728.798:797): avc: denied { setopt } for pid=11178 comm="syz.6.1296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 526.209640][T11193] 9pnet: Could not find request transport: ;unix [ 526.243089][ T10] libceph: connect (1)[c::]:6789 error -101 [ 526.250180][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 526.294400][ T1224] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 526.476843][ T1224] usb 1-1: Using ep0 maxpacket: 32 [ 526.506228][ T1224] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 526.513676][ T10] libceph: connect (1)[c::]:6789 error -101 [ 526.514577][ T1224] usb 1-1: config 0 has no interface number 0 [ 526.520763][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 526.533913][ T1224] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 526.547624][ T1224] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 526.556729][ T1224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.564788][ T1224] usb 1-1: Product: syz [ 526.568947][ T1224] usb 1-1: Manufacturer: syz [ 526.574364][ T1224] usb 1-1: SerialNumber: syz [ 526.581143][ T1224] usb 1-1: config 0 descriptor?? [ 526.587207][T11191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 526.786442][T11211] overlayfs: failed to clone upperpath [ 526.809263][ T10] libceph: connect (1)[c::]:6789 error -101 [ 526.816338][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 526.827093][T11191] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 527.048911][T11198] ceph: No mds server is up or the cluster is laggy [ 527.057436][ T10] libceph: connect (1)[c::]:6789 error -101 [ 527.063604][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 527.093752][ T10] libceph: connect (1)[c::]:6789 error -101 [ 527.099807][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 527.875009][T11211] ceph: No mds server is up or the cluster is laggy [ 527.964845][ T10] libceph: connect (1)[c::]:6789 error -101 [ 527.970922][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 528.984544][ T1224] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 529.013919][ T1224] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 529.065956][ T1224] asix 1-1:0.188: probe with driver asix failed with error -71 [ 529.097828][T11237] overlayfs: failed to clone upperpath [ 529.296754][T11240] overlayfs: missing 'lowerdir' [ 529.444344][ T1224] usb 1-1: USB disconnect, device number 45 [ 530.101789][T11264] overlayfs: failed to clone upperpath [ 530.152634][ T977] libceph: connect (1)[c::]:6789 error -101 [ 530.164667][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 530.553783][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 530.625222][T11260] infiniband syû: set active [ 530.629893][T11260] infiniband syû: added bond_slave_0 [ 530.655349][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 531.393988][T11260] RDS/IB: syû: added [ 531.398210][T11260] smc: adding ib device syû with port count 1 [ 531.404442][T11260] smc: ib device syû port 1 has no pnetid [ 531.410923][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 531.418306][T11264] ceph: No mds server is up or the cluster is laggy [ 531.436123][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 531.633203][T11290] program syz.6.1320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.903725][ T10] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 532.298288][ T10] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 532.331079][ T10] usb 3-1: config 7 has no interface number 0 [ 532.349070][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 532.358504][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.366584][ T10] usb 3-1: Product: syz [ 532.370798][ T10] usb 3-1: Manufacturer: syz [ 532.376896][ T10] usb 3-1: SerialNumber: syz [ 532.658481][T11309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1325'. [ 532.787683][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1325'. [ 534.669036][ T10] as10x_usb: device has been detected [ 534.674750][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 534.737504][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 534.829794][ T10] as10x_usb: error during firmware upload part1 [ 534.873001][ T10] Registered device Elgato EyeTV DTT Deluxe [ 534.893331][ T10] usb 3-1: USB disconnect, device number 35 [ 535.046262][ T10] Unregistered device Elgato EyeTV DTT Deluxe [ 535.047065][ T10] as10x_usb: device has been disconnected [ 535.437746][T11367] overlayfs: failed to clone upperpath [ 535.575921][ T10] libceph: connect (1)[c::]:6789 error -101 [ 535.581993][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 535.863876][ T10] libceph: connect (1)[c::]:6789 error -101 [ 535.873445][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 536.222032][T11380] netlink: 'syz.6.1336': attribute type 11 has an invalid length. [ 536.274566][T11368] ceph: No mds server is up or the cluster is laggy [ 536.364105][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 536.394504][ T10] libceph: connect (1)[c::]:6789 error -101 [ 536.401667][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 536.545548][T11386] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1337'. [ 536.632795][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 536.677718][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1338'. [ 537.104329][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1338'. [ 537.115790][T11394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1338'. [ 537.117057][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 537.124853][T11394] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1338'. [ 537.887633][ T10] libceph: connect (1)[c::]:6789 error -101 [ 537.893711][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 538.154260][ T10] libceph: connect (1)[c::]:6789 error -101 [ 538.165316][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 538.492838][T11417] ceph: No mds server is up or the cluster is laggy [ 538.537222][ T30] audit: type=1400 audit(1764248742.098:798): avc: denied { write } for pid=11431 comm="syz.7.1346" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 539.109546][T11441] __nla_validate_parse: 1 callbacks suppressed [ 539.109561][T11441] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1347'. [ 539.129388][T11441] unsupported nlmsg_type 40 [ 539.221215][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 539.272024][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 539.401901][T11450] overlayfs: missing 'lowerdir' [ 539.564038][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 539.566539][ T30] audit: type=1400 audit(1764248743.128:799): avc: denied { accept } for pid=11457 comm="syz.6.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 539.572301][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 539.828896][T11466] 9pnet_fd: Insufficient options for proto=fd [ 539.926553][T11469] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1355'. [ 539.935808][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1355'. [ 540.352944][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 540.360014][T11443] ceph: No mds server is up or the cluster is laggy [ 540.371718][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 540.429301][T11471] overlayfs: failed to clone upperpath [ 540.584586][T10089] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 540.766396][T10089] usb 7-1: Using ep0 maxpacket: 8 [ 540.789958][T10089] usb 7-1: config 0 has an invalid interface number: 17 but max is 0 [ 540.799549][T11480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 540.839449][T10089] usb 7-1: config 0 has no interface number 0 [ 540.872081][T10089] usb 7-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=ca.f7 [ 541.025177][ T30] audit: type=1400 audit(1764248744.418:800): avc: denied { setopt } for pid=11481 comm="syz.2.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 541.165976][T10089] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.185279][T10089] usb 7-1: config 0 descriptor?? [ 541.401797][T10089] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 541.448245][T10089] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.459804][T10089] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 541.471217][T10089] usb 7-1: media controller created [ 541.509457][T11499] input: syz1 as /devices/virtual/input/input48 [ 541.536195][T10089] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.610627][T11468] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1356'. [ 541.865947][ T30] audit: type=1400 audit(1764248745.428:801): avc: denied { write } for pid=11503 comm="syz.0.1370" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 541.980546][T10089] DVB: Unable to find symbol dib8000_attach() [ 541.987972][T10089] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 542.156428][T11510] netlink: 'syz.3.1369': attribute type 4 has an invalid length. [ 542.164250][T11510] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1369'. [ 542.197196][T11510] rdma_rxe: rxe_newlink: failed to add lo [ 543.275977][T10089] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.363714][T10089] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 543.372535][T10089] usb 7-1: media controller created [ 544.260720][T11522] 9pnet: Could not find request transport: ;unix [ 544.321629][T10089] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 544.694926][T11534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.725113][T10089] DVB: Unable to find symbol dib8000_attach() [ 544.731202][T10089] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 544.855310][T10089] rc_core: IR keymap rc-dib0700-rc5 not found [ 544.869741][T10089] Registered IR keymap rc-empty [ 544.885638][T10089] dvb-usb: could not initialize remote control. [ 544.993446][T10089] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 545.031928][T10089] usb 7-1: USB disconnect, device number 2 [ 545.126021][T11540] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 545.565312][T10089] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 546.063845][T11549] fuse: Bad value for 'fd' [ 546.088689][T10089] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 546.262329][T10089] usb 7-1: config 7 has an invalid interface number: 101 but max is 0 [ 546.313071][T10089] usb 7-1: config 7 has no interface number 0 [ 546.341614][T10089] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 546.353444][T10089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.361459][T10089] usb 7-1: Product: syz [ 546.365935][T10089] usb 7-1: Manufacturer: syz [ 546.370554][T10089] usb 7-1: SerialNumber: syz [ 547.978115][T11573] 9pnet: Could not find request transport: ;unix [ 549.320905][T10089] as10x_usb: device has been detected [ 549.332932][T10089] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 549.405499][T10089] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 549.530661][T10089] as10x_usb: error during firmware upload part1 [ 549.541989][T10089] Registered device Elgato EyeTV DTT Deluxe [ 549.554888][T10089] usb 7-1: USB disconnect, device number 3 [ 549.663325][T10089] Unregistered device Elgato EyeTV DTT Deluxe [ 549.678315][T10089] as10x_usb: device has been disconnected [ 550.648382][T11599] 9pnet: Could not find request transport: ;unix [ 550.771576][ T30] audit: type=1326 audit(1764248754.328:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 550.911145][ T30] audit: type=1326 audit(1764248754.328:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 551.764798][ T30] audit: type=1326 audit(1764248754.358:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.045172][ T30] audit: type=1326 audit(1764248754.358:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.068822][ T30] audit: type=1326 audit(1764248754.358:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.092346][ T30] audit: type=1326 audit(1764248754.368:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.115756][ T30] audit: type=1326 audit(1764248754.368:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.139235][ T30] audit: type=1326 audit(1764248754.368:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.167216][ T30] audit: type=1326 audit(1764248754.368:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.272597][ T30] audit: type=1326 audit(1764248754.368:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11595 comm="syz.2.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 552.432669][T11625] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1400'. [ 552.808544][T11636] input: syz1 as /devices/virtual/input/input50 [ 553.150180][T11641] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 553.272341][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 553.575640][T11651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1408'. [ 553.608474][T10089] libceph: connect (1)[c::]:6789 error -101 [ 553.614942][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 553.894232][T10089] libceph: connect (1)[c::]:6789 error -101 [ 553.911431][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 554.150374][T11663] netlink: 'syz.2.1409': attribute type 4 has an invalid length. [ 554.158241][T11663] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1409'. [ 554.179408][T11663] sz1: rxe_newlink: already configured on lo [ 554.426858][T11653] ceph: No mds server is up or the cluster is laggy [ 554.548010][T10089] libceph: connect (1)[c::]:6789 error -101 [ 554.643860][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 555.153319][ T5881] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 555.283380][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 555.303649][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 555.314165][ T5881] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.327829][ T5881] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.338079][ T5881] usb 1-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 555.351477][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 555.358313][ T5881] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 555.367414][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.377076][ T5881] usb 1-1: config 0 descriptor?? [ 555.433296][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 555.445145][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.457677][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.475685][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 555.532473][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.544165][ T24] usb 7-1: config 0 descriptor?? [ 555.551236][ T24] hub 7-1:0.0: USB hub found [ 555.561372][T11675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1415'. [ 555.787618][ T5881] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 555.809774][T11678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.832534][ T5881] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 555.843176][T11678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.863117][ T5881] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 555.871826][ T24] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 555.886261][ T5881] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 555.915848][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 555.927114][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 555.927413][ T5881] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 555.974327][ T24] usb 7-1: USB disconnect, device number 4 [ 555.992392][ T5881] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 556.009096][T11662] netlink: 'syz.0.1410': attribute type 10 has an invalid length. [ 556.109979][T11662] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 556.124605][T11661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.139768][ T5881] hid-thrustmaster 0003:044F:B65D.0010: Unexpected non-int endpoint [ 556.219463][ C0] hid-thrustmaster 0003:044F:B65D.0010: URB to get model id failed with error -71 [ 556.265501][ T5881] usb 1-1: USB disconnect, device number 46 [ 556.348547][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 556.348585][ T30] audit: type=1326 audit(1764248759.908:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.378165][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.681357][ T30] audit: type=1326 audit(1764248759.918:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.812866][T11693] overlayfs: missing 'workdir' [ 556.824830][ T30] audit: type=1326 audit(1764248759.918:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.881889][ T30] audit: type=1326 audit(1764248759.918:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.946030][ T30] audit: type=1326 audit(1764248759.918:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.970350][ T30] audit: type=1326 audit(1764248759.918:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 556.993712][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.318207][ T30] audit: type=1326 audit(1764248759.918:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 557.341620][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.359567][ T30] audit: type=1326 audit(1764248759.918:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 557.383788][ T30] audit: type=1326 audit(1764248759.918:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 557.407143][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.581026][ T30] audit: type=1326 audit(1764248759.918:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11681 comm="syz.7.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 557.693447][T10089] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 557.884979][T10089] usb 1-1: config 7 has an invalid interface number: 101 but max is 0 [ 557.892516][T11719] ip6tnl3: entered promiscuous mode [ 557.893177][T10089] usb 1-1: config 7 has no interface number 0 [ 557.922171][T10089] usb 1-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 557.939908][T10089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.950823][T10089] usb 1-1: Product: syz [ 557.955235][T10089] usb 1-1: Manufacturer: syz [ 557.960283][T10089] usb 1-1: SerialNumber: syz [ 558.832527][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 559.063360][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 559.102828][T11730] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 559.129581][ T1224] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 559.173773][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.186093][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.199025][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 559.209302][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.261739][ T24] usb 3-1: config 0 descriptor?? [ 559.304607][ T1224] usb 7-1: device descriptor read/64, error -71 [ 559.337347][ T24] hub 3-1:0.0: USB hub found [ 559.547974][T11721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.557444][T11721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.567949][ T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 559.581899][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 559.587935][ T1224] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 559.595573][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 559.624104][ T24] usb 3-1: USB disconnect, device number 36 [ 559.775214][ T1224] usb 7-1: device descriptor read/64, error -71 [ 559.893758][ T1224] usb usb7-port1: attempt power cycle [ 560.140497][T10089] as10x_usb: device has been detected [ 560.146803][T10089] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 560.165216][T10089] usb 1-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 560.177933][T10089] as10x_usb: error during firmware upload part1 [ 560.184734][T10089] Registered device Elgato EyeTV DTT Deluxe [ 560.191391][T10089] usb 1-1: USB disconnect, device number 47 [ 560.243661][ T1224] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 560.538144][ T1224] usb 7-1: device descriptor read/8, error -71 [ 560.556481][T10089] Unregistered device Elgato EyeTV DTT Deluxe [ 560.563773][T10089] as10x_usb: device has been disconnected [ 561.275701][ T1224] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 561.454508][ T1224] usb 7-1: device descriptor read/8, error -71 [ 561.599171][ T1224] usb usb7-port1: unable to enumerate USB device [ 561.643778][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 561.643792][ T30] audit: type=1400 audit(1764248765.198:895): avc: denied { append } for pid=11752 comm="syz.7.1438" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 561.941120][T11757] netlink: 'syz.6.1436': attribute type 4 has an invalid length. [ 561.948943][T11757] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1436'. [ 562.101645][T11757] rdma_rxe: rxe_newlink: failed to add lo [ 562.455948][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.739000][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.804908][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 563.816288][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 563.952766][T11764] ceph: No mds server is up or the cluster is laggy [ 564.323782][T11778] xt_TPROXY: Can be used only with -p tcp or -p udp [ 564.483282][ T1224] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 564.556799][T11781] siw: device registration error -23 [ 565.913292][ T1224] usb 7-1: Using ep0 maxpacket: 32 [ 566.005741][ T1224] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.023328][ T1224] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.028588][T11788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1449'. [ 566.033689][ T1224] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 566.620848][ T1224] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.661640][ T1224] usb 7-1: config 0 descriptor?? [ 566.691307][ T1224] hub 7-1:0.0: USB hub found [ 566.720867][T11793] batadv_slave_1: entered promiscuous mode [ 567.010811][T11794] xt_bpf: check failed: parse error [ 567.027175][T11797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.038295][T11797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.058731][ T1224] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 567.059487][T11792] batadv_slave_1: left promiscuous mode [ 567.110254][T11801] sctp: [Deprecated]: syz.0.1451 (pid 11801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.110254][T11801] Use struct sctp_sack_info instead [ 567.131374][T11799] sctp: [Deprecated]: syz.0.1451 (pid 11799) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.131374][T11799] Use struct sctp_sack_info instead [ 567.197466][ T1224] usbhid 7-1:0.0: can't add hid device: -71 [ 567.215828][ T1224] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 567.284702][ T1224] usb 7-1: USB disconnect, device number 9 [ 567.398431][ T980] libceph: connect (1)[c::]:6789 error -101 [ 567.407910][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 567.482041][T11810] input: syz1 as /devices/virtual/input/input51 [ 567.683757][ T980] libceph: connect (1)[c::]:6789 error -101 [ 567.702830][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 567.949920][T11819] overlayfs: failed to get inode (-116) [ 567.958794][T11819] overlayfs: failed to get inode (-116) [ 567.987024][T11819] overlayfs: failed to get inode (-116) [ 567.995337][T11819] overlayfs: failed to get inode (-116) [ 568.200839][T11804] ceph: No mds server is up or the cluster is laggy [ 568.273910][ T10] libceph: connect (1)[c::]:6789 error -101 [ 568.291673][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 568.631919][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'. [ 569.806105][T11841] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1465'. [ 570.670462][ T977] libceph: connect (1)[c::]:6789 error -101 [ 570.719300][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 571.137154][T11867] netlink: 212916 bytes leftover after parsing attributes in process `syz.2.1471'. [ 571.260889][T11880] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 571.273845][T10089] libceph: connect (1)[c::]:6789 error -101 [ 571.279871][T10089] libceph: mon0 (1)[c::]:6789 connect error [ 571.301757][T11875] netlink: 'syz.7.1472': attribute type 11 has an invalid length. [ 571.323441][ T977] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 571.417236][T11855] ceph: No mds server is up or the cluster is laggy [ 571.484831][ T977] usb 7-1: config 7 has an invalid interface number: 101 but max is 0 [ 571.500489][ T977] usb 7-1: config 7 has no interface number 0 [ 571.513195][ T977] usb 7-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 571.529997][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.547187][ T977] usb 7-1: Product: syz [ 571.556379][ T977] usb 7-1: Manufacturer: syz [ 571.567540][ T977] usb 7-1: SerialNumber: syz [ 572.569523][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1479'. [ 572.579780][ T30] audit: type=1400 audit(1764248776.128:896): avc: denied { ioctl } for pid=11891 comm="syz.3.1478" path="socket:[32739]" dev="sockfs" ino=32739 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 572.604630][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.067035][T11900] trusted_key: encrypted_key: insufficient parameters specified [ 573.385759][T11903] x_tables: duplicate entry at hook 2 [ 573.663431][ T1224] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 573.855148][ T1224] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 573.866959][ T1224] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 573.878010][ T1224] usb 3-1: config 0 interface 0 has no altsetting 0 [ 573.884760][ T1224] usb 3-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66 [ 573.894007][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.904812][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 573.914250][ T1224] usb 3-1: config 0 descriptor?? [ 573.926350][T11903] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 573.942991][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 574.192760][ T977] as10x_usb: device has been detected [ 574.198549][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 574.249383][ T977] usb 7-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 574.260920][ T977] as10x_usb: error during firmware upload part1 [ 574.268793][ T977] Registered device Elgato EyeTV DTT Deluxe [ 574.271792][ T977] usb 7-1: USB disconnect, device number 10 [ 574.628763][ T977] Unregistered device Elgato EyeTV DTT Deluxe [ 574.631427][ T977] as10x_usb: device has been disconnected [ 574.858480][T11924] overlayfs: failed to clone upperpath [ 575.415455][T11937] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 575.423266][T11937] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1490'. [ 575.460273][T11937] rdma_rxe: rxe_newlink: failed to add lo [ 576.270346][ T1224] usb 3-1: string descriptor 0 read error: -71 [ 576.295018][ T1224] usb 3-1: USB disconnect, device number 37 [ 576.704812][T11940] overlayfs: missing 'lowerdir' [ 577.106564][T11946] netlink: 'syz.0.1489': attribute type 4 has an invalid length. [ 577.114407][T11946] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1489'. [ 577.133481][T11946] rdma_rxe: rxe_newlink: failed to add lo [ 578.025883][T11948] syzkaller1: entered promiscuous mode [ 578.031559][T11948] syzkaller1: entered allmulticast mode [ 578.146892][T11964] netlink: 'syz.0.1500': attribute type 21 has an invalid length. [ 578.559096][T11964] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 578.576217][T11964] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1500'. [ 579.355885][T11981] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1506'. [ 579.403295][ T5963] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 579.464534][ T30] audit: type=1400 audit(1764248783.028:897): avc: denied { create } for pid=11985 comm="syz.6.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 579.575002][ T5963] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 579.583549][ T5963] usb 3-1: config 0 has no interface number 0 [ 579.590809][ T5963] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 579.622081][ T5963] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=c0.43 [ 579.631469][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.645153][ T5963] usb 3-1: Product: syz [ 579.655244][ T5963] usb 3-1: Manufacturer: syz [ 579.669616][ T5963] usb 3-1: SerialNumber: syz [ 579.682209][ T5963] usb 3-1: config 0 descriptor?? [ 579.700064][T11975] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 579.711455][ T5963] pl2303 3-1:0.154: required interrupt-in endpoint missing [ 579.931586][ T980] usb 3-1: USB disconnect, device number 38 [ 581.071741][ T30] audit: type=1400 audit(1764248784.628:898): avc: denied { read } for pid=12000 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 581.188270][T12001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.223599][T12008] overlay: Bad value for 'metacopy' [ 581.489860][T12015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 581.803565][ T980] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 582.066050][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.176459][ T980] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.307704][T12025] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 582.323876][ T980] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 582.344295][ T980] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.374327][ T980] usb 7-1: config 0 descriptor?? [ 582.401447][ T6362] Bluetooth: hci2: Frame reassembly failed (-84) [ 582.638312][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.663714][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.075170][T12037] 9pnet_fd: Insufficient options for proto=fd [ 583.137958][ T30] audit: type=1326 audit(1764248786.688:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 583.371507][ T980] uclogic 0003:5543:0005.0011: hidraw0: USB HID v0.00 Device [HID 5543:0005] on usb-dummy_hcd.6-1/input0 [ 583.463799][ T30] audit: type=1326 audit(1764248786.698:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 583.890371][ T30] audit: type=1326 audit(1764248786.768:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 583.957310][ T30] audit: type=1326 audit(1764248786.778:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 583.982087][ T30] audit: type=1326 audit(1764248786.778:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 584.029636][ T30] audit: type=1326 audit(1764248786.798:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 584.113095][ T30] audit: type=1326 audit(1764248786.808:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 584.183535][ T30] audit: type=1326 audit(1764248786.818:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.2.1522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa70718f749 code=0x7ffc0000 [ 584.373528][ T5135] Bluetooth: hci2: command 0x1003 tx timeout [ 584.380866][ T5828] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 584.465227][ T5963] usb 7-1: USB disconnect, device number 11 [ 584.692845][ T977] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 584.924208][ T977] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 584.932423][ T977] usb 3-1: config 7 has no interface number 0 [ 585.087921][ T977] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 585.204002][T12045] netlink: 'syz.0.1525': attribute type 3 has an invalid length. [ 585.513321][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.521343][ T977] usb 3-1: Product: syz [ 585.537000][ T977] usb 3-1: Manufacturer: syz [ 585.541614][ T977] usb 3-1: SerialNumber: syz [ 586.078833][T12053] lo speed is unknown, defaulting to 1000 [ 587.081519][ T977] as10x_usb: device has been detected [ 587.118213][ T977] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 587.252808][ T977] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 587.385784][ T977] as10x_usb: error during firmware upload part1 [ 587.435504][ T977] Registered device Elgato EyeTV DTT Deluxe [ 587.466737][ T977] usb 3-1: USB disconnect, device number 39 [ 587.760140][ T977] Unregistered device Elgato EyeTV DTT Deluxe [ 587.803761][ T977] as10x_usb: device has been disconnected [ 588.052068][ T3543] Bluetooth: Error in BCSP hdr checksum [ 588.170273][T12069] netlink: 'syz.0.1531': attribute type 27 has an invalid length. [ 588.276830][ T3543] Bluetooth: Error in BCSP hdr checksum [ 588.473466][ T6362] Bluetooth: Error in BCSP hdr checksum [ 588.735376][ T3543] Bluetooth: Error in BCSP hdr checksum [ 589.733752][ T5828] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 589.740059][ T5135] Bluetooth: hci2: command 0x1003 tx timeout [ 590.637437][T12092] input: syz1 as /devices/virtual/input/input52 [ 590.777805][T12093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1541'. [ 591.733730][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1543'. [ 592.270942][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 592.300729][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 592.406380][T12105] ceph: No mds server is up or the cluster is laggy [ 592.584542][ T980] libceph: connect (1)[c::]:6789 error -101 [ 592.600671][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 594.674572][T12129] netlink: 'syz.7.1544': attribute type 3 has an invalid length. [ 595.483431][T12144] comedi comedi1: ni_at_a2150: a I/O base address must be specified [ 595.588820][T12128] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30298 sclass=netlink_xfrm_socket pid=12128 comm=syz.6.1548 [ 595.613047][T12147] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 595.628404][T12143] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.943231][T12168] netlink: 'syz.3.1558': attribute type 4 has an invalid length. [ 596.951103][T12168] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1558'. [ 597.092194][T12171] rdma_rxe: rxe_newlink: failed to add lo [ 599.033131][T12165] 9pnet: Could not find request transport: ;unix [ 599.358801][ T1224] libceph: connect (1)[c::]:6789 error -101 [ 599.462084][ T1224] libceph: mon0 (1)[c::]:6789 connect error [ 599.562731][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1561'. [ 599.766427][ T24] libceph: connect (1)[c::]:6789 error -101 [ 599.960035][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 600.164887][T12174] ceph: No mds server is up or the cluster is laggy [ 600.172940][T12176] netlink: 'syz.0.1559': attribute type 3 has an invalid length. [ 600.724901][T12193] netlink: 'syz.2.1564': attribute type 4 has an invalid length. [ 600.732690][T12193] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1564'. [ 600.753770][T12193] sz1: rxe_newlink: already configured on lo [ 601.853779][ T10] libceph: connect (1)[c::]:6789 error -101 [ 601.865689][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 602.437166][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 602.445436][ T980] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 602.479249][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 602.672894][T12197] ceph: No mds server is up or the cluster is laggy [ 602.679668][T12218] 9pnet: Could not find request transport: ;unix [ 602.715545][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.739957][ T980] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.928869][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 602.941576][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.030224][ T980] usb 1-1: config 0 descriptor?? [ 603.197743][T12230] overlayfs: missing 'lowerdir' [ 604.284084][T12239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'. [ 604.552577][T12244] netlink: 'syz.7.1578': attribute type 4 has an invalid length. [ 604.560430][T12244] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1578'. [ 604.660576][T12244] rdma_rxe: rxe_newlink: failed to add lo [ 606.120998][T12250] netlink: 'syz.2.1579': attribute type 4 has an invalid length. [ 606.128811][T12250] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1579'. [ 606.156409][T12250] sz1: rxe_newlink: already configured on lo [ 607.437659][ T980] usbhid 1-1:0.0: can't add hid device: -71 [ 607.463458][ T980] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 607.491146][ T980] usb 1-1: USB disconnect, device number 48 [ 607.707393][T12260] input: syz1 as /devices/virtual/input/input53 [ 608.628525][ T977] libceph: connect (1)[c::]:6789 error -101 [ 608.629888][T12267] 9pnet: Could not find request transport: ;unix [ 608.643990][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 608.865819][T12263] ceph: No mds server is up or the cluster is laggy [ 610.733486][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'. [ 610.987147][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 610.998297][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1598'. [ 611.012682][T12310] comedi comedi2: das16m1: I/O port conflict (0x9,16) [ 611.604584][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 611.604601][ T30] audit: type=1400 audit(1764248815.168:969): avc: denied { setattr } for pid=12326 comm="syz.3.1602" name="PPPOE" dev="sockfs" ino=35699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 612.728358][T12346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=71 sclass=netlink_route_socket pid=12346 comm=syz.6.1607 [ 612.821218][ T30] audit: type=1400 audit(1764248816.348:970): avc: denied { accept } for pid=12341 comm="syz.6.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 612.892620][T12342] overlayfs: overlapping lowerdir path [ 612.968986][ T30] audit: type=1400 audit(1764248816.468:971): avc: denied { connect } for pid=12341 comm="syz.6.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 613.120599][T12360] syz.7.1610 (12360) used obsolete PPPIOCDETACH ioctl [ 613.323136][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1611'. [ 613.637657][ T5860] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 613.888025][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 613.903267][ T5860] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 613.913000][ T5860] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 613.928020][ T5860] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 613.944139][ T5860] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 614.144184][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.803310][ T1224] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 615.759162][T12387] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 616.014466][ T1224] usb 7-1: config 0 has an invalid interface number: 48 but max is 0 [ 616.047308][ T1224] usb 7-1: config 0 has no interface number 0 [ 616.064801][ T1224] usb 7-1: too many endpoints for config 0 interface 48 altsetting 49: 54, using maximum allowed: 30 [ 616.216537][ T1224] usb 7-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 54 [ 616.241303][ T1224] usb 7-1: config 0 interface 48 has no altsetting 0 [ 616.375908][ T1224] usb 7-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 616.414802][T12392] trusted_key: encrypted_key: keyword 'new0default' not recognized [ 616.448400][ T1224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.502341][ T1224] usb 7-1: Product: syz [ 616.530752][ T1224] usb 7-1: Manufacturer: syz [ 616.572824][ T1224] usb 7-1: SerialNumber: syz [ 616.763478][ T1224] usb 7-1: config 0 descriptor?? [ 617.081751][ T5963] usb 3-1: USB disconnect, device number 40 [ 617.844630][ T1224] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 617.857520][T12407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 617.977085][ T1224] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 618.271273][ T1224] sq905c 7-1:0.48: Get version command failed [ 618.630138][ T1224] sq905c 7-1:0.48: probe with driver sq905c failed with error -71 [ 618.685843][ T1224] usb 7-1: USB disconnect, device number 12 [ 618.737010][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'. [ 619.666970][T12428] lo speed is unknown, defaulting to 1000 [ 619.973546][T12442] input: syz1 as /devices/virtual/input/input54 [ 620.853308][ T5135] Bluetooth: hci5: command 0x0406 tx timeout [ 621.345258][ T5828] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 621.743718][ T5963] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 622.023951][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 622.426015][ T5963] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 622.458953][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.482828][ T5963] usb 7-1: Product: syz [ 622.502077][ T5963] usb 7-1: Manufacturer: syz [ 622.524688][ T5963] usb 7-1: SerialNumber: syz [ 622.551840][ T5963] usb 7-1: config 0 descriptor?? [ 622.579846][ T5963] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 622.960584][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1640'. [ 623.045460][T12478] 9pnet: Could not find request transport: ;unix [ 623.277899][ T5963] gspca_sonixj: reg_w1 err -110 [ 623.282858][ T5963] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 623.913505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.919893][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.716308][ T5963] usb 7-1: USB disconnect, device number 13 [ 625.236250][ T30] audit: type=1400 audit(1764248828.788:972): avc: denied { map } for pid=12497 comm="syz.6.1648" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 625.272546][ T30] audit: type=1400 audit(1764248828.798:973): avc: denied { ioctl } for pid=12497 comm="syz.6.1648" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x6610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 625.337353][ T30] audit: type=1400 audit(1764248828.798:974): avc: denied { lock } for pid=12497 comm="syz.6.1648" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 625.413392][ T5828] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 625.423063][ T5828] Bluetooth: hci3: Injecting HCI hardware error event [ 625.432120][ T5828] Bluetooth: hci3: hardware error 0x00 [ 626.083083][T12514] tipc: Enabled bearer , priority 0 [ 626.091659][T12514] syzkaller0: MTU too low for tipc bearer [ 626.110043][T12514] tipc: Disabling bearer [ 626.521532][T12521] netlink: 'syz.6.1652': attribute type 4 has an invalid length. [ 626.529357][T12521] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1652'. [ 626.569405][T12521] rdma_rxe: rxe_newlink: failed to add lo [ 627.493289][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 627.932941][T12531] overlayfs: failed to clone upperpath [ 628.030379][ T1224] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 628.243556][ T1224] usb 3-1: Using ep0 maxpacket: 8 [ 628.733612][ T1224] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 628.804745][ T1224] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 628.835541][ T1224] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 628.885952][ T1224] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 628.958199][ T1224] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.612205][T12552] netlink: 'syz.2.1654': attribute type 10 has an invalid length. [ 629.709097][T12554] xt_TPROXY: Can be used only with -p tcp or -p udp [ 630.160557][T12563] overlayfs: missing 'lowerdir' [ 630.263034][T12567] netlink: 'syz.3.1669': attribute type 10 has an invalid length. [ 630.676619][T12571] 9pnet_fd: Insufficient options for proto=fd [ 630.765119][ T5860] usb 3-1: USB disconnect, device number 41 [ 630.869842][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1672'. [ 630.917481][T12579] overlayfs: failed to clone upperpath [ 631.116993][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 631.346140][ T5860] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 631.751376][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 631.764400][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.775542][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.801751][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 631.825667][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.905933][ T30] audit: type=1326 audit(1764248835.468:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 631.914893][ T5860] usb 3-1: config 0 descriptor?? [ 632.230780][ T30] audit: type=1326 audit(1764248835.468:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.596556][ T30] audit: type=1326 audit(1764248835.468:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.598455][ T5860] hub 3-1:0.0: USB hub found [ 632.659330][T12595] 9pnet: Could not find request transport: ;unix [ 632.666373][ T30] audit: type=1326 audit(1764248835.468:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.693053][ T30] audit: type=1326 audit(1764248835.468:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.734685][ T30] audit: type=1326 audit(1764248836.128:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.762826][ T30] audit: type=1326 audit(1764248836.128:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.808352][ T30] audit: type=1326 audit(1764248836.128:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.863398][ T30] audit: type=1326 audit(1764248836.158:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 632.952518][ T30] audit: type=1326 audit(1764248836.158:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.3.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a91b8f749 code=0x7ffc0000 [ 633.274685][T12604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.284086][T12604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.339874][ T5860] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 633.449393][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1682'. [ 633.615788][T12622] overlayfs: failed to clone upperpath [ 633.902273][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1683'. [ 634.044683][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 634.053374][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 634.125135][ T5860] usb 3-1: USB disconnect, device number 42 [ 634.258690][T12634] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 634.556985][T12631] netlink: 'syz.3.1689': attribute type 10 has an invalid length. [ 634.836201][T12631] team0: Port device dummy0 added [ 634.886001][T12637] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1689'. [ 635.122206][T12631] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1689'. [ 635.752409][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 635.761357][T12663] openvswitch: netlink: Flow actions attr not present in new flow. [ 635.770653][ T5963] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 635.923426][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 636.087167][ T5963] usb 7-1: config 0 interface 0 has no altsetting 0 [ 636.100334][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1700'. [ 636.115707][ T5963] usb 7-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 636.208331][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.224326][ T5963] usb 7-1: config 0 descriptor?? [ 636.768955][ T5963] waltop 0003:172F:0502.0012: unknown main item tag 0x0 [ 636.799105][T12670] xt_TPROXY: Can be used only with -p tcp or -p udp [ 636.870107][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 637.224767][ T5963] waltop 0003:172F:0502.0012: item fetching failed at offset 3/5 [ 637.228360][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 637.228374][ T30] audit: type=1400 audit(1764248840.788:1010): avc: denied { ioctl } for pid=12667 comm="syz.0.1701" path="/346/file0" dev="tmpfs" ino=1861 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.234529][ T5963] waltop 0003:172F:0502.0012: probe with driver waltop failed with error -22 [ 637.281196][ T5135] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 637.292138][ T5963] usb 7-1: USB disconnect, device number 14 [ 637.305328][T12668] block device autoloading is deprecated and will be removed. [ 637.519453][ T980] libceph: connect (1)[c::]:6789 error -101 [ 637.545279][ T980] libceph: mon0 (1)[c::]:6789 connect error [ 637.570085][ T30] audit: type=1400 audit(1764248841.128:1011): avc: denied { connect } for pid=12685 comm="syz.2.1706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 637.630650][T12690] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12690 comm=syz.7.1704 [ 637.761301][ T30] audit: type=1326 audit(1764248841.238:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 637.938132][T12686] audit: audit_backlog=65 > audit_backlog_limit=64 [ 637.938255][ T30] audit: type=1326 audit(1764248841.238:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 637.944965][T12686] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 637.996322][ T30] audit: type=1326 audit(1764248841.238:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 638.133599][ T10] libceph: connect (1)[c::]:6789 error -101 [ 638.171271][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 638.182575][T12686] audit: backlog limit exceeded [ 638.187425][T12695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 638.243426][T12681] ceph: No mds server is up or the cluster is laggy [ 638.408405][T12698] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (virtio1-input.0) [ 638.693649][ T10] libceph: connect (1)[c::]:6789 error -101 [ 639.298040][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 639.304135][ T30] audit: type=1326 audit(1764248841.238:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 639.347963][ T30] audit: type=1326 audit(1764248841.248:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.0.1708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 639.509137][T12700] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 639.629814][T12703] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 640.420059][T12712] 9pnet: Could not find request transport: ;unix [ 640.589848][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 641.335019][ T5135] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 641.345205][ T5135] Bluetooth: hci5: Injecting HCI hardware error event [ 641.353768][ T5135] Bluetooth: hci5: hardware error 0x00 [ 641.438268][T12725] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 642.498533][T12734] netlink: 'syz.7.1717': attribute type 4 has an invalid length. [ 642.506357][T12734] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1717'. [ 642.540929][T12734] rdma_rxe: rxe_newlink: failed to add lo [ 643.903282][ T1224] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 644.024523][T12749] tipc: Enabling of bearer rejected, failed to enable media [ 644.025396][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 644.025409][ T30] audit: type=1400 audit(1764248847.588:1081): avc: denied { setattr } for pid=12744 comm="syz.2.1724" name="ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 644.113302][ T1224] usb 1-1: Using ep0 maxpacket: 8 [ 644.219286][ T1224] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 644.323259][ T24] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 644.331154][ T5135] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 644.360015][ T1224] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 644.368700][ T1224] usb 1-1: Product: syz [ 644.428744][ T1224] usb 1-1: Manufacturer: syz [ 644.433661][ T1224] usb 1-1: SerialNumber: syz [ 644.468442][ T1224] usb 1-1: config 0 descriptor?? [ 644.477104][ T1224] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 644.510028][T12755] kAFS: unable to lookup cell '.' [ 644.583058][ T24] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 644.615019][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.648983][ T24] usb 3-1: Product: syz [ 644.803748][T12763] overlayfs: missing 'lowerdir' [ 644.868457][ T24] usb 3-1: Manufacturer: syz [ 644.873096][ T24] usb 3-1: SerialNumber: syz [ 644.966548][ T24] usb 3-1: config 0 descriptor?? [ 645.060449][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.109844][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.189128][ T30] audit: type=1400 audit(1764248848.748:1082): avc: denied { setopt } for pid=12732 comm="syz.0.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 645.215550][ T1224] gspca_zc3xx: reg_r err -71 [ 645.230771][ T1224] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 645.242740][T12766] tipc: Enabling of bearer rejected, failed to enable media [ 645.264756][ T24] hso 3-1:0.0: Failed to find BULK IN ep [ 645.283307][ T1224] usb 1-1: USB disconnect, device number 49 [ 645.291125][ T24] usb-storage 3-1:0.0: USB Mass Storage device detected [ 645.442149][T12773] xt_TPROXY: Can be used only with -p tcp or -p udp [ 645.598752][ T980] usb 3-1: USB disconnect, device number 43 [ 645.615094][ T30] audit: type=1400 audit(1764248849.158:1083): avc: denied { write } for pid=12744 comm="syz.2.1724" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 645.743550][ T30] audit: type=1400 audit(1764248849.158:1084): avc: denied { open } for pid=12744 comm="syz.2.1724" path="/309/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 645.922460][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 646.094628][T12782] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1730'. [ 646.108732][T12782] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1730'. [ 646.997332][T12794] overlayfs: missing 'lowerdir' [ 648.471704][T12813] overlayfs: failed to clone upperpath [ 648.770272][T12817] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 649.376268][ T30] audit: type=1400 audit(1764248852.938:1085): avc: denied { connect } for pid=12828 comm="syz.3.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 649.539493][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 650.858420][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1752'. [ 651.213399][ T30] audit: type=1326 audit(1764248854.738:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.448985][ T30] audit: type=1326 audit(1764248854.748:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.488980][ T30] audit: type=1326 audit(1764248854.808:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.633305][ T30] audit: type=1326 audit(1764248854.808:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.758373][ T30] audit: type=1326 audit(1764248854.808:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.784954][ T30] audit: type=1326 audit(1764248854.808:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 651.808884][ T30] audit: type=1326 audit(1764248854.828:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 652.555811][ T30] audit: type=1326 audit(1764248854.828:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 652.582303][ T30] audit: type=1326 audit(1764248854.828:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12859 comm="syz.7.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 653.593431][T12891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 653.996829][T12905] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 654.453109][T12912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.348308][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1766'. [ 656.343106][T12927] 9pnet_virtio: no channels available for device syz [ 656.350861][T12927] overlayfs: missing 'lowerdir' [ 656.556461][T12931] netlink: 'syz.3.1770': attribute type 10 has an invalid length. [ 656.751246][T12933] overlayfs: failed to clone lowerpath [ 656.874761][T12936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=12936 comm=syz.7.1772 [ 657.229911][T12942] netlink: 'syz.0.1774': attribute type 4 has an invalid length. [ 657.237725][T12942] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1774'. [ 657.258773][T12942] rdma_rxe: rxe_newlink: failed to add lo [ 658.641112][T12952] netlink: 'syz.3.1775': attribute type 4 has an invalid length. [ 658.648960][T12952] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1775'. [ 658.681079][T12952] rdma_rxe: rxe_newlink: failed to add lo [ 659.892166][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 659.892177][ T30] audit: type=1326 audit(1764248863.448:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 659.928618][T12954] overlayfs: failed to clone upperpath [ 659.939922][T12950] pim6reg: entered allmulticast mode [ 659.962655][ T30] audit: type=1326 audit(1764248863.458:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 659.988595][ T30] audit: type=1326 audit(1764248863.478:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31d0f8df90 code=0x7ffc0000 [ 660.027950][T12950] pim6reg: left allmulticast mode [ 660.086254][ T30] audit: type=1326 audit(1764248863.478:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.123491][ T30] audit: type=1326 audit(1764248863.478:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.158931][ T30] audit: type=1326 audit(1764248863.498:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.183804][ T30] audit: type=1326 audit(1764248863.498:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.296705][ T30] audit: type=1326 audit(1764248863.498:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.331025][ T30] audit: type=1326 audit(1764248863.498:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.473316][ T30] audit: type=1326 audit(1764248863.498:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12947 comm="syz.0.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31d0f8f749 code=0x7ffc0000 [ 660.820162][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 660.830212][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 661.336114][T12997] binder: 12984:12997 ioctl 40182103 200000000300 returned -22 [ 663.513521][T13013] siw: device registration error -23 [ 663.952375][T13020] netlink: 'syz.6.1798': attribute type 23 has an invalid length. [ 664.197785][T13022] tmpfs: Bad value for 'defcontext' [ 664.214829][T13022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1800'. [ 664.250849][T13022] vlan2: entered promiscuous mode [ 664.263771][T13022] gretap0: entered promiscuous mode [ 665.272997][T13037] overlayfs: failed to clone upperpath [ 666.280278][T13046] 9pnet: Could not find request transport: ;unix [ 666.574315][T13052] overlayfs: failed to resolve './file2': -2 [ 666.621182][T13052] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 667.486334][T13073] FAULT_INJECTION: forcing a failure. [ 667.486334][T13073] name failslab, interval 1, probability 0, space 0, times 0 [ 667.499051][T13073] CPU: 0 UID: 0 PID: 13073 Comm: syz.0.1815 Not tainted syzkaller #0 PREEMPT(full) [ 667.499076][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 667.499086][T13073] Call Trace: [ 667.499092][T13073] [ 667.499099][T13073] dump_stack_lvl+0x16c/0x1f0 [ 667.499122][T13073] should_fail_ex+0x512/0x640 [ 667.499143][T13073] ? __kmalloc_cache_noprof+0x5f/0x780 [ 667.499171][T13073] should_failslab+0xc2/0x120 [ 667.499191][T13073] __kmalloc_cache_noprof+0x72/0x780 [ 667.499214][T13073] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 667.499239][T13073] ? __v4l2_subdev_state_alloc+0x53/0x400 [ 667.499258][T13073] __v4l2_subdev_state_alloc+0x53/0x400 [ 667.499282][T13073] subdev_open+0xa6/0x540 [ 667.499305][T13073] v4l2_open+0x1d2/0x5e0 [ 667.499331][T13073] ? __pfx_v4l2_open+0x10/0x10 [ 667.499355][T13073] chrdev_open+0x234/0x6a0 [ 667.499376][T13073] ? __pfx_chrdev_open+0x10/0x10 [ 667.499397][T13073] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 667.499422][T13073] do_dentry_open+0x982/0x1530 [ 667.499440][T13073] ? __pfx_chrdev_open+0x10/0x10 [ 667.499465][T13073] vfs_open+0x82/0x3f0 [ 667.499490][T13073] path_openat+0x1de4/0x2cb0 [ 667.499517][T13073] ? __pfx_path_openat+0x10/0x10 [ 667.499537][T13073] ? __lock_acquire+0xb8a/0x1c90 [ 667.499557][T13073] do_filp_open+0x20b/0x470 [ 667.499576][T13073] ? __pfx_do_filp_open+0x10/0x10 [ 667.499613][T13073] ? alloc_fd+0x471/0x7d0 [ 667.499638][T13073] do_sys_openat2+0x11b/0x1d0 [ 667.499660][T13073] ? __pfx_do_sys_openat2+0x10/0x10 [ 667.499685][T13073] ? __fget_files+0x20e/0x3c0 [ 667.499707][T13073] __x64_sys_openat+0x174/0x210 [ 667.499730][T13073] ? __pfx___x64_sys_openat+0x10/0x10 [ 667.499752][T13073] ? ksys_write+0x1ac/0x250 [ 667.499777][T13073] do_syscall_64+0xcd/0xfa0 [ 667.499796][T13073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.499814][T13073] RIP: 0033:0x7f31d0f8df90 [ 667.499828][T13073] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 667.499845][T13073] RSP: 002b:00007f31d1e70b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 667.499863][T13073] RAX: ffffffffffffffda RBX: 0000000000086482 RCX: 00007f31d0f8df90 [ 667.499873][T13073] RDX: 0000000000086482 RSI: 00007f31d1e70c10 RDI: 00000000ffffff9c [ 667.499884][T13073] RBP: 00007f31d1e70c10 R08: 0000000000000000 R09: 0000000000000000 [ 667.499894][T13073] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 667.499904][T13073] R13: 00007f31d11e6038 R14: 00007f31d11e5fa0 R15: 00007fff69a20f28 [ 667.499929][T13073] [ 667.784657][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'. [ 667.813277][T13077] netlink: 15 bytes leftover after parsing attributes in process `syz.2.1816'. [ 668.717560][T13090] siw: device registration error -23 [ 669.748263][T13087] lo speed is unknown, defaulting to 1000 [ 670.200646][T13102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 671.166916][T13110] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 671.174769][T13110] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1824'. [ 671.195193][T13110] sz1: rxe_newlink: already configured on lo [ 671.643131][T13114] netlink: 'syz.7.1825': attribute type 3 has an invalid length. [ 672.962233][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1831'. [ 673.033852][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1831'. [ 673.469544][T13131] netlink: 'syz.3.1831': attribute type 7 has an invalid length. [ 673.529799][T13136] 9pnet: Could not find request transport: ;unix [ 673.901783][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 673.910906][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1834'. [ 673.970893][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1834'. [ 674.562854][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1836'. [ 675.531134][T13163] binder: BINDER_SET_CONTEXT_MGR already set [ 675.547182][T13163] binder: 13162:13163 ioctl 4018620d 200000000040 returned -16 [ 676.149399][T13185] 9pnet: Could not find request transport: ;unix [ 676.273326][ T980] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 676.285682][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1850'. [ 676.429043][ T980] usb 7-1: device descriptor read/64, error -71 [ 676.793316][ T980] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 676.933423][ T980] usb 7-1: device descriptor read/64, error -71 [ 677.143791][ T980] usb usb7-port1: attempt power cycle [ 677.417236][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 677.417253][ T30] audit: type=1400 audit(1764248880.978:1193): avc: denied { mount } for pid=13211 comm="syz.7.1854" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 677.503388][ T980] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 677.523854][ T980] usb 7-1: device descriptor read/8, error -71 [ 677.780245][ T980] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 677.906426][ T980] usb 7-1: device descriptor read/8, error -71 [ 678.154507][ T980] usb usb7-port1: unable to enumerate USB device [ 678.560408][T13234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.681373][ T30] audit: type=1400 audit(1764248883.228:1194): avc: denied { setattr } for pid=13242 comm="syz.3.1863" name="file0" dev="tmpfs" ino=2646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 679.742697][T13256] fuse: Unknown parameter 'f@gÏd' [ 680.632962][ T24] libceph: connect (1)[c::]:6789 error -101 [ 680.645487][ T5963] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 681.172444][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 681.212110][T13276] netlink: 'syz.6.1873': attribute type 3 has an invalid length. [ 681.347594][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 681.424157][ T5963] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 681.437509][T13267] ceph: No mds server is up or the cluster is laggy [ 681.451147][T13276] sctp: [Deprecated]: syz.6.1873 (pid 13276) Use of int in max_burst socket option deprecated. [ 681.451147][T13276] Use struct sctp_assoc_value instead [ 681.473225][ T5963] usb 1-1: config 1 has no interface number 1 [ 681.486365][ T5963] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 681.497483][ T24] libceph: connect (1)[c::]:6789 error -101 [ 681.509927][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 681.522168][ T5963] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 681.563607][ T5963] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 681.830866][ T5963] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.868501][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.880290][ T5963] usb 1-1: Product: syz [ 681.886854][ T5963] usb 1-1: Manufacturer: syz [ 681.892917][ T5963] usb 1-1: SerialNumber: syz [ 682.862384][ T30] audit: type=1326 audit(1764248886.418:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 682.898638][T13299] 9pnet: Could not find request transport: ;unix [ 682.906482][ T30] audit: type=1326 audit(1764248886.418:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 682.980207][ T30] audit: type=1326 audit(1764248886.418:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.038238][ T30] audit: type=1326 audit(1764248886.418:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.227094][ T30] audit: type=1326 audit(1764248886.418:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.250892][ T30] audit: type=1326 audit(1764248886.418:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.275885][ T30] audit: type=1326 audit(1764248886.418:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.303273][ T30] audit: type=1326 audit(1764248886.418:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.330145][ T30] audit: type=1326 audit(1764248886.418:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.333265][ T980] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 683.357761][ T30] audit: type=1326 audit(1764248886.418:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13294 comm="syz.7.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f501df8f749 code=0x7ffc0000 [ 683.388852][T13305] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 683.593292][ T980] usb 3-1: Using ep0 maxpacket: 8 [ 683.601476][ T980] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 683.645743][ T980] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 683.672117][ T980] usb 3-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 683.691911][ T980] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 683.701981][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.536147][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.553374][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.972781][ T5963] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 691.525388][ T5963] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 705.549109][ C0] sched: DL replenish lagged too much [ 710.115943][T10089] usb 3-1: USB disconnect, device number 44 [ 809.379792][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.397727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.969766][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.045085][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 820.343146][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 820.350132][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5963/1:b..l [ 820.358574][ C1] rcu: (detected by 1, t=10502 jiffies, g=52317, q=1218576 ncpus=2) [ 820.366636][ C1] task:kworker/1:6 state:R running task stack:21816 pid:5963 tgid:5963 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 820.381446][ C1] Workqueue: usb_hub_wq hub_event [ 820.386492][ C1] Call Trace: [ 820.389772][ C1] [ 820.392700][ C1] __schedule+0x1190/0x5de0 [ 820.397232][ C1] ? __pfx___schedule+0x10/0x10 [ 820.402087][ C1] ? mark_held_locks+0x49/0x80 [ 820.406833][ C1] preempt_schedule_irq+0x51/0x90 [ 820.411868][ C1] irqentry_exit+0x36/0x90 [ 820.416276][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 820.422233][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 820.427415][ C1] Code: e6 08 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 4b e9 0e 0f 82 74 02 00 00 8b 35 9a 7b e9 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 e6 08 12 0f 85 c7 02 00 00 48 83 c4 [ 820.447259][ C1] RSP: 0018:ffffc900050166f0 EFLAGS: 00000206 [ 820.453295][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c4760 RCX: 00000000de25dcd1 [ 820.461237][ C1] RDX: 0000000000000000 RSI: ffffffff8da06739 RDI: ffffffff8bf073c0 [ 820.469179][ C1] RBP: 0000000000000002 R08: 4dbed79954fb01fb R09: 0000000000000000 [ 820.477120][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 820.485061][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 820.493011][ C1] ? lock_acquire+0x179/0x350 [ 820.497660][ C1] page_ext_get+0x36/0x1a0 [ 820.502053][ C1] ? page_ext_get+0x25/0x1a0 [ 820.506619][ C1] __reset_page_owner+0x2b/0x1a0 [ 820.511531][ C1] __free_frozen_pages+0x7df/0x1160 [ 820.516701][ C1] ? mark_held_locks+0x49/0x80 [ 820.521444][ C1] __put_partials+0x130/0x170 [ 820.526111][ C1] qlist_free_all+0x4d/0x120 [ 820.530673][ C1] kasan_quarantine_reduce+0x195/0x1e0 [ 820.536102][ C1] __kasan_slab_alloc+0x69/0x90 [ 820.540923][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 820.546356][ C1] ? __kernfs_new_node+0xd2/0x8e0 [ 820.551355][ C1] ? __kernfs_new_node+0xd2/0x8e0 [ 820.556350][ C1] __kernfs_new_node+0xd2/0x8e0 [ 820.561172][ C1] ? kernfs_xattr_get+0x4b/0x60 [ 820.565995][ C1] ? __pfx___kernfs_new_node+0x10/0x10 [ 820.571430][ C1] ? find_held_lock+0x2b/0x80 [ 820.576085][ C1] ? kernfs_root+0xee/0x2a0 [ 820.580563][ C1] kernfs_new_node+0x13c/0x1e0 [ 820.585305][ C1] __kernfs_create_file+0x53/0x350 [ 820.590398][ C1] sysfs_add_file_mode_ns+0x207/0x3c0 [ 820.595745][ C1] internal_create_group+0x578/0xf30 [ 820.601007][ C1] ? __pfx_internal_create_group+0x10/0x10 [ 820.606789][ C1] ? kernfs_create_link+0x1bd/0x240 [ 820.611960][ C1] internal_create_groups+0x9d/0x150 [ 820.617222][ C1] device_add+0xf30/0x1aa0 [ 820.621613][ C1] ? __pfx_device_add+0x10/0x10 [ 820.626446][ C1] ? snd_info_create_entry+0x335/0x430 [ 820.631877][ C1] snd_card_register+0x333/0x7c0 [ 820.636787][ C1] ? __pfx_snd_card_register+0x10/0x10 [ 820.642212][ C1] ? snd_usb_create_mixer+0xceb/0x1ab0 [ 820.647648][ C1] ? read_tsc+0x9/0x20 [ 820.651690][ C1] ? find_held_lock+0x2b/0x80 [ 820.656340][ C1] try_to_register_card+0x1d6/0x3a0 [ 820.661517][ C1] ? __pfx_try_to_register_card+0x10/0x10 [ 820.667209][ C1] ? usb_driver_claim_interface+0x1f7/0x400 [ 820.673098][ C1] ? snd_usb_create_stream.isra.0+0x3d3/0x550 [ 820.679138][ C1] usb_audio_probe+0xb6b/0x3e80 [ 820.683975][ C1] ? __pfx_usb_audio_probe+0x10/0x10 [ 820.689235][ C1] ? mark_held_locks+0x49/0x80 [ 820.693968][ C1] ? mark_held_locks+0x49/0x80 [ 820.698699][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 820.704481][ C1] usb_probe_interface+0x303/0xa40 [ 820.709569][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 820.715185][ C1] really_probe+0x241/0xa90 [ 820.719660][ C1] __driver_probe_device+0x1de/0x440 [ 820.724915][ C1] driver_probe_device+0x4c/0x1b0 [ 820.729910][ C1] __device_attach_driver+0x1df/0x310 [ 820.735251][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 820.741113][ C1] bus_for_each_drv+0x159/0x1e0 [ 820.745937][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 820.751284][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 820.756450][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 820.762241][ C1] __device_attach+0x1e4/0x4b0 [ 820.766989][ C1] ? __pfx___device_attach+0x10/0x10 [ 820.772267][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 820.777453][ C1] bus_probe_device+0x17f/0x1c0 [ 820.782285][ C1] device_add+0x1148/0x1aa0 [ 820.786763][ C1] ? __pfx_device_add+0x10/0x10 [ 820.791592][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 820.796957][ C1] usb_set_configuration+0x1187/0x1e20 [ 820.802413][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 820.808458][ C1] usb_generic_driver_probe+0xb1/0x110 [ 820.813894][ C1] usb_probe_device+0xef/0x3e0 [ 820.818632][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 820.823982][ C1] really_probe+0x241/0xa90 [ 820.828458][ C1] __driver_probe_device+0x1de/0x440 [ 820.833712][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 820.839145][ C1] driver_probe_device+0x4c/0x1b0 [ 820.844143][ C1] __device_attach_driver+0x1df/0x310 [ 820.849496][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 820.855358][ C1] bus_for_each_drv+0x159/0x1e0 [ 820.860188][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 820.865535][ C1] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 820.871319][ C1] __device_attach+0x1e4/0x4b0 [ 820.876052][ C1] ? __pfx___device_attach+0x10/0x10 [ 820.881311][ C1] bus_probe_device+0x17f/0x1c0 [ 820.886139][ C1] device_add+0x1148/0x1aa0 [ 820.890614][ C1] ? __pfx_device_add+0x10/0x10 [ 820.895440][ C1] ? usb_new_device+0xb6c/0x1a60 [ 820.900351][ C1] usb_new_device+0xd07/0x1a60 [ 820.905099][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 820.910103][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 820.915275][ C1] ? mark_held_locks+0x49/0x80 [ 820.920018][ C1] hub_event+0x2f34/0x4fe0 [ 820.924444][ C1] ? __pfx_hub_event+0x10/0x10 [ 820.929184][ C1] ? interval_tree_remove+0x860/0xee0 [ 820.934544][ C1] ? rcu_is_watching+0x12/0xc0 [ 820.939890][ C1] process_one_work+0x9cf/0x1b70 [ 820.944804][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 820.950066][ C1] ? __pfx_process_one_work+0x10/0x10 [ 820.955414][ C1] ? assign_work+0x1a0/0x250 [ 820.959976][ C1] worker_thread+0x6c8/0xf10 [ 820.964540][ C1] ? __kthread_parkme+0x19e/0x250 [ 820.969547][ C1] ? __pfx_worker_thread+0x10/0x10 [ 820.974626][ C1] kthread+0x3c5/0x780 [ 820.978665][ C1] ? __pfx_kthread+0x10/0x10 [ 820.983224][ C1] ? rcu_is_watching+0x12/0xc0 [ 820.987962][ C1] ? __pfx_kthread+0x10/0x10 [ 820.992522][ C1] ret_from_fork+0x675/0x7d0 [ 820.997082][ C1] ? __pfx_kthread+0x10/0x10 [ 821.001642][ C1] ret_from_fork_asm+0x1a/0x30 [ 821.006395][ C1]