last executing test programs: 4m10.694776505s ago: executing program 4 (id=167): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x17, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8]}}]}}]}, 0x8c}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000), 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f00000000c0)={'tunl0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f00003a2000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = open(&(0x7f0000000100)='./file0\x00', 0x3c1181, 0xb2) openat$cgroup_ro(r7, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = fsopen(0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, 0x0, 0x0) fdatasync(0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) signalfd4(r9, &(0x7f0000000040)={[0x8001]}, 0x8, 0x800) 4m7.271180144s ago: executing program 4 (id=175): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 4m7.087655772s ago: executing program 4 (id=178): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xffff}) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) listen(r1, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) 4m6.18887371s ago: executing program 4 (id=180): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (fail_nth: 2) 4m5.767951319s ago: executing program 4 (id=183): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_TSC(0x1a, 0x1) unshare(0x22020400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000340)='cgroup\x00'}, 0x30) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x45}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c000000030601040000fcffffff0000070000080900020073797a32000000000500010007"], 0x4c}}, 0x0) 4m4.667660128s ago: executing program 4 (id=188): ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x141e82) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) openat$vimc0(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') capset(&(0x7f0000000340)={0x20071026}, &(0x7f00000000c0)={0x0, 0x9, 0x5f22, 0x0, 0x2000000, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 4m4.423408064s ago: executing program 32 (id=188): ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x141e82) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) openat$vimc0(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='sessionid\x00') capset(&(0x7f0000000340)={0x20071026}, &(0x7f00000000c0)={0x0, 0x9, 0x5f22, 0x0, 0x2000000, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 3m1.794080507s ago: executing program 5 (id=372): sched_setscheduler(0xffffffffffffffff, 0xa4bdac7fe0d46c73, &(0x7f0000000380)=0x24) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_connect={0xd}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = open(&(0x7f0000000540)='./file1\x00', 0x10040, 0xc8) fcntl$notify(r4, 0x402, 0x15) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="5800000000000000000000000000000095000000000000002d23a32b985dc1b96ee09f3fc2bb2c5886b14445df9cf556f98068a734d3d3bfd423ed"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) statfs(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)=""/140) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4010bc08, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}) r7 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01) ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"]) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, &(0x7f0000001440)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2m59.214078187s ago: executing program 5 (id=386): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000011) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0400282060"], 0x7) (async) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r3, 0x406, r2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @end, @cipso={0x86, 0x29, 0x2, [{0x7, 0x11, "416c215396ec6e73ace7a6ca0e5039"}, {0x5, 0xc, "34ead10074e64408be20"}, {0x7, 0x6, "e2d170f8"}]}]}}}}}}}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETAF(r7, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x3f, 0x0, "2a630f5e00c923cc"}) 2m57.7802479s ago: executing program 5 (id=391): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x3f, 0x0, "2a630f5e00c923cc"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2, 0x0}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, 0x0, 0x0, 0xfffffffd, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m55.493595555s ago: executing program 5 (id=395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000e038bd7606f048c2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8, @ANYRESOCT=r0, @ANYBLOB="80957b32976492b7851ea8af0c505f17b291d76d48ca404f4861c852c1d112427187d007853f81440f30052c755f8cb29dd230a4d9f4fe84c00db55490a7d0988afbf585a15be642c29edd2dddbe8dca53edf2a29313f0d61ec15a13efb0a4ef21e1ad12a15ad05ce69da12f8cc54a1c2df4359c02744068a1459376ac50c1798242f100d8f678d2f7b423"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) alarm(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000009800)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50, 0xffffffffffffffda, 0x2000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsync(r3) socket$inet6_dccp(0xa, 0x6, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)=""/117, 0x75}], 0x1, 0x68, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000800000024000000ff0f000004830000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYBLOB="81830000"], 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x20000002) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) read$char_usb(r5, &(0x7f0000000000)=""/178, 0xb2) 2m55.086672194s ago: executing program 5 (id=397): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0x2, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 2m52.29211912s ago: executing program 5 (id=405): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd9, 0x3b}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x100}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) 2m52.154934816s ago: executing program 33 (id=405): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xd9, 0x3b}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') readv(r5, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/256, 0x100}], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@private0}, @NHA_OIF={0x8, 0x5, r8}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) 1m29.07538764s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 1m15.195302703s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 52.032378902s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 34.159364062s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 17.622283323s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 8.244089574s ago: executing program 1 (id=888): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x10) write$P9_RVERSION(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1500000065ffff01"], 0x15) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.413141869s ago: executing program 1 (id=889): r0 = socket$inet(0x2, 0x3, 0x4008001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000700)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) r10 = userfaultfd(0x80001) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)) 6.379412894s ago: executing program 1 (id=891): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_io_uring_setup(0x7d0e, 0x0, 0x0, &(0x7f0000000140)) syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902780003010000000904000000010100000a24010000000201020a2407000000008e781f090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000824020307030000072401000000000905820908"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect$uac1(0x6, 0x93, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xbb, 0x0, 0x28, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x301, 0x5, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x10, 0x3, 'R', '8'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xf, 0x4, 0x6, 0x9e}, @as_header={0x7, 0x24, 0x1, 0x39, 0x6, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xf2, 0x7, {0x7, 0x25, 0x1, 0x2, 0xa5, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x7, 0x37, {0x7, 0x25, 0x1, 0x80, 0x3, 0xfffe}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0xb, 0x80, 0xe, 0x20, 0x5}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x40161, 0xffffffffffffffff, 0x2, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x6f) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="002205000000ab"], 0x0}, 0x0) 6.170542594s ago: executing program 3 (id=893): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@ld, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) delete_module(0x0, 0x0) 6.071920478s ago: executing program 3 (id=894): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 5.392361159s ago: executing program 3 (id=895): r0 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.128424412s ago: executing program 3 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 5.093687962s ago: executing program 3 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207641a, 0x8000, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)={0xb0, 0x0, 0x48, [{{0x2, 0x0, 0x100000001, 0xffffffffffff70ea, 0x100, 0x7, {0x3, 0x7, 0xfffffffffffffff7, 0xffffffffffbffff9, 0x1, 0x0, 0x7, 0x0, 0x3, 0x2000, 0x3, r2, r3, 0x8, 0x9}}, {0x4, 0x100000000, 0x1, 0xff, '.'}}]}, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000300)=""/142, 0x8e) 4.691992446s ago: executing program 3 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 4.051642491s ago: executing program 34 (id=902): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 3.770181668s ago: executing program 1 (id=907): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0}, 0x0) 3.592136289s ago: executing program 0 (id=461): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1/file2\x00', 0x4, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1/file2\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) poll(&(0x7f0000000780)=[{r1, 0x400}], 0x1, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0xfffffffe, '\x00', @p_u32=&(0x7f0000000180)}}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @any, 0x4, 0x1}, 0xe) 2.463908819s ago: executing program 2 (id=909): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x43}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x1269, &(0x7f0000001080)) 2.394074898s ago: executing program 2 (id=910): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd0000000000"], 0x5c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10810}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) 1.66901169s ago: executing program 1 (id=911): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000055c0), 0x200, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 1.570990787s ago: executing program 6 (id=912): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@volatile, @const={0x0, 0x0, 0x0, 0xa, 0x1}]}}, &(0x7f0000000b00)=""/209, 0x32, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x541402, 0x10, 0x15}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 689.610094ms ago: executing program 6 (id=913): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 639.084041ms ago: executing program 6 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x502, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 539.906191ms ago: executing program 6 (id=915): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 512.847318ms ago: executing program 6 (id=916): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x77, r1}) 397.110966ms ago: executing program 2 (id=917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x1c, 0x1, 0x1, 0xa05, 0x0, 0x0, {}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x0) 316.014638ms ago: executing program 6 (id=918): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x800}, {@in, 0x0, 0x32}, @in=@local, {0x3, 0x6}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 315.485059ms ago: executing program 2 (id=919): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000026c0)=@delchain={0x624, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x5f4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x5e8, 0x6, [@m_simple={0x188, 0x1f, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x2, 0x1, 0x2, 0x8}}, @TCA_DEF_DATA={0xd, 0x3, '@-^[\xa5&,.\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x80000001, 0xfffffffffffffffe, 0x6, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0x401, 0x495, 0x20000000, 0xc6, 0x62c}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x1, 0x10000000, 0x4, 0x8}}, @TCA_DEF_DATA={0xb, 0x3, 'j\xbf!*{$\x00'}]}, {0xd5, 0x6, "bb56072c27c5e2984fb9b39740c7dea2e6372a168bf1fdb8ecb6019c9f5db834fcaca18620641b7aab2922f69d2f9b062f5ec4be8a5a603fe7236ffd67f60e9e007b34e0f9cb58fc8855dae5289e4e856559f64bc5a1c5683263937fdd088e5f34874e0d2d2273a7a09810d9042b32fb69223c74e88c41fda5268c22a3107d32ee49d3a99665178abfde24d27a872b23ece9d09c9560070a6e3cca383ccb4d1a6d7c302ab3ee820e67d26e78f72566a2f9765698d783e6c14d8da6156473bc39143eaba66c1921f94f19f65bc88b127c0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x134, 0x3, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb7e}]}, {0xf5, 0x6, "b4f5f8a000aed611d1e3ee1aaa84601c97299db7511af811242f5e599e70462ff947d7fce8171ca76d6272e5926e4bcc41c5f2a45eda585981ca0de6f00b6a83a630a32eb3d933702dde61376ab26952f74f090fb6858f97715363bfca363004ef43db3a48e84090d7517b700dc6a2a2f94e7329147f25670ca37779fb3bb34630b673bfa93845abd7c41a11e2c7d51cd033af07fdedab1b0a4fd3289168734a438364c97d0791494427d5c5c48b1f99b2933a263cfb4ca5c4ae41bb0d4ad806597b90b1569a91f0af9997eb0a37a98b616eeb9b0e0d88e3faa90e480ed36ed0731503f2a4bda6e9158fad7756a073b2ce"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_csum={0x104, 0x8, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffff800, 0xdd, 0x10000000, 0x4}, 0x2b}}]}, {0xb9, 0x6, "4c8530b4f61970da689c06a26312df6c492da62a443b3e60d222e666e87033e2acd998073932893a4243abe9e871015575017360a9830ecfb2232d104190c1680b2d7935db3e98eeb8fda548b5bb513959cfd9a3f35a136542121b41bf2eb5641dcf351162a085dc2dd873e5ec7b1fdb28b6602a6e7433e2f05c89ca536a736514819f81c14d1c7e4e62cd25c809a1b38716d82e2b023799c6fc2f08ae6e74a26bcce4f200ce8668bcfdb65e7787481db1ee75ef04"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x178, 0xc, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xff, 0x1, 0x8, 0x6}, @broadcast, @rand_addr=0x64010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x20000000, 0x1ff, 0x800}, @broadcast, @multicast1, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x2, 0x6, 0x5}, @empty, @multicast1, 0xff000000, 0x1}}]}, {0xd5, 0x6, "256c3eb62a3c42cccec027988ad7149d48e69552fccd245cb90ebe3ebe6f36a14b83b65bb651bed880b4bf769cb0b5b18dabcc7d7a108e10124a104ef74333b28537655fecc96352477fe91863d2bd9822da8b57752f8d22cb68e4c4a79e0bba55acd2df7f410043b083dc74a0d99332f2ace4931a9efd89f8b8628f63b4791715c76fbcd195be1b8852f5b1f1e7b1296b3dd78041c0da1131303d605504dce4f02686d6875be1f7027e6e45a30376aff6097249b0111683261e334758927ff3e22f0a847fd35c396b7a43571a3d5b77aa"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_bpf={0x78, 0x1b, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x3, 0x6, 0x4, 0x7}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x7, 0x20000000, 0x0, 0x1}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0x34, 0x19, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x624}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 223.089738ms ago: executing program 2 (id=920): open(0x0, 0x1c1142, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000000, 0xce9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_PROPBIT(r2, 0x5501, 0x0) write$input_event(r2, &(0x7f00000005c0), 0x200005d8) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe80001d0000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) 77.707926ms ago: executing program 1 (id=921): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 2 (id=922): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000716f00000000000033"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) kernel console output (not intermixed with test programs): .2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 246.306166][ T8693] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.717190][ T965] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 246.726230][ T965] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input14 [ 246.760674][ T29] audit: type=1326 audit(246.028:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 246.822878][ T29] audit: type=1326 audit(246.028:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 246.960248][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 246.968647][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.980210][ T965] input: failed to attach handler kbd to device input14, error: -5 [ 246.991641][ T29] audit: type=1326 audit(246.028:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.017622][ T29] audit: type=1326 audit(246.028:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.040204][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.046327][ T29] audit: type=1326 audit(246.028:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.069057][ T29] audit: type=1326 audit(246.028:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.091801][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.098005][ T29] audit: type=1326 audit(246.028:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.120576][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.131818][ T29] audit: type=1326 audit(246.028:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8659 comm="syz.2.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f0d7a17e719 code=0x7ffc0000 [ 247.182651][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.193446][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.201527][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.211116][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.226922][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 247.234186][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.246582][ T965] usb 3-1: USB disconnect, device number 20 [ 247.664352][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.674798][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 247.674840][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 247.969638][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.037989][ T8697] chnl_net:caif_netlink_parms(): no params data found [ 248.330869][ T8745] FAULT_INJECTION: forcing a failure. [ 248.330869][ T8745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.345671][ T8745] CPU: 1 UID: 0 PID: 8745 Comm: syz.6.583 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 248.356269][ T8745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.366334][ T8745] Call Trace: [ 248.369618][ T8745] [ 248.372546][ T8745] dump_stack_lvl+0x16c/0x1f0 [ 248.377232][ T8745] should_fail_ex+0x497/0x5b0 [ 248.381920][ T8745] strncpy_from_user+0x3b/0x2c0 [ 248.386774][ T8745] ? rcu_is_watching+0x12/0xc0 [ 248.391555][ T8745] strncpy_from_user_nofault+0x7f/0x180 [ 248.397116][ T8745] bpf_probe_read_compat_str+0xf1/0x170 [ 248.402682][ T8745] bpf_prog_e42f6260c1b72fb3+0x3e/0x40 [ 248.408148][ T8745] bpf_trace_run2+0x231/0x590 [ 248.412841][ T8745] ? __pfx_bpf_trace_run2+0x10/0x10 [ 248.418054][ T8745] ? v4l2_ctrl_handler_free+0x127/0x930 [ 248.423607][ T8745] ? kasan_quarantine_put+0x10a/0x240 [ 248.428987][ T8745] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.434205][ T8745] kfree+0x258/0x4b0 [ 248.438106][ T8745] ? v4l2_ctrl_handler_free+0x127/0x930 [ 248.443661][ T8745] v4l2_ctrl_handler_free+0x127/0x930 [ 248.449043][ T8745] ? mutex_is_locked+0x12/0x50 [ 248.453818][ T8745] ? __pfx_vim2m_release+0x10/0x10 [ 248.458938][ T8745] vim2m_release+0xaa/0x170 [ 248.463453][ T8745] v4l2_release+0x232/0x460 [ 248.467969][ T8745] ? __pfx_v4l2_release+0x10/0x10 [ 248.473000][ T8745] __fput+0x3f6/0xb60 [ 248.476987][ T8745] __fput_sync+0x45/0x50 [ 248.481219][ T8745] __x64_sys_close+0x86/0x100 [ 248.485888][ T8745] do_syscall_64+0xcd/0x250 [ 248.490380][ T8745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.496265][ T8745] RIP: 0033:0x7f0eb0f7e719 [ 248.500667][ T8745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.520259][ T8745] RSP: 002b:00007f0eb1e17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 248.528655][ T8745] RAX: ffffffffffffffda RBX: 00007f0eb1136058 RCX: 00007f0eb0f7e719 [ 248.536609][ T8745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 248.544564][ T8745] RBP: 00007f0eb1e17090 R08: 0000000000000000 R09: 0000000000000000 [ 248.552528][ T8745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.560490][ T8745] R13: 0000000000000000 R14: 00007f0eb1136058 R15: 00007ffff7c6af68 [ 248.568462][ T8745] [ 249.079591][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.094150][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.105748][ T8697] bridge_slave_0: entered allmulticast mode [ 249.126282][ T8697] bridge_slave_0: entered promiscuous mode [ 249.454331][ T5837] Bluetooth: hci0: command tx timeout [ 249.599136][ T968] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 249.668754][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.684320][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.769006][ T8697] bridge_slave_1: entered allmulticast mode [ 249.780631][ T8697] bridge_slave_1: entered promiscuous mode [ 250.770294][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 250.770310][ T29] audit: type=1400 audit(4345.501:517): avc: denied { sqpoll } for pid=8774 comm="syz.2.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 250.771843][ T8780] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 251.306553][ T11] bridge_slave_1: left allmulticast mode [ 251.312283][ T11] bridge_slave_1: left promiscuous mode [ 251.318185][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.346274][ T11] bridge_slave_0: left allmulticast mode [ 251.352059][ T11] bridge_slave_0: left promiscuous mode [ 251.356233][ T968] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 251.361226][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.376867][ T968] usb 2-1: can't read configurations, error -71 [ 251.559162][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 252.377369][ T29] audit: type=1400 audit(4347.351:518): avc: denied { mounton } for pid=8799 comm="syz.1.590" path="/127/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 252.438828][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.456725][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.467707][ T11] bond0 (unregistering): Released all slaves [ 252.796230][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.932452][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.197454][ T8818] FAULT_INJECTION: forcing a failure. [ 253.197454][ T8818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.211018][ T8818] CPU: 0 UID: 0 PID: 8818 Comm: syz.3.595 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 253.221621][ T8818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.231682][ T8818] Call Trace: [ 253.234965][ T8818] [ 253.237898][ T8818] dump_stack_lvl+0x16c/0x1f0 [ 253.242584][ T8818] should_fail_ex+0x497/0x5b0 [ 253.247272][ T8818] _copy_to_user+0x32/0xd0 [ 253.251700][ T8818] simple_read_from_buffer+0xd0/0x160 [ 253.257082][ T8818] proc_fail_nth_read+0x198/0x270 [ 253.262107][ T8818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.267645][ T8818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.273177][ T8818] vfs_read+0x1df/0xbe0 [ 253.277325][ T8818] ? mark_held_locks+0x9f/0xe0 [ 253.282073][ T8818] ? __pfx_vfs_read+0x10/0x10 [ 253.286738][ T8818] ? irqentry_exit+0x3b/0x90 [ 253.291320][ T8818] ? lockdep_hardirqs_on+0x7c/0x110 [ 253.296517][ T8818] ksys_read+0x12f/0x260 [ 253.300749][ T8818] ? __pfx_ksys_read+0x10/0x10 [ 253.305507][ T8818] do_syscall_64+0xcd/0x250 [ 253.309995][ T8818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.315896][ T8818] RIP: 0033:0x7f447757d15c [ 253.320293][ T8818] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 253.339884][ T8818] RSP: 002b:00007f447843b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.348282][ T8818] RAX: ffffffffffffffda RBX: 00007f4477736058 RCX: 00007f447757d15c [ 253.356252][ T8818] RDX: 000000000000000f RSI: 00007f447843b0a0 RDI: 000000000000000b [ 253.364213][ T8818] RBP: 00007f447843b090 R08: 0000000000000000 R09: 0000000000000000 [ 253.372172][ T8818] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.380132][ T8818] R13: 0000000000000000 R14: 00007f4477736058 R15: 00007fffcc5308a8 [ 253.388102][ T8818] [ 253.391174][ C0] vkms_vblank_simulate: vblank timer overrun [ 253.459613][ T8826] FAULT_INJECTION: forcing a failure. [ 253.459613][ T8826] name failslab, interval 1, probability 0, space 0, times 0 [ 253.517305][ T8826] CPU: 1 UID: 0 PID: 8826 Comm: syz.6.597 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 253.527913][ T8826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.537967][ T8826] Call Trace: [ 253.541267][ T8826] [ 253.544203][ T8826] dump_stack_lvl+0x16c/0x1f0 [ 253.548886][ T8826] should_fail_ex+0x497/0x5b0 [ 253.553573][ T8826] ? fs_reclaim_acquire+0xae/0x150 [ 253.558697][ T8826] should_failslab+0xc2/0x120 [ 253.563380][ T8826] kmem_cache_alloc_node_noprof+0x71/0x310 [ 253.569190][ T8826] ? __alloc_skb+0x2b1/0x380 [ 253.573788][ T8826] __alloc_skb+0x2b1/0x380 [ 253.578201][ T8826] ? __pfx___alloc_skb+0x10/0x10 [ 253.583135][ T8826] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 253.589133][ T8826] netlink_alloc_large_skb+0x69/0x130 [ 253.594514][ T8826] netlink_sendmsg+0x689/0xd70 [ 253.599282][ T8826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.604590][ T8826] ____sys_sendmsg+0xaaf/0xc90 [ 253.609362][ T8826] ? copy_msghdr_from_user+0x10b/0x160 [ 253.614820][ T8826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.620128][ T8826] ? __pfx___lock_acquire+0x10/0x10 [ 253.625333][ T8826] ___sys_sendmsg+0x135/0x1e0 [ 253.630020][ T8826] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.635229][ T8826] ? lock_acquire+0x2f/0xb0 [ 253.639720][ T8826] ? __fget_files+0x40/0x3f0 [ 253.644310][ T8826] ? fdget+0x176/0x210 [ 253.648372][ T8826] __sys_sendmsg+0x117/0x1f0 [ 253.652954][ T8826] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.658056][ T8826] ? __fget_files+0x244/0x3f0 [ 253.662740][ T8826] do_syscall_64+0xcd/0x250 [ 253.667232][ T8826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.673122][ T8826] RIP: 0033:0x7f0eb0f7e719 [ 253.677524][ T8826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.697120][ T8826] RSP: 002b:00007f0eb1e17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.705519][ T8826] RAX: ffffffffffffffda RBX: 00007f0eb1136058 RCX: 00007f0eb0f7e719 [ 253.713475][ T8826] RDX: 0000000004000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 253.721429][ T8826] RBP: 00007f0eb1e17090 R08: 0000000000000000 R09: 0000000000000000 [ 253.729379][ T8826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.737333][ T8826] R13: 0000000000000001 R14: 00007f0eb1136058 R15: 00007ffff7c6af68 [ 253.745297][ T8826] [ 253.752512][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 253.790029][ T8697] team0: Port device team_slave_0 added [ 254.178766][ T8697] team0: Port device team_slave_1 added [ 254.216212][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.226759][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.252677][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.268004][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.289643][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.297822][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.323695][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.358819][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.386056][ T8836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.394226][ T8836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.402456][ T8836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.408467][ T8836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.414461][ T8836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 254.440915][ T8836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 255.287918][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.295642][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.213879][ T8863] tty tty32: ldisc open failed (-12), clearing slot 31 [ 256.230457][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 256.471630][ T5837] Bluetooth: hci0: command 0x041b tx timeout [ 256.477746][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 256.483826][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 256.616651][ T8697] hsr_slave_0: entered promiscuous mode [ 256.789108][ T8697] hsr_slave_1: entered promiscuous mode [ 256.830608][ T8697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.844674][ T8697] Cannot create hsr debugfs directory [ 257.594850][ T29] audit: type=1400 audit(4351.971:519): avc: denied { remount } for pid=8871 comm="syz.6.605" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.954995][ T11] hsr_slave_0: left promiscuous mode [ 258.460086][ T11] hsr_slave_1: left promiscuous mode [ 258.519058][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.527149][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.560004][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 258.560363][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.596330][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.613273][ T11] veth1_macvtap: left promiscuous mode [ 258.618867][ T11] veth0_macvtap: left promiscuous mode [ 258.624575][ T11] veth1_vlan: left promiscuous mode [ 258.630345][ T11] veth0_vlan: left promiscuous mode [ 259.503592][ T11] team0 (unregistering): Port device team_slave_1 removed [ 259.596890][ T11] team0 (unregistering): Port device team_slave_0 removed [ 259.690780][ T8914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.614'. [ 260.630091][ T54] Bluetooth: hci0: command 0x041b tx timeout [ 260.920396][ T968] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 261.102678][ T968] usb 3-1: Using ep0 maxpacket: 16 [ 261.119184][ T968] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 261.130374][ T968] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.151596][ T968] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.276873][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.310152][ T968] usb 3-1: Product: syz [ 261.319200][ T968] usb 3-1: Manufacturer: syz [ 261.334532][ T968] usb 3-1: SerialNumber: syz [ 261.527097][ T8697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.566556][ T8697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.628854][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.727179][ T8697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.808343][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.897894][ T8697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.927671][ T968] usb 3-1: 0:2 : does not exist [ 262.017624][ T968] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 262.038244][ T968] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 262.053248][ T968] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 262.142555][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 262.348111][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.1.621'. [ 262.504548][ T968] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 262.593435][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.607466][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.619678][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.626782][ T6778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.649545][ T968] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5) [ 262.671506][ T968] usb 3-1: USB disconnect, device number 21 [ 262.702055][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.709157][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.726861][ T5823] Bluetooth: hci0: command 0x041b tx timeout [ 262.821916][ T7080] udevd[7080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 263.011769][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.210135][ T8220] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 263.344676][ T8697] veth0_vlan: entered promiscuous mode [ 263.393707][ T8697] veth1_vlan: entered promiscuous mode [ 263.428047][ T8697] veth0_macvtap: entered promiscuous mode [ 263.436661][ T8697] veth1_macvtap: entered promiscuous mode [ 263.449646][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.467126][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.477731][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.489936][ T8220] usb 2-1: Using ep0 maxpacket: 32 [ 263.496374][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.506877][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.517784][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.519725][ T8220] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 263.529913][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.537679][ T8220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.552739][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.555663][ T8220] usb 2-1: Product: syz [ 263.567448][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.570416][ T8220] usb 2-1: Manufacturer: syz [ 263.581801][ T8220] usb 2-1: SerialNumber: syz [ 263.584444][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.610729][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.620958][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.624014][ T8220] usb 2-1: config 0 descriptor?? [ 263.636400][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.638352][ T8220] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 263.646554][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.663268][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.673725][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.684304][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.695303][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.708054][ T8697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.717692][ T8697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.726996][ T8697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.738296][ T8697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.815096][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.832882][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.869972][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.878432][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.100548][ T968] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 264.252752][ T968] usb 3-1: Using ep0 maxpacket: 8 [ 264.259195][ T968] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 264.267437][ T968] usb 3-1: config 0 has no interface number 0 [ 264.273682][ T968] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 264.282873][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.294352][ T968] usb 3-1: config 0 descriptor?? [ 264.410284][ T968] viperboard 3-1:0.143: version 0.00 found at bus 003 address 022 [ 264.423714][ T968] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 264.439898][ T968] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 264.616473][ T5870] usb 3-1: USB disconnect, device number 22 [ 264.732395][ T8220] gspca_ov534_9: reg_w failed -110 [ 265.350215][ T8220] gspca_ov534_9: Unknown sensor 0000 [ 265.350488][ T8220] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 265.444456][ T8497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.495781][ T9011] xt_TCPMSS: Only works on TCP SYN packets [ 267.461837][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.470612][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.478875][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.487222][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.494688][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.502358][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.647769][ T8220] usb 2-1: USB disconnect, device number 25 [ 268.154291][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 268.287566][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.298601][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.336699][ T9016] bridge_slave_0: entered allmulticast mode [ 268.356797][ T9016] bridge_slave_0: entered promiscuous mode [ 268.400320][ T8497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.417077][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.425027][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.434824][ T5874] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 268.446071][ T9016] bridge_slave_1: entered allmulticast mode [ 268.453115][ T9016] bridge_slave_1: entered promiscuous mode [ 268.491879][ T8497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.516836][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.551172][ T8497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.565740][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.600069][ T5874] usb 2-1: device descriptor read/64, error -71 [ 268.628748][ T9016] team0: Port device team_slave_0 added [ 268.636401][ T9016] team0: Port device team_slave_1 added [ 268.659125][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.667170][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.698403][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.840102][ T5874] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 268.990049][ T5874] usb 2-1: device descriptor read/64, error -71 [ 269.031631][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.039066][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.065154][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.141796][ T5874] usb usb2-port1: attempt power cycle [ 269.151483][ T9016] hsr_slave_0: entered promiscuous mode [ 269.159356][ T9016] hsr_slave_1: entered promiscuous mode [ 269.168178][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.175957][ T9016] Cannot create hsr debugfs directory [ 269.187861][ T8497] bridge_slave_1: left allmulticast mode [ 269.194540][ T8497] bridge_slave_1: left promiscuous mode [ 269.207460][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.222947][ T8497] bridge_slave_0: left allmulticast mode [ 269.228669][ T8497] bridge_slave_0: left promiscuous mode [ 269.238322][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.399958][ T8220] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 269.490980][ T5874] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 269.512674][ T5874] usb 2-1: device descriptor read/8, error -71 [ 269.562995][ T8220] usb 3-1: Using ep0 maxpacket: 8 [ 269.569360][ T8220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.579492][ T8220] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.588649][ T8220] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 269.597875][ T5823] Bluetooth: hci0: command tx timeout [ 269.598352][ T8497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.604600][ T8220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.622256][ T8220] usb 3-1: config 0 descriptor?? [ 269.627701][ T8497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.643128][ T8497] bond0 (unregistering): Released all slaves [ 269.750206][ T5874] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 269.780496][ T5874] usb 2-1: device descriptor read/8, error -71 [ 269.895477][ T5874] usb usb2-port1: unable to enumerate USB device [ 269.918795][ T8497] hsr_slave_0: left promiscuous mode [ 269.925695][ T8497] hsr_slave_1: left promiscuous mode [ 269.935555][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.943253][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.951966][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.964475][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.986776][ T8497] veth1_macvtap: left promiscuous mode [ 269.994533][ T8497] veth0_macvtap: left promiscuous mode [ 270.004572][ T8497] veth1_vlan: left promiscuous mode [ 270.010063][ T8497] veth0_vlan: left promiscuous mode [ 270.288654][ T8497] team0 (unregistering): Port device team_slave_1 removed [ 270.321573][ T8497] team0 (unregistering): Port device team_slave_0 removed [ 271.000510][ T9077] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 271.447176][ T9016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.475845][ T9016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.577967][ T9016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.591402][ T9016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.683795][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.784735][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.941141][ T9016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.951651][ T9016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.008258][ T5823] Bluetooth: hci0: command tx timeout [ 272.032419][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.039526][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.053075][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.060183][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.177535][ T965] usb 3-1: USB disconnect, device number 23 [ 272.260302][ T8220] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 272.309206][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.419765][ T9093] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.428490][ T9093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.436809][ T9093] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.444019][ T9093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 272.450545][ T9093] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.478708][ T9093] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 272.485445][ T8220] usb 2-1: Using ep0 maxpacket: 16 [ 272.502332][ T8220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.516039][ T8220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.835152][ T8220] usb 2-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 272.844287][ T8220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.881251][ T8220] usb 2-1: config 0 descriptor?? [ 272.897186][ T9016] veth0_vlan: entered promiscuous mode [ 272.928055][ T9016] veth1_vlan: entered promiscuous mode [ 273.012288][ T9016] veth0_macvtap: entered promiscuous mode [ 273.024079][ T29] audit: type=1400 audit(4368.001:520): avc: denied { getattr } for pid=9109 comm="syz.6.646" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 273.066376][ T9016] veth1_macvtap: entered promiscuous mode [ 273.126588][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.154376][ T8220] apple 0003:05AC:027B.000D: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.1-1/input0 [ 273.224756][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.224859][ T965] usb 2-1: USB disconnect, device number 30 [ 273.258206][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.278971][ T29] audit: type=1400 audit(4368.231:521): avc: denied { create } for pid=9130 comm="syz.6.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 273.285137][ T9131] FAULT_INJECTION: forcing a failure. [ 273.285137][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 273.312558][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.339937][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.343433][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.6.648 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 273.360108][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.360893][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.380737][ T9131] Call Trace: [ 273.383245][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.383998][ T9131] [ 273.397309][ T9131] dump_stack_lvl+0x16c/0x1f0 [ 273.401994][ T9131] should_fail_ex+0x497/0x5b0 [ 273.404118][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.406661][ T9131] ? fs_reclaim_acquire+0xae/0x150 [ 273.406688][ T9131] should_failslab+0xc2/0x120 [ 273.425200][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.426182][ T9131] __kmalloc_noprof+0xcb/0x400 [ 273.438129][ T9131] ? rds_sendmsg+0x750/0x31a0 [ 273.442821][ T9131] rds_message_alloc+0x42/0x230 [ 273.447678][ T9131] rds_sendmsg+0xb71/0x31a0 [ 273.448616][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.452171][ T9131] ? __pfx_avc_has_perm+0x10/0x10 [ 273.452201][ T9131] ? __pfx___lock_acquire+0x10/0x10 [ 273.452219][ T9131] ? check_noncircular+0x1ee/0x400 [ 273.452253][ T9131] ? __pfx_rds_sendmsg+0x10/0x10 [ 273.452272][ T9131] ? __pfx_sock_has_perm+0x10/0x10 [ 273.452301][ T9131] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 273.452338][ T9131] ? ____sys_sendmsg+0xaaf/0xc90 [ 273.452362][ T9131] ____sys_sendmsg+0xaaf/0xc90 [ 273.452388][ T9131] ? copy_msghdr_from_user+0x10b/0x160 [ 273.452410][ T9131] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.452442][ T9131] ? __pfx___lock_acquire+0x10/0x10 [ 273.452463][ T9131] ___sys_sendmsg+0x135/0x1e0 [ 273.452491][ T9131] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.452523][ T9131] ? lock_acquire+0x2f/0xb0 [ 273.452538][ T9131] ? __fget_files+0x40/0x3f0 [ 273.452573][ T9131] ? fdget+0x176/0x210 [ 273.452601][ T9131] __sys_sendmsg+0x117/0x1f0 [ 273.452622][ T9131] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.452641][ T9131] ? __fget_files+0x244/0x3f0 [ 273.452684][ T9131] do_syscall_64+0xcd/0x250 [ 273.463167][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.468056][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.473845][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.478292][ T9131] RIP: 0033:0x7f0eb0f7e719 [ 273.485201][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.488268][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.495229][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.499895][ T9131] RSP: 002b:00007f0eb1e38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.499918][ T9131] RAX: ffffffffffffffda RBX: 00007f0eb1135f80 RCX: 00007f0eb0f7e719 [ 273.499931][ T9131] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000004 [ 273.499942][ T9131] RBP: 00007f0eb1e38090 R08: 0000000000000000 R09: 0000000000000000 [ 273.499955][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.505225][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.510102][ T9131] R13: 0000000000000000 R14: 00007f0eb1135f80 R15: 00007ffff7c6af68 [ 273.510128][ T9131] [ 273.709424][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.719957][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.731144][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.748419][ T9016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.759767][ T9016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.768788][ T9016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.780635][ T9016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.929908][ T5874] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 273.954885][ T6778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.955428][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.973723][ T6778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.023065][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.074782][ T5874] usb 3-1: device descriptor read/64, error -71 [ 274.133359][ T9146] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 274.229927][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 274.319960][ T5874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 274.450129][ T5874] usb 3-1: device descriptor read/64, error -71 [ 274.472218][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 274.482442][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 274.581021][ T5874] usb usb3-port1: attempt power cycle [ 275.084194][ T9174] mkiss: ax0: crc mode is auto. [ 275.539108][ T5874] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 275.563913][ T5874] usb 3-1: device descriptor read/8, error -71 [ 275.660778][ T9183] FAULT_INJECTION: forcing a failure. [ 275.660778][ T9183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.725293][ T9183] CPU: 1 UID: 0 PID: 9183 Comm: syz.3.658 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 275.735905][ T9183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.745945][ T9183] Call Trace: [ 275.749209][ T9183] [ 275.752129][ T9183] dump_stack_lvl+0x16c/0x1f0 [ 275.756795][ T9183] should_fail_ex+0x497/0x5b0 [ 275.761462][ T9183] _copy_from_user+0x2e/0xd0 [ 275.766038][ T9183] video_usercopy+0xed4/0x1600 [ 275.770787][ T9183] ? __pfx___video_do_ioctl+0x10/0x10 [ 275.776143][ T9183] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 275.782982][ T9183] ? __pfx_video_usercopy+0x10/0x10 [ 275.788182][ T9183] v4l2_ioctl+0x1ba/0x250 [ 275.792500][ T9183] ? __pfx_v4l2_ioctl+0x10/0x10 [ 275.797336][ T9183] __x64_sys_ioctl+0x18f/0x220 [ 275.802090][ T9183] do_syscall_64+0xcd/0x250 [ 275.806576][ T9183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.812460][ T9183] RIP: 0033:0x7f447757e719 [ 275.816857][ T9183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.836448][ T9183] RSP: 002b:00007f447845c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.844844][ T9183] RAX: ffffffffffffffda RBX: 00007f4477735f80 RCX: 00007f447757e719 [ 275.852797][ T9183] RDX: 0000000020000140 RSI: 0000000040305652 RDI: 0000000000000003 [ 275.860751][ T9183] RBP: 00007f447845c090 R08: 0000000000000000 R09: 0000000000000000 [ 275.868705][ T9183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.876657][ T9183] R13: 0000000000000000 R14: 00007f4477735f80 R15: 00007fffcc5308a8 [ 275.884620][ T9183] [ 276.050629][ T5874] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 277.352226][ T29] audit: type=1400 audit(4372.191:522): avc: denied { read } for pid=9133 comm="syz.2.649" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 277.375422][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 277.412844][ T29] audit: type=1400 audit(4372.191:523): avc: denied { open } for pid=9133 comm="syz.2.649" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 277.454990][ T5874] usb 3-1: device descriptor read/8, error -71 [ 277.461846][ T9196] netlink: 20 bytes leftover after parsing attributes in process `syz.6.662'. [ 277.620136][ T9199] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 277.691100][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.701399][ T5874] usb usb3-port1: unable to enumerate USB device [ 277.900149][ T9199] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 278.070024][ T8220] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 278.251440][ T8220] usb 2-1: config 0 has an invalid interface number: 243 but max is 0 [ 278.267827][ T8220] usb 2-1: config 0 has no interface number 0 [ 278.280976][ T8220] usb 2-1: config 0 interface 243 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 278.305561][ T8220] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=73.e7 [ 278.349900][ T8220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.384237][ T8220] usb 2-1: Product: syz [ 278.405873][ T8220] usb 2-1: Manufacturer: syz [ 278.500758][ T8220] usb 2-1: SerialNumber: syz [ 278.512805][ T8220] usb 2-1: config 0 descriptor?? [ 278.518425][ T9204] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 278.610774][ T8220] option 2-1:0.243: GSM modem (1-port) converter detected [ 278.784102][ T5874] usb 2-1: USB disconnect, device number 31 [ 278.791644][ T5874] option 2-1:0.243: device disconnected [ 278.919773][ T29] audit: type=1400 audit(4374.892:524): avc: denied { watch watch_reads } for pid=9216 comm="syz.2.669" path="/151/file0" dev="tmpfs" ino=812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 279.303858][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.625326][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.680829][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.743761][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.830453][ T11] bridge_slave_1: left allmulticast mode [ 279.836826][ T11] bridge_slave_1: left promiscuous mode [ 279.844340][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.852644][ T11] bridge_slave_0: left allmulticast mode [ 279.858266][ T11] bridge_slave_0: left promiscuous mode [ 279.864894][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.923898][ T29] audit: type=1400 audit(4375.902:525): avc: denied { bind } for pid=9222 comm="syz.1.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 279.949617][ T54] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 280.066865][ T9226] syz.1.671: attempt to access beyond end of device [ 280.066865][ T9226] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 280.134607][ T9226] gfs2: error -5 reading superblock [ 280.161223][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.171869][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.179872][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.188020][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.195876][ T5823] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.203224][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.861902][ T29] audit: type=1400 audit(4377.352:526): avc: denied { write } for pid=9242 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 281.881657][ T29] audit: type=1400 audit(4377.352:527): avc: denied { nlmsg_read } for pid=9242 comm="syz.2.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 281.945675][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 282.119598][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 1753 [ 282.193268][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.204411][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.214802][ T11] bond0 (unregistering): Released all slaves [ 282.230214][ T5823] Bluetooth: hci0: command tx timeout [ 282.239474][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.679'. [ 282.321220][ T9251] netlink: 'syz.6.679': attribute type 2 has an invalid length. [ 282.398147][ T9251] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 284.147440][ T5823] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 284.156481][ T5823] Bluetooth: hci1: Injecting HCI hardware error event [ 284.165403][ T5823] Bluetooth: hci1: hardware error 0x00 [ 284.310104][ T54] Bluetooth: hci0: command tx timeout [ 285.682582][ T9298] FAULT_INJECTION: forcing a failure. [ 285.682582][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.720016][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.1.686 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 285.730624][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.740679][ T9298] Call Trace: [ 285.743952][ T9298] [ 285.746877][ T9298] dump_stack_lvl+0x16c/0x1f0 [ 285.751561][ T9298] should_fail_ex+0x497/0x5b0 [ 285.756247][ T9298] _copy_from_user+0x2e/0xd0 [ 285.760842][ T9298] copy_msghdr_from_user+0x99/0x160 [ 285.766040][ T9298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.771852][ T9298] ? kfree+0x274/0x4b0 [ 285.775919][ T9298] ? __pfx___lock_acquire+0x10/0x10 [ 285.781119][ T9298] ___sys_recvmsg+0xdc/0x1a0 [ 285.785714][ T9298] ? __pfx____sys_recvmsg+0x10/0x10 [ 285.790914][ T9298] ? find_held_lock+0x2d/0x110 [ 285.795698][ T9298] ? lock_acquire+0x2f/0xb0 [ 285.800197][ T9298] ? __pfx___might_resched+0x10/0x10 [ 285.805484][ T9298] ? __might_fault+0xe3/0x190 [ 285.810171][ T9298] do_recvmmsg+0x2ba/0x750 [ 285.814596][ T9298] ? __pfx_do_recvmmsg+0x10/0x10 [ 285.819534][ T9298] ? vfs_write+0x306/0x1150 [ 285.824049][ T9298] ? __mutex_unlock_slowpath+0x164/0x650 [ 285.829699][ T9298] ? __fget_files+0x244/0x3f0 [ 285.834391][ T9298] __x64_sys_recvmmsg+0x239/0x290 [ 285.839418][ T9298] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 285.844973][ T9298] do_syscall_64+0xcd/0x250 [ 285.849476][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.855375][ T9298] RIP: 0033:0x7faaf057e719 [ 285.859788][ T9298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.879398][ T9298] RSP: 002b:00007faaf13aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 285.887814][ T9298] RAX: ffffffffffffffda RBX: 00007faaf0736058 RCX: 00007faaf057e719 [ 285.895781][ T9298] RDX: 000000000291962b RSI: 0000000020000040 RDI: 0000000000000003 [ 285.903750][ T9298] RBP: 00007faaf13aa090 R08: 0000000000000000 R09: 0000000000000000 [ 285.911716][ T9298] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 285.919686][ T9298] R13: 0000000000000000 R14: 00007faaf0736058 R15: 00007fff51e6d7d8 [ 285.927668][ T9298] [ 286.199005][ T5826] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 286.250060][ T5823] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 286.258438][ T5826] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -2 [ 286.331329][ T5920] usb 7-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 286.345573][ T5826] usb 4-1: USB disconnect, device number 21 [ 286.361491][ T5920] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 286.400781][ T5823] Bluetooth: hci0: command tx timeout [ 286.504919][ T5920] usb 7-1: USB disconnect, device number 5 [ 286.517648][ T11] hsr_slave_0: left promiscuous mode [ 286.984972][ T11] hsr_slave_1: left promiscuous mode [ 287.030900][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.038607][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.151770][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.163799][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.216962][ T11] veth1_macvtap: left promiscuous mode [ 287.225524][ T11] veth0_macvtap: left promiscuous mode [ 287.231297][ T11] veth1_vlan: left promiscuous mode [ 287.240000][ T11] veth0_vlan: left promiscuous mode [ 288.517695][ T5823] Bluetooth: hci0: command tx timeout [ 289.314382][ T9341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.668064][ T11] team0 (unregistering): Port device team_slave_1 removed [ 289.766409][ T11] team0 (unregistering): Port device team_slave_0 removed [ 290.556774][ T9230] chnl_net:caif_netlink_parms(): no params data found [ 291.043076][ T9372] mkiss: ax0: crc mode is auto. [ 291.442392][ T5873] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 291.652596][ T5873] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.712982][ T5873] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.730224][ T5873] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 291.747936][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.798108][ T5873] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.806161][ T5873] usb 3-1: invalid MIDI out EP 0 [ 291.966813][ T5873] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 292.020634][ T5920] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 292.030297][ T29] audit: type=1400 audit(4388.012:528): avc: denied { connect } for pid=9360 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 292.123239][ T29] audit: type=1400 audit(4388.062:529): avc: denied { write } for pid=9360 comm="syz.2.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 292.170341][ T9362] netlink: 'syz.2.699': attribute type 2 has an invalid length. [ 292.179153][ T9362] netlink: 244 bytes leftover after parsing attributes in process `syz.2.699'. [ 292.195238][ T5826] usb 3-1: USB disconnect, device number 28 [ 292.203994][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.241178][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.242589][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.259107][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 292.275473][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 292.289553][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 292.295882][ T9230] bridge_slave_0: entered allmulticast mode [ 292.307062][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.324837][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 292.339877][ T5920] usb 2-1: SerialNumber: syz [ 292.381935][ T9230] bridge_slave_0: entered promiscuous mode [ 292.499288][ T9370] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 292.511864][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.610233][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.619009][ T9230] bridge_slave_1: entered allmulticast mode [ 292.638376][ T9230] bridge_slave_1: entered promiscuous mode [ 293.094004][ T5920] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 293.103742][ T5920] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12 [ 293.240622][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.251626][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.288243][ T9230] team0: Port device team_slave_0 added [ 293.296770][ T9230] team0: Port device team_slave_1 added [ 293.335487][ T29] audit: type=1326 audit(4389.312:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9396 comm="syz.3.704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f447757e719 code=0x0 [ 293.386210][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.393230][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.419104][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.425711][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.437819][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.444810][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.470670][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.476754][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.497448][ T8220] usb 2-1: USB disconnect, device number 32 [ 293.542091][ T9230] hsr_slave_0: entered promiscuous mode [ 293.548235][ T9230] hsr_slave_1: entered promiscuous mode [ 293.559097][ T9230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.568087][ T9230] Cannot create hsr debugfs directory [ 293.590527][ T54] Bluetooth: hci0: command 0x0405 tx timeout [ 294.991146][ T5826] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 295.795354][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.814609][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.877024][ T5826] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 295.902463][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.928228][ T5826] usb 3-1: config 0 descriptor?? [ 295.961377][ T9230] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.976784][ T9230] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.999326][ T9230] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 296.043255][ T9230] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 296.138383][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.154692][ T9230] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.166362][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.173492][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.198861][ T9230] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 296.210561][ T5873] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 296.227573][ T9230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.286066][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.293202][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.684778][ T5826] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 296.859950][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 296.868560][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.900253][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.914718][ T5873] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.937043][ T5873] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 297.012894][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.024107][ T5873] usb 2-1: config 0 descriptor?? [ 297.566864][ T5826] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 297.574407][ T5826] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 297.581898][ T5826] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71 [ 297.606266][ T5826] usb 3-1: USB disconnect, device number 29 [ 297.623638][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.720676][ T9230] veth0_vlan: entered promiscuous mode [ 297.732220][ T9230] veth1_vlan: entered promiscuous mode [ 297.764158][ T9230] veth0_macvtap: entered promiscuous mode [ 297.785811][ T9230] veth1_macvtap: entered promiscuous mode [ 297.794533][ T9485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.801089][ T9485] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.803905][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.807543][ T9485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 297.821246][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.823681][ T9485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 297.847697][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.850913][ T5873] koneplus 0003:1E7D:2E22.000F: unknown main item tag 0x0 [ 297.859073][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.870284][ T5873] koneplus 0003:1E7D:2E22.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 297.885449][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.906293][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.926646][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.942412][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.977818][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.989970][ T9485] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 298.087713][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.103944][ T5873] koneplus 0003:1E7D:2E22.000F: couldn't init struct koneplus_device [ 298.123187][ T5873] koneplus 0003:1E7D:2E22.000F: couldn't install mouse [ 298.163596][ T5873] koneplus 0003:1E7D:2E22.000F: probe with driver koneplus failed with error -32 [ 298.171856][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.182939][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.193497][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.202682][ T5873] usb 2-1: USB disconnect, device number 33 [ 298.203785][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.220022][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.230121][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.240595][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.254297][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.371274][ T9506] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 298.810720][ T9230] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.819655][ T9230] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.828670][ T9230] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.841039][ T9230] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.912905][ T5826] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 299.051823][ T9513] serio: Serial port pts1 [ 299.059169][ T5001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.075486][ T5001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.107756][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.140890][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.169969][ T5826] usb 7-1: Using ep0 maxpacket: 32 [ 299.183419][ T5826] usb 7-1: unable to get BOS descriptor or descriptor too short [ 299.195680][ T5826] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 19, changing to 8 [ 299.207944][ T5826] usb 7-1: config 1 interface 0 has no altsetting 0 [ 299.229451][ T5826] usb 7-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.40 [ 299.244768][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.258436][ T5826] usb 7-1: Product: syz [ 299.270501][ T5826] usb 7-1: Manufacturer: syz [ 299.277804][ T5826] usb 7-1: SerialNumber: syz [ 299.304636][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 299.313881][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 299.422698][ T29] audit: type=1400 audit(4395.382:531): avc: denied { transfer } for pid=9530 comm="syz.1.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 299.441896][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 299.480013][ T29] audit: type=1400 audit(4395.462:532): avc: denied { write } for pid=9533 comm="syz.1.730" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.564276][ T5826] usbhid 7-1:1.0: can't add hid device: -71 [ 299.570808][ T5826] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 299.584554][ T5826] usb 7-1: USB disconnect, device number 6 [ 300.249138][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 300.465427][ T29] audit: type=1800 audit(4396.262:533): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.725" name="/" dev="fuse" ino=1 res=0 errno=0 [ 301.040469][ T9564] xt_hashlimit: size too large, truncated to 1048576 [ 301.107321][ T9570] Illegal XDP return value 4294967274 on prog (id 212) dev N/A, expect packet loss! [ 301.130033][ T5870] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 301.310718][ T5870] usb 2-1: config 1 interface 0 has no altsetting 0 [ 301.338419][ T5870] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 301.348373][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.374833][ T5870] usb 2-1: Product: syz [ 301.386466][ T5870] usb 2-1: Manufacturer: syz [ 301.398245][ T5870] usb 2-1: SerialNumber: syz [ 301.645786][ T9589] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.318440][ T5870] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 302.531996][ T29] audit: type=1400 audit(4398.512:534): avc: denied { read write } for pid=9552 comm="syz.1.734" name="lp0" dev="devtmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 302.572833][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.605917][ T29] audit: type=1400 audit(4398.532:535): avc: denied { open } for pid=9552 comm="syz.1.734" path="/dev/usb/lp0" dev="devtmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 302.668829][ C0] usblp0: nonzero write bulk status received: -71 [ 302.685709][ T5920] usb 2-1: USB disconnect, device number 34 [ 302.886034][ T9552] usblp0: removed [ 303.250529][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.453372][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.475680][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.496697][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.511528][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.519562][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.530166][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.541036][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.689584][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.982039][ T5873] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 304.323896][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 304.594873][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.625809][ T9619] chnl_net:caif_netlink_parms(): no params data found [ 304.659051][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 304.672051][ T11] bridge_slave_1: left allmulticast mode [ 304.672072][ T11] bridge_slave_1: left promiscuous mode [ 304.672191][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.698675][ T11] bridge_slave_0: left allmulticast mode [ 304.706882][ T5873] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 304.717065][ T11] bridge_slave_0: left promiscuous mode [ 304.726504][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.744889][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.767126][ T5873] usb 7-1: config 0 descriptor?? [ 304.980071][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 305.150105][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 305.156956][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 305.168504][ T5920] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 305.177687][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.188527][ T5920] usb 2-1: config 0 descriptor?? [ 305.197834][ T5873] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 305.204965][ T5873] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 305.211867][ T5873] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 305.218730][ T5873] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 305.225637][ T5873] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 305.253347][ T5873] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.6-1/input0 [ 305.305713][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.318042][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.328775][ T11] bond0 (unregistering): Released all slaves [ 305.503301][ T5873] ntrig 0003:1B96:000A.0010: Firmware version: 0.0.0.0.0 (0000 0000) [ 305.591011][ T5823] Bluetooth: hci0: command tx timeout [ 305.757462][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.768509][ T968] usb 7-1: USB disconnect, device number 7 [ 305.800920][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.832219][ T5920] hid (null): unknown global tag 0x83 [ 305.839622][ T5920] hid (null): unknown global tag 0xc [ 305.847967][ T5920] hid-sensor-hub 0003:0158:0100.0011: unknown main item tag 0x1 [ 305.869377][ T5920] hid-sensor-hub 0003:0158:0100.0011: unexpected long global item [ 305.877832][ T5920] hid-sensor-hub 0003:0158:0100.0011: parse failed [ 305.884913][ T5920] hid-sensor-hub 0003:0158:0100.0011: probe with driver hid-sensor-hub failed with error -22 [ 305.919743][ T9619] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.927281][ T9619] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.934689][ T9619] bridge_slave_0: entered allmulticast mode [ 305.941367][ T9619] bridge_slave_0: entered promiscuous mode [ 305.963720][ T9619] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.973302][ T9619] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.980580][ T9619] bridge_slave_1: entered allmulticast mode [ 305.987250][ T9619] bridge_slave_1: entered promiscuous mode [ 306.000529][ T5873] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 306.030605][ T9619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.043137][ T11] hsr_slave_0: left promiscuous mode [ 306.048756][ T11] hsr_slave_1: left promiscuous mode [ 306.055498][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.063286][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.067740][ T5920] usb 2-1: USB disconnect, device number 35 [ 306.078002][ T8220] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 306.078470][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.093576][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.113878][ T11] veth1_macvtap: left promiscuous mode [ 306.119375][ T11] veth0_macvtap: left promiscuous mode [ 306.125094][ T11] veth1_vlan: left promiscuous mode [ 306.132071][ T11] veth0_vlan: left promiscuous mode [ 306.162539][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.174547][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.184504][ T5873] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 306.193665][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.204396][ T5873] usb 4-1: config 0 descriptor?? [ 306.245876][ T8220] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.258541][ T8220] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.271442][ T8220] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 306.281675][ T8220] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 306.290936][ T8220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.470483][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 306.535026][ T8220] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 306.555390][ T8220] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input16 [ 307.206341][ T8220] input: failed to attach handler kbd to device input16, error: -5 [ 307.280220][ T8220] usb 3-1: USB disconnect, device number 30 [ 307.481213][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 307.493623][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 307.507834][ T5873] usb 4-1: USB disconnect, device number 22 [ 307.615966][ T29] audit: type=1400 audit(4403.572:536): avc: denied { name_bind } for pid=9671 comm="syz.1.754" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 308.005492][ T5823] Bluetooth: hci0: command tx timeout [ 308.072364][ T11] team0 (unregistering): Port device team_slave_1 removed [ 308.108806][ T11] team0 (unregistering): Port device team_slave_0 removed [ 308.389304][ T9619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.540101][ T5873] Dead loop on virtual device ipvlan1, fix it urgently! [ 308.585905][ T9619] team0: Port device team_slave_0 added [ 308.597406][ T9686] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=9686 comm=syz.1.757 [ 308.768966][ T5873] Dead loop on virtual device ipvlan1, fix it urgently! [ 308.786020][ T9619] team0: Port device team_slave_1 added [ 309.265208][ T5826] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 309.295699][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.310587][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.345701][ T9619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.386696][ T9619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.402201][ T9619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.504471][ T9619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.639942][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 310.585828][ T5823] Bluetooth: hci0: command tx timeout [ 310.630219][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.639550][ T9723] random: crng reseeded on system resumption [ 310.899869][ T29] audit: type=1400 audit(4406.612:537): avc: denied { write } for pid=9702 comm="syz.6.761" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 311.079318][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.089281][ T5826] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 311.098439][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.108387][ T5826] usb 3-1: config 0 descriptor?? [ 311.116222][ T9619] hsr_slave_0: entered promiscuous mode [ 311.229385][ T9619] hsr_slave_1: entered promiscuous mode [ 311.272344][ T9619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.284133][ T9619] Cannot create hsr debugfs directory [ 312.342478][ T9738] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.350781][ T9738] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.359053][ T9738] bridge0: entered allmulticast mode [ 312.633374][ T9738] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.640533][ T9738] bridge0: port 2(bridge_slave_1) entered listening state [ 312.648841][ T9738] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.655974][ T9738] bridge0: port 1(bridge_slave_0) entered listening state [ 312.666594][ T9738] bridge0: entered promiscuous mode [ 312.673008][ T5823] Bluetooth: hci0: command tx timeout [ 313.393391][ T9756] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 313.418832][ T9756] SELinux: failed to load policy [ 313.585482][ T29] audit: type=1400 audit(4409.552:538): avc: denied { wake_alarm } for pid=9759 comm="syz.6.774" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.700049][ T968] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 314.145394][ T29] audit: type=1400 audit(4409.872:539): avc: denied { mounton } for pid=9753 comm="syz.3.772" path="/proc/557/task" dev="proc" ino=26717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 314.244863][ T9619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.266824][ T29] audit: type=1400 audit(4409.902:540): avc: denied { write } for pid=9753 comm="syz.3.772" name="map_files" dev="proc" ino=25884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 314.286146][ T5826] usbhid 3-1:0.0: can't add hid device: -71 [ 314.296910][ T5826] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 314.354218][ T5826] usb 3-1: USB disconnect, device number 31 [ 314.372934][ T9619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.402456][ T9619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.412779][ T29] audit: type=1400 audit(4409.902:541): avc: denied { add_name } for pid=9753 comm="syz.3.772" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 314.422989][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.775'. [ 314.469911][ T968] usb 2-1: Using ep0 maxpacket: 16 [ 314.479883][ T29] audit: type=1400 audit(4409.902:542): avc: denied { create } for pid=9753 comm="syz.3.772" name="blkio.bfq.group_wait_time" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 314.484546][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.524354][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.538482][ T29] audit: type=1400 audit(4409.902:543): avc: denied { associate } for pid=9753 comm="syz.3.772" name="blkio.bfq.group_wait_time" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 314.561289][ T9619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.592449][ T968] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.624112][ T968] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.649106][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.668085][ T968] usb 2-1: config 0 descriptor?? [ 314.712601][ T9619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.772426][ T9619] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.792816][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.799940][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.863399][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.870538][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.904202][ T9787] input: syz0 as /devices/virtual/input/input17 [ 315.145706][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.173528][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.193661][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.220045][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.237418][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.257605][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.276330][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.300152][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.345586][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.365704][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.379948][ T968] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 315.392082][ T9619] veth0_vlan: entered promiscuous mode [ 315.428188][ T9619] veth1_vlan: entered promiscuous mode [ 315.528953][ T9619] veth0_macvtap: entered promiscuous mode [ 315.547537][ T968] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input18 [ 315.570659][ T968] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 315.595807][ T9619] veth1_macvtap: entered promiscuous mode [ 315.607664][ T968] usb 2-1: USB disconnect, device number 36 [ 315.696390][ T9812] 9pnet_fd: p9_fd_create_tcp (9812): problem connecting socket to 127.0.0.1 [ 315.972730][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.132113][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.144786][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.155588][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.195416][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.240728][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.261169][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.323240][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.350920][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.379436][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.410047][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.432690][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.474521][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.500373][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.529762][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.546551][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.564850][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.590866][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.646566][ T9619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.659914][ T5826] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 316.716180][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.717908][ T9619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.722724][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.824626][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 316.836948][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 316.854445][ T9619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.897692][ T9619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.025608][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.114278][ T9835] tipc: Started in network mode [ 317.119443][ T9835] tipc: Node identity 52f864587c71, cluster identity 4711 [ 317.127176][ T9835] tipc: Enabled bearer , priority 10 [ 317.195017][ T5826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.225132][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.532830][ T5826] usb 3-1: config 0 descriptor?? [ 317.548489][ T9818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 317.663008][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.698668][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.710003][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 317.853288][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.862949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.967860][ T29] audit: type=1400 audit(4413.922:544): avc: denied { mounton } for pid=9619 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 318.188728][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 318.243394][ T29] audit: type=1400 audit(4414.042:545): avc: denied { ioctl } for pid=9845 comm="syz.6.788" path="socket:[26253]" dev="sockfs" ino=26253 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.270964][ T968] tipc: Node number set to 780756056 [ 318.372362][ T5826] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 318.397786][ T5826] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 318.417297][ T5826] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 318.444731][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 318.451388][ T29] audit: type=1400 audit(4414.122:546): avc: denied { mount } for pid=9845 comm="syz.6.788" name="/" dev="ramfs" ino=26254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 318.498096][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.613322][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.622453][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.650728][ T25] usb 4-1: config 0 descriptor?? [ 318.663430][ T9839] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 318.830969][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 319.250588][ T25] plantronics 0003:047F:FFFF.0014: unknown main item tag 0xd [ 319.259332][ T25] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 319.270268][ T25] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 319.938255][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 319.987491][ T25] usb 4-1: USB disconnect, device number 23 [ 320.040582][ T5873] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 320.330102][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.411355][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.481761][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.557685][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.657388][ T11] bridge_slave_1: left allmulticast mode [ 320.666680][ T11] bridge_slave_1: left promiscuous mode [ 320.672462][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.684739][ T11] bridge_slave_0: left allmulticast mode [ 320.690790][ T11] bridge_slave_0: left promiscuous mode [ 320.696394][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.823300][ T5870] usb 3-1: USB disconnect, device number 32 [ 320.972161][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.982750][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.994961][ T11] bond0 (unregistering): Released all slaves [ 321.219439][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.243647][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.281565][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.314409][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.341088][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.360170][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.691947][ T9914] chnl_net:caif_netlink_parms(): no params data found [ 321.720178][ T965] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 321.782182][ T11] hsr_slave_0: left promiscuous mode [ 321.833940][ T11] hsr_slave_1: left promiscuous mode [ 321.846250][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.869563][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.879983][ T965] usb 7-1: Using ep0 maxpacket: 8 [ 321.887740][ T965] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 321.887762][ T965] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 321.907212][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.907258][ T965] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.925924][ T965] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.935342][ T965] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.950135][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.962371][ T965] usb 7-1: Product: syz [ 321.962394][ T965] usb 7-1: Manufacturer: syz [ 321.962408][ T965] usb 7-1: SerialNumber: syz [ 321.996742][ T11] veth1_macvtap: left promiscuous mode [ 321.996794][ T11] veth0_macvtap: left promiscuous mode [ 321.996866][ T11] veth1_vlan: left promiscuous mode [ 321.996927][ T11] veth0_vlan: left promiscuous mode [ 322.373390][ T965] usb 7-1: 0:2 : does not exist [ 322.593556][ T51] usb 7-1: USB disconnect, device number 8 [ 323.025895][ T29] audit: type=1400 audit(4418.882:547): avc: denied { bind } for pid=9945 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 323.026041][ T29] audit: type=1400 audit(4418.902:548): avc: denied { validate_trans } for pid=9945 comm="syz.2.806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 323.430010][ T54] Bluetooth: hci0: command tx timeout [ 323.737184][ T11] team0 (unregistering): Port device team_slave_1 removed [ 323.779540][ T11] team0 (unregistering): Port device team_slave_0 removed [ 324.045770][ T9958] syz.1.810 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.072123][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.086993][ T9914] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.120140][ T9914] bridge_slave_0: entered allmulticast mode [ 325.126961][ T9914] bridge_slave_0: entered promiscuous mode [ 325.180753][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.238599][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.794202][ T54] Bluetooth: hci0: command tx timeout [ 326.193703][ T9914] bridge_slave_1: entered allmulticast mode [ 326.235129][ T9914] bridge_slave_1: entered promiscuous mode [ 326.414530][ T9914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.502422][ T9914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.879479][ T5823] Bluetooth: hci0: command tx timeout [ 328.230808][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 328.239144][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 328.975848][ T9914] team0: Port device team_slave_0 added [ 329.223760][ T9914] team0: Port device team_slave_1 added [ 329.910088][ T5823] Bluetooth: hci0: command 0x0419 tx timeout [ 329.948205][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.967444][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.040086][ T9914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.058576][ T9914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.066163][ T9914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.092548][ T9914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.277296][ T29] audit: type=1400 audit(4426.232:549): avc: denied { search } for pid=10038 comm="syz.2.830" name="/" dev="configfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.315373][ T29] audit: type=1400 audit(4426.232:550): avc: denied { write } for pid=10038 comm="syz.2.830" name="/" dev="configfs" ino=215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.336915][ T29] audit: type=1400 audit(4426.232:551): avc: denied { add_name } for pid=10038 comm="syz.2.830" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 330.359192][ T29] audit: type=1400 audit(4426.232:552): avc: denied { create } for pid=10038 comm="syz.2.830" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 330.395096][ T9914] hsr_slave_0: entered promiscuous mode [ 330.424015][ T9914] hsr_slave_1: entered promiscuous mode [ 330.432180][ T9914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.450988][ T9914] Cannot create hsr debugfs directory [ 330.729931][ T51] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 330.880032][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 330.908658][ T51] usb 2-1: config 0 has no interfaces? [ 331.022334][ T51] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 331.056155][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.588916][ T51] usb 2-1: config 0 descriptor?? [ 331.741734][ T9914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 331.800257][ T9914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 331.825761][ T9914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 331.885714][ T9914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 331.989882][ T5823] Bluetooth: hci0: command 0x0419 tx timeout [ 332.045122][ T9914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.060544][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.111277][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.118419][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.164590][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.171669][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.763131][ T965] usb 2-1: USB disconnect, device number 37 [ 333.612073][T10098] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 333.662004][ T9914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.792548][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 334.244345][ T9914] veth0_vlan: entered promiscuous mode [ 334.257313][ T9914] veth1_vlan: entered promiscuous mode [ 334.351389][ T9914] veth0_macvtap: entered promiscuous mode [ 334.379334][ T9914] veth1_macvtap: entered promiscuous mode [ 334.390254][ T51] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 334.441580][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.482501][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.522131][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.553043][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.564386][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.582156][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.599847][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.619853][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.634241][ T51] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 334.647955][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.663099][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.683684][ T51] usb 2-1: config 0 descriptor?? [ 334.700080][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.722728][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.770060][ T5826] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 334.780345][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.792702][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.802669][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.817580][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.828048][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.839089][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.849538][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.862982][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.885831][ T9914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.903629][ T9914] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.912666][ T9914] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.921572][ T9914] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.930480][ T9914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.043082][ T6281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.063074][ T6281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.146820][ T6281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.151652][ T51] pyra 0003:1E7D:2CF6.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 335.173793][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.185350][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.199608][ T6281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.207227][ T5826] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 335.232135][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.265614][ T5826] usb 4-1: config 0 descriptor?? [ 335.374505][T10141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10141 comm=syz.6.845 [ 335.995162][ T51] pyra 0003:1E7D:2CF6.0015: couldn't init struct pyra_device [ 336.003598][ T51] pyra 0003:1E7D:2CF6.0015: couldn't install mouse [ 336.011314][ T51] pyra 0003:1E7D:2CF6.0015: probe with driver pyra failed with error -71 [ 336.023214][ T51] usb 2-1: USB disconnect, device number 38 [ 336.256793][ T5826] usbhid 4-1:0.0: can't add hid device: -32 [ 336.263248][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 336.885386][ T6281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.959916][ T5826] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 337.109934][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 337.125878][ T5826] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 337.151598][ T5826] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 337.169891][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.177883][ T5826] usb 2-1: Product: syz [ 337.199895][ T5826] usb 2-1: Manufacturer: syz [ 337.204495][ T5826] usb 2-1: SerialNumber: syz [ 337.220549][ T5826] usb 2-1: config 0 descriptor?? [ 337.227023][ T5826] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 337.236558][ T5826] usb 2-1: Detected FT232R [ 337.364318][ T6281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.428049][ T6281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.442070][ T5826] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 337.507333][ T6281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.545137][ T8220] usb 4-1: USB disconnect, device number 24 [ 337.649636][ T6281] bridge_slave_1: left allmulticast mode [ 337.651573][ T5826] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 337.656832][ T6281] bridge_slave_1: left promiscuous mode [ 337.668483][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.677166][ T5826] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 337.685121][ T6281] bridge_slave_0: left allmulticast mode [ 337.685841][ T5826] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 337.701046][ T6281] bridge_slave_0: left promiscuous mode [ 337.706724][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.716994][ T5826] usb 2-1: USB disconnect, device number 39 [ 337.725771][ T5826] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 337.737453][ T5826] ftdi_sio 2-1:0.0: device disconnected [ 338.687339][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.710331][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.732422][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.743824][ T5870] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 338.752077][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.760850][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 338.768406][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 338.917526][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.928777][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.946883][ T5870] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 338.956396][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 338.964705][ T5870] usb 4-1: SerialNumber: syz [ 339.055768][ T6281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.066968][ T6281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.078076][ T6281] bond0 (unregistering): Released all slaves [ 339.094929][T10194] IPv6: NLM_F_REPLACE set, but no existing node found! [ 339.208203][ T5870] usb 4-1: 0:2 : does not exist [ 339.236465][ T5870] usb 4-1: unit 86 not found! [ 339.259223][ T5870] usb 4-1: unit 37 not found! [ 339.315417][ T5870] usb 4-1: USB disconnect, device number 25 [ 339.325353][T10195] chnl_net:caif_netlink_parms(): no params data found [ 339.416484][ T9365] udevd[9365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.560472][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.567601][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.600946][T10195] bridge_slave_0: entered allmulticast mode [ 339.607713][T10195] bridge_slave_0: entered promiscuous mode [ 339.701224][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.728690][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.754084][T10195] bridge_slave_1: entered allmulticast mode [ 339.765320][T10195] bridge_slave_1: entered promiscuous mode [ 339.889589][ T6281] hsr_slave_0: left promiscuous mode [ 339.912303][ T6281] hsr_slave_1: left promiscuous mode [ 339.921760][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.939321][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.957685][ T6281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.966057][ T6281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.100025][ T5873] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 341.220774][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 341.238649][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.291395][ T5823] Bluetooth: hci0: command tx timeout [ 341.321874][ T6281] veth1_macvtap: left promiscuous mode [ 341.327874][ T6281] veth0_macvtap: left promiscuous mode [ 341.338372][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.354825][ T6281] veth1_vlan: left promiscuous mode [ 341.373731][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 341.387542][ T6281] veth0_vlan: left promiscuous mode [ 341.395844][ T11] tipc: Subscription rejected, illegal request [ 341.435860][ T5873] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 341.483059][ T29] audit: type=1400 audit(4437.462:553): avc: denied { getopt } for pid=10249 comm="syz.1.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 341.519350][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.558454][ T5873] usb 3-1: config 0 descriptor?? [ 342.394414][ T5873] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 342.405408][ T5873] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input22 [ 342.508652][ T29] audit: type=1400 audit(4438.482:554): avc: denied { write } for pid=10231 comm="syz.2.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 342.541842][ T5873] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 342.547767][ T29] audit: type=1400 audit(4438.482:555): avc: denied { name_bind } for pid=10231 comm="syz.2.862" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 342.681909][ T5873] usb 3-1: USB disconnect, device number 33 [ 343.390158][ T5823] Bluetooth: hci0: command tx timeout [ 343.398621][ T965] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 343.591063][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.598335][ C0] bridge0: topology change detected, propagating [ 343.605165][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.612548][ C0] bridge0: topology change detected, propagating [ 343.638454][ T965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.649996][ T965] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.659896][ T965] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.00 [ 343.668944][ T965] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.692328][ T965] usb 7-1: config 0 descriptor?? [ 343.747329][ T6281] team0 (unregistering): Port device team_slave_1 removed [ 343.799182][ T6281] team0 (unregistering): Port device team_slave_0 removed [ 344.098651][ T29] audit: type=1400 audit(4440.072:556): avc: denied { block_suspend } for pid=10281 comm="syz.3.878" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.444840][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.461430][T10271] bridge2: entered promiscuous mode [ 344.461449][T10271] bridge2: entered allmulticast mode [ 344.510149][ T5873] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 344.536655][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.686857][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.686890][ T5873] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.686918][ T5873] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.686938][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.688804][ T5873] usb 4-1: config 0 descriptor?? [ 344.793764][T10195] team0: Port device team_slave_0 added [ 344.797171][T10195] team0: Port device team_slave_1 added [ 344.876697][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.876713][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.876736][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.878434][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.878447][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.878467][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.909949][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 344.967999][T10195] hsr_slave_0: entered promiscuous mode [ 344.996360][T10195] hsr_slave_1: entered promiscuous mode [ 344.997026][T10195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.997045][T10195] Cannot create hsr debugfs directory [ 345.081084][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 345.130227][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.191150][ T5873] usb 4-1: string descriptor 0 read error: -71 [ 345.194830][ T5873] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 345.196171][ T5873] usb 4-1: USB disconnect, device number 26 [ 345.251528][ T25] usb 2-1: config 1 interface 0 has no altsetting 0 [ 345.254057][ T25] usb 2-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.40 [ 345.254085][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.254107][ T25] usb 2-1: Product: syz [ 345.254123][ T25] usb 2-1: SerialNumber: syz [ 345.367666][ T965] usbhid 7-1:0.0: can't add hid device: -71 [ 345.373748][ T965] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 345.400112][ T965] usb 7-1: USB disconnect, device number 9 [ 345.430557][ T5823] Bluetooth: hci0: command tx timeout [ 345.509204][ T25] usbhid 2-1:1.0: can't add hid device: -71 [ 345.528395][ T25] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 345.573177][ T25] usb 2-1: USB disconnect, device number 40 [ 345.749159][ T29] audit: type=1400 audit(4441.722:557): avc: denied { mount } for pid=10312 comm="syz.2.883" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 345.868309][ T29] audit: type=1400 audit(4441.842:558): avc: denied { unmount } for pid=5825 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 345.895123][T10318] binder: 10315:10318 ioctl 4018620d 0 returned -22 [ 346.009406][T10195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 346.044919][T10195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 346.087298][T10195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 346.115626][T10195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 346.865762][T10335] hub 6-0:1.0: USB hub found [ 346.872643][T10335] hub 6-0:1.0: 1 port detected [ 346.919927][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.933710][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.939383][ T29] audit: type=1326 audit(4442.872:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.2.885" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d7a17e719 code=0x0 [ 346.956936][T10195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.962437][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.979455][T10195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.993377][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.000498][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.037202][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.044352][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.265317][ T29] audit: type=1400 audit(4443.232:560): avc: denied { listen } for pid=10344 comm="syz.2.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.420903][T10350] netlink: 'syz.1.889': attribute type 3 has an invalid length. [ 347.551003][ T5823] Bluetooth: hci0: command tx timeout [ 347.930352][ T5920] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 348.106517][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.137435][T10195] veth0_vlan: entered promiscuous mode [ 348.146696][T10195] veth1_vlan: entered promiscuous mode [ 348.163298][T10195] veth0_macvtap: entered promiscuous mode [ 348.171192][T10195] veth1_macvtap: entered promiscuous mode [ 348.198160][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.208907][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.218899][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.229352][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.239321][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.250042][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.259931][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.270731][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.341042][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.363659][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.395853][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.421419][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.441315][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.451667][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.462565][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.472795][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.483291][ T5920] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 348.492714][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.501139][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.514570][T10195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.525081][T10195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.545848][ T5920] usb 7-1: config 0 descriptor?? [ 348.551440][ T5870] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 348.582807][T10375] 9pnet_fd: Insufficient options for proto=fd [ 348.736326][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.787740][ T5870] usb 2-1: Using ep0 maxpacket: 8 [ 348.856461][ T5870] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.982000][ T5870] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 349.012823][T10195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.022501][ T5870] usb 2-1: config 1 has no interface number 1 [ 349.023072][T10195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.038462][T10195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.047393][T10195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.056421][ T5870] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.096464][ T29] audit: type=1400 audit(4445.072:561): avc: denied { watch watch_reads } for pid=10377 comm="syz.3.895" path="/190/file0" dev="tmpfs" ino=1019 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 349.194502][ T5920] saitek 0003:06A3:0621.0017: unbalanced collection at end of report description [ 349.204056][ T5920] saitek 0003:06A3:0621.0017: parse failed [ 349.210015][ T5920] saitek 0003:06A3:0621.0017: probe with driver saitek failed with error -22 [ 349.227805][ T5870] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 349.238059][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.257176][ T5913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.265597][ T5913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.267848][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.273635][ T5870] usb 2-1: Product: syz [ 349.290358][ T5870] usb 2-1: Manufacturer: syz [ 349.293348][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.296972][ T5870] usb 2-1: SerialNumber: syz [ 349.398276][ T5873] usb 7-1: USB disconnect, device number 10 [ 349.479698][T10386] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 349.567302][ T5870] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 349.582240][ T5870] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 349.617719][ T5870] usb 2-1: USB disconnect, device number 41 [ 349.659111][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.808308][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.361075][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.522107][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.636216][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.650435][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.660071][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.679087][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.689548][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 350.700440][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.801260][ T63] bridge_slave_1: left allmulticast mode [ 350.806911][ T63] bridge_slave_1: left promiscuous mode [ 350.816020][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.840377][ T63] bridge_slave_0: left allmulticast mode [ 350.850197][ T63] bridge_slave_0: left promiscuous mode [ 350.884228][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.065131][ T965] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 351.072866][ T5920] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 351.243726][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.263492][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.274999][ T5920] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.284815][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.294846][ T5920] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.304648][ T965] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.314415][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.322691][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.332710][ T5920] usb 7-1: config 0 descriptor?? [ 351.345393][ T965] usb 2-1: config 0 descriptor?? [ 351.368323][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.379771][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.390560][ T63] bond0 (unregistering): Released all slaves [ 351.619664][T10399] chnl_net:caif_netlink_parms(): no params data found [ 351.692027][ T63] hsr_slave_0: left promiscuous mode [ 351.697999][ T63] hsr_slave_1: left promiscuous mode [ 351.709608][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.729962][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.742918][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.752063][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.774986][ T63] veth1_vlan: left promiscuous mode [ 351.781471][ T63] veth0_vlan: left promiscuous mode [ 351.980180][ T965] usb 2-1: string descriptor 0 read error: -71 [ 351.998766][ T965] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71 [ 352.018921][ T965] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 352.051924][ T965] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71 [ 352.074605][ T965] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 352.098621][ T965] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 352.130077][ T965] usb 2-1: USB disconnect, device number 42 [ 352.192212][ T5920] uclogic 0003:256C:006D.0019: failed retrieving Huion firmware version: -71 [ 352.223260][ T5920] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 352.265653][ T5920] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 352.286329][ T5920] usb 7-1: USB disconnect, device number 11 [ 352.629331][ T5823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.656409][ T5823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.669737][ T5823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.706653][ T5823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.731798][ T5823] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.739036][ T5823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.792236][ T5823] Bluetooth: hci0: command tx timeout [ 352.814561][ T63] team0 (unregistering): Port device team_slave_1 removed [ 352.856700][ T63] team0 (unregistering): Port device team_slave_0 removed [ 353.957430][T10448] netlink: 20 bytes leftover after parsing attributes in process `syz.2.910'. [ 354.130136][T10452] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.137165][T10452] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.143295][T10452] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.156383][T10452] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 354.180632][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.187724][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.200999][T10452] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.222012][T10452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 354.240051][T10399] bridge_slave_0: entered allmulticast mode [ 354.255556][T10399] bridge_slave_0: entered promiscuous mode [ 354.263492][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.271132][T10452] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 354.279517][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.292428][T10399] bridge_slave_1: entered allmulticast mode [ 354.323265][T10399] bridge_slave_1: entered promiscuous mode [ 354.428921][T10484] [ 354.431274][T10484] ====================================================== [ 354.438287][T10484] WARNING: possible circular locking dependency detected [ 354.441034][ T29] audit: type=1400 audit(4450.422:562): avc: denied { connect } for pid=10487 comm="syz.2.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 354.445289][T10484] 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 Not tainted [ 354.471371][T10484] ------------------------------------------------------ [ 354.478380][T10484] syz.1.921/10484 is trying to acquire lock: [ 354.484345][T10484] ffff8880b8629598 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0xda/0xbe0 [ 354.492853][T10484] [ 354.492853][T10484] but task is already holding lock: [ 354.500194][T10484] ffff8880b862a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 354.508958][T10484] [ 354.508958][T10484] which lock already depends on the new lock. [ 354.508958][T10484] [ 354.519341][T10484] [ 354.519341][T10484] the existing dependency chain (in reverse order) is: [ 354.528331][T10484] [ 354.528331][T10484] -> #1 (&base->lock){-.-.}-{2:2}: [ 354.535615][T10484] _raw_spin_lock_irqsave+0x3a/0x60 [ 354.541333][T10484] lock_timer_base+0x5d/0x220 [ 354.546521][T10484] __mod_timer+0x426/0xdc0 [ 354.551447][T10484] add_timer_global+0x8a/0xc0 [ 354.556640][T10484] __queue_delayed_work+0x1ba/0x2e0 [ 354.562348][T10484] queue_delayed_work_on+0x12a/0x150 [ 354.568146][T10484] kvfree_call_rcu+0x749/0xbe0 [ 354.573414][T10484] pwq_release_workfn+0x4dd/0xa50 [ 354.578953][T10484] kthread_worker_fn+0x305/0xba0 [ 354.584395][T10484] kthread+0x2c1/0x3a0 [ 354.588979][T10484] ret_from_fork+0x45/0x80 [ 354.593911][T10484] ret_from_fork_asm+0x1a/0x30 [ 354.599180][T10484] [ 354.599180][T10484] -> #0 (krc.lock){..-.}-{2:2}: [ 354.606197][T10484] __lock_acquire+0x250b/0x3ce0 [ 354.611548][T10484] lock_acquire.part.0+0x11b/0x380 [ 354.617161][T10484] _raw_spin_lock+0x2e/0x40 [ 354.622169][T10484] kvfree_call_rcu+0xda/0xbe0 [ 354.627343][T10484] trie_delete_elem+0x5c5/0x820 [ 354.632699][T10484] bpf_prog_4da2e59a2499d905+0x48/0x4c [ 354.638658][T10484] bpf_trace_run2+0x231/0x590 [ 354.643842][T10484] __bpf_trace_timer_start+0xc7/0x100 [ 354.649714][T10484] __traceiter_timer_start+0x64/0xb0 [ 354.655504][T10484] enqueue_timer+0x2b4/0x550 [ 354.660600][T10484] __mod_timer+0x8d7/0xdc0 [ 354.665524][T10484] sk_reset_timer+0x21/0xc0 [ 354.670527][T10484] tipc_sk_finish_conn+0x183/0x790 [ 354.676138][T10484] tipc_socketpair+0x364/0x470 [ 354.681405][T10484] __sys_socketpair+0x2f0/0x5a0 [ 354.686768][T10484] __x64_sys_socketpair+0x96/0x100 [ 354.692384][T10484] do_syscall_64+0xcd/0x250 [ 354.697386][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.703785][T10484] [ 354.703785][T10484] other info that might help us debug this: [ 354.703785][T10484] [ 354.713990][T10484] Possible unsafe locking scenario: [ 354.713990][T10484] [ 354.721417][T10484] CPU0 CPU1 [ 354.726761][T10484] ---- ---- [ 354.732104][T10484] lock(&base->lock); [ 354.736155][T10484] lock(krc.lock); [ 354.742462][T10484] lock(&base->lock); [ 354.749030][T10484] lock(krc.lock); [ 354.752816][T10484] [ 354.752816][T10484] *** DEADLOCK *** [ 354.752816][T10484] [ 354.760935][T10484] 2 locks held by syz.1.921/10484: [ 354.766019][T10484] #0: ffff8880b862a858 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220 [ 354.775227][T10484] #1: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 354.784609][T10484] [ 354.784609][T10484] stack backtrace: [ 354.790474][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.1.921 Not tainted 6.12.0-rc5-syzkaller-00308-g3e5e6c9900c3 #0 [ 354.801126][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.811164][T10484] Call Trace: [ 354.814422][T10484] [ 354.817352][T10484] dump_stack_lvl+0x116/0x1f0 [ 354.822015][T10484] print_circular_bug+0x41c/0x610 [ 354.827029][T10484] check_noncircular+0x31a/0x400 [ 354.831956][T10484] ? __pfx_check_noncircular+0x10/0x10 [ 354.837402][T10484] ? lockdep_lock+0xc6/0x200 [ 354.841979][T10484] ? __pfx_lockdep_lock+0x10/0x10 [ 354.846990][T10484] __lock_acquire+0x250b/0x3ce0 [ 354.851824][T10484] ? __pfx___lock_acquire+0x10/0x10 [ 354.857004][T10484] lock_acquire.part.0+0x11b/0x380 [ 354.862093][T10484] ? kvfree_call_rcu+0xda/0xbe0 [ 354.866924][T10484] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 354.872544][T10484] ? rcu_is_watching+0x12/0xc0 [ 354.877295][T10484] ? trace_lock_acquire+0x14a/0x1d0 [ 354.882479][T10484] ? kvfree_call_rcu+0xda/0xbe0 [ 354.887314][T10484] ? lock_acquire+0x2f/0xb0 [ 354.891796][T10484] ? kvfree_call_rcu+0xda/0xbe0 [ 354.896629][T10484] _raw_spin_lock+0x2e/0x40 [ 354.901119][T10484] ? kvfree_call_rcu+0xda/0xbe0 [ 354.905949][T10484] kvfree_call_rcu+0xda/0xbe0 [ 354.910605][T10484] ? trie_delete_elem+0xb0/0x820 [ 354.915529][T10484] ? do_raw_spin_unlock+0x172/0x230 [ 354.920712][T10484] trie_delete_elem+0x5c5/0x820 [ 354.925555][T10484] bpf_prog_4da2e59a2499d905+0x48/0x4c [ 354.930999][T10484] bpf_trace_run2+0x231/0x590 [ 354.935661][T10484] ? __pfx_bpf_trace_run2+0x10/0x10 [ 354.940845][T10484] ? lock_acquire+0x2f/0xb0 [ 354.945341][T10484] ? debug_object_activate+0x199/0x540 [ 354.950787][T10484] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 354.956749][T10484] __bpf_trace_timer_start+0xc7/0x100 [ 354.962107][T10484] ? __pfx___bpf_trace_timer_start+0x10/0x10 [ 354.968068][T10484] ? __pfx_debug_object_activate+0x10/0x10 [ 354.973859][T10484] ? lock_acquire+0x2f/0xb0 [ 354.978343][T10484] __traceiter_timer_start+0x64/0xb0 [ 354.983616][T10484] enqueue_timer+0x2b4/0x550 [ 354.988188][T10484] __mod_timer+0x8d7/0xdc0 [ 354.992591][T10484] ? __pfx___mod_timer+0x10/0x10 [ 354.997530][T10484] ? net_generic+0xea/0x2a0 [ 355.002019][T10484] ? __pfx_lock_release+0x10/0x10 [ 355.007019][T10484] ? trace_lock_acquire+0x14a/0x1d0 [ 355.012203][T10484] sk_reset_timer+0x21/0xc0 [ 355.016701][T10484] tipc_sk_finish_conn+0x183/0x790 [ 355.021795][T10484] tipc_socketpair+0x364/0x470 [ 355.026542][T10484] __sys_socketpair+0x2f0/0x5a0 [ 355.031386][T10484] ? __pfx___sys_socketpair+0x10/0x10 [ 355.036747][T10484] ? xfd_validate_state+0x5d/0x180 [ 355.041838][T10484] ? rcu_is_watching+0x12/0xc0 [ 355.046586][T10484] __x64_sys_socketpair+0x96/0x100 [ 355.051685][T10484] ? lockdep_hardirqs_on+0x7c/0x110 [ 355.056871][T10484] do_syscall_64+0xcd/0x250 [ 355.061355][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.067247][T10484] RIP: 0033:0x7faaf057e719 [ 355.071657][T10484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.091245][T10484] RSP: 002b:00007faaf13cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 355.099637][T10484] RAX: ffffffffffffffda RBX: 00007faaf0735f80 RCX: 00007faaf057e719 [ 355.107589][T10484] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 355.115540][T10484] RBP: 00007faaf05f132e R08: 0000000000000000 R09: 0000000000000000 [ 355.123493][T10484] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 355.131445][T10484] R13: 0000000000000000 R14: 00007faaf0735f80 R15: 00007fff51e6d7d8 [ 355.139401][T10484] [ 355.158174][ T29] audit: type=1400 audit(4450.452:563): avc: denied { write } for pid=10487 comm="syz.2.922" path="socket:[31005]" dev="sockfs" ino=31005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 355.767263][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.863526][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.924651][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.023226][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.112215][ T63] bridge_slave_1: left allmulticast mode [ 356.118325][ T63] bridge_slave_1: left promiscuous mode [ 356.131115][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.138863][ T63] bridge_slave_0: left allmulticast mode [ 356.155202][ T63] bridge_slave_0: left promiscuous mode [ 356.161153][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.168978][ T63] bridge_slave_1: left allmulticast mode [ 356.174930][ T63] bridge_slave_1: left promiscuous mode [ 356.180714][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.188337][ T63] bridge_slave_0: left allmulticast mode [ 356.194555][ T63] bridge_slave_0: left promiscuous mode [ 356.200250][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.320929][ T63] bond0 (unregistering): Released all slaves [ 356.330885][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.340544][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.349786][ T63] bond0 (unregistering): Released all slaves [ 356.567213][ T63] hsr_slave_0: left promiscuous mode [ 356.573131][ T63] hsr_slave_1: left promiscuous mode [ 356.578746][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.586935][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.596175][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.605581][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.615070][ T63] veth1_macvtap: left promiscuous mode [ 356.620928][ T63] veth0_macvtap: left promiscuous mode [ 356.626442][ T63] veth1_vlan: left promiscuous mode [ 356.632957][ T63] veth0_vlan: left promiscuous mode [ 356.746450][ T63] team0 (unregistering): Port device team_slave_1 removed [ 356.764622][ T63] team0 (unregistering): Port device team_slave_0 removed [ 357.247374][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.260893][ T63] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.312937][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.324419][ T63] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.363847][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.374823][ T63] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.423411][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.435530][ T63] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.534389][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.574325][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.628037][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.677910][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.755278][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.793204][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.853814][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 357.863583][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.907458][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.975436][ T63] bridge_slave_1: left allmulticast mode [ 357.984029][ T63] bridge_slave_1: left promiscuous mode [ 357.989683][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.998591][ T63] bridge_slave_0: left allmulticast mode [ 358.004901][ T63] bridge_slave_0: left promiscuous mode [ 358.010683][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.019205][ T63] bridge_slave_1: left allmulticast mode [ 358.025142][ T63] bridge_slave_1: left promiscuous mode [ 358.031549][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.039340][ T63] bridge_slave_0: left allmulticast mode [ 358.045462][ T63] bridge_slave_0: left promiscuous mode [ 358.051151][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.059157][ T63] bridge_slave_1: left allmulticast mode [ 358.064936][ T63] bridge_slave_1: left promiscuous mode [ 358.070856][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.078366][ T63] bridge_slave_0: left allmulticast mode [ 358.084220][ T63] bridge_slave_0: left promiscuous mode [ 358.089834][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.098021][ T63] tipc: Resetting bearer [ 358.155835][ T63] tipc: Disabling bearer [ 358.413385][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.422917][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.432402][ T63] bond0 (unregistering): Released all slaves [ 358.441810][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.451101][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.461390][ T63] bond0 (unregistering): Released all slaves [ 358.472433][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.481729][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.491061][ T63] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 358.499722][ T63] bond0 (unregistering): Released all slaves [ 358.569794][ T63] tipc: Left network mode [ 358.857091][ T63] hsr_slave_0: left promiscuous mode [ 358.863129][ T63] hsr_slave_1: left promiscuous mode [ 358.876128][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.883979][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.892286][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.899658][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.908808][ T63] hsr_slave_0: left promiscuous mode [ 358.916067][ T63] hsr_slave_1: left promiscuous mode [ 358.926581][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.934734][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.943923][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.951440][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.965272][ T63] hsr_slave_0: left promiscuous mode [ 358.970920][ T63] hsr_slave_1: left promiscuous mode [ 358.976487][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.983980][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.992645][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.000154][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.011490][ T63] veth1_macvtap: left promiscuous mode [ 359.017096][ T63] veth0_macvtap: left promiscuous mode [ 359.022659][ T63] veth1_vlan: left promiscuous mode [ 359.027877][ T63] veth0_vlan: left promiscuous mode [ 359.033816][ T63] veth1_macvtap: left promiscuous mode [ 359.039261][ T63] veth0_macvtap: left promiscuous mode [ 359.044827][ T63] veth1_vlan: left promiscuous mode [ 359.050147][ T63] veth0_vlan: left promiscuous mode [ 359.055704][ T63] veth1_macvtap: left promiscuous mode [ 359.061295][ T63] veth0_macvtap: left promiscuous mode [ 359.066772][ T63] veth1_vlan: left promiscuous mode [ 359.072162][ T63] veth0_vlan: left promiscuous mode [ 359.180928][ T63] team0 (unregistering): Port device team_slave_1 removed [ 359.199524][ T63] team0 (unregistering): Port device team_slave_0 removed [ 359.257719][ T63] pimreg (unregistering): left allmulticast mode [ 359.320705][ T63] team0 (unregistering): Port device team_slave_1 removed [ 359.338541][ T63] team0 (unregistering): Port device team_slave_0 removed [ 359.443884][ T63] team0 (unregistering): Port device team_slave_1 removed [ 359.467613][ T63] team0 (unregistering): Port device team_slave_0 removed [ 359.541884][ T63] lo (unregistering): left allmulticast mode