last executing test programs: 12.56567831s ago: executing program 1 (id=96): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {0x80000000}}]}) sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d35951300595ebc", 0x72, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r3, 0x0, &(0x7f0000000b00)}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 10.025360463s ago: executing program 0 (id=100): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x27, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x3}}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'erspan0\x00', 0x460}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) dup(r2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) setns(0xc9, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002140), 0x40801, 0x0) r5 = dup(r4) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40043d0d, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2000c0d0) 8.778418845s ago: executing program 1 (id=104): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x17d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', 0x0, 0x80c019, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000700)='source', &(0x7f0000000000)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x18ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe04c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\r\xa8&t&A0\xa7\xef\x9cL\x8e1K\f\xeb|%o\xf4v\xad~\x1a\xf3~\xeeI\tv\xe5\x11\xb7\x8f\xfa\xe0\xa6W#S\xaa-\x93\xcb\xc2\x1d\xff\xe9A,+?H\x91\xeeo\x1f\xd6A\xd1\x95\xe92\x06\x00o\xee\x14\xb9\v8\xa0\x91\'Jb\xb7\x92\xb1\xb3\xb9\x83\x98\x8aB\xf3<\x1b\x98\xa8B\xb1\xf73\x94<]\\\xb1T\x03\x9a%>\xd4\xe7=\\q\xd7\xbd\xb7\x19d\xb7\xd7\xc8\xb0\x84\x85\xbdI\xa6\xb0\x15@\xab\x8d\x8dW\xe2\xc5Yg\xaf&\x1b\xa7\xfd\xfc\xbc\x84\xefK\xfe\v\xd0\xc3Xp!2\n\xd4\xcf/[W\"h\xafC\x992x[\x9b\xfb26\xe48\v\x9bJ<\xee\x8cE\x9f\xa1\xc6\xb9\x93\xa5\x1dp\xfbPJ0\x057\xec\xa5cg2\xfc-\xe24\xf61J-hn\x83\'FVz|\x16\x95 {/\xe3\xef\x91/\xbco\xfe\xb9\xef\x84F\xaaL\xc0\x00\xa5\xa4\x90\a\xb5\xda\v|\xd5\xff\x1a\x0f\xad\xd1+M\x93\x14\x10C\xec\xd9\xcb\x0f\x11S9\x03\xb2\xaaG\"\xd6\a\xefI\xc0\"\xf8\xa42\x17X\t#\x1e0x0, 0x5, "baf4fe9872"}, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0x1}, 0x8) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) sendmsg$inet(r0, 0x0, 0x40000) 7.313781222s ago: executing program 3 (id=108): r0 = socket(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0xa) fchdir(r5) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 7.270295165s ago: executing program 2 (id=109): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x200, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000240)="e0335d1583aaa5d4", 0x8}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r5, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x3, 0x10000, 0x2000, &(0x7f0000191000/0x2000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0xc000, 0x1000000, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="18090000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x229) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 7.098225904s ago: executing program 1 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='jif', 0x3) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 7.081611138s ago: executing program 4 (id=111): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x5, 0xe, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x40, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) 6.151584545s ago: executing program 3 (id=112): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {0x80000000}}]}) sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d", 0x6b, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r2}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f0000000400)={0x1, 0xcda, "74bb23", 0xfe, 0xff}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), &(0x7f0000000a00)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r5, 0x0, &(0x7f0000000b00)}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 5.810320133s ago: executing program 1 (id=113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x26020480) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r4 = syz_open_dev$media(&(0x7f00000003c0), 0x4, 0x404541) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000600)={0x80000000, &(0x7f0000000540), 0x0}) 5.799825511s ago: executing program 0 (id=114): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x5, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x7, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0x0, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x8, 0x200, 0xffff3441, 0xfff]}, 0x45c) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x264, 0x23b) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 4.911914069s ago: executing program 1 (id=115): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000800)={0x80000000, 0x0, &(0x7f0000000b00)=[{}, {{}, {0x80000000}}]}) sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d35951300595ebc", 0x72, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)={r2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r3, 0x0, &(0x7f0000000b00)}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.827443332s ago: executing program 0 (id=116): r0 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333", 0x399, r0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff020000000000000000000000000001000040", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6337000090780000"], 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) setns(0xc9, 0x0) 4.734609853s ago: executing program 0 (id=117): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x4, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x7, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x40000, 0x6, 0x5, 0x0, 0x2af, 0x4, 0x7, 0x4, 0x3c5b, 0x7, 0xd, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x80000001, 0x8, 0xe, 0x0, 0x71, 0x2, 0x10001, 0x532, 0x2, 0x9, 0x6, 0x8f, 0x8000006, 0x6, 0x3, 0x6, 0x4, 0x1, 0x20000000, 0x1, 0x0, 0x7, 0x6, 0x9, 0x6, 0x1, 0x40], [0x10000007, 0x7ff, 0x7, 0x9, 0xd, 0x4, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffb, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x5, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xffff, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x8009, 0x8, 0x9, 0x1006, 0xb, 0xa, 0x1, 0x9, 0x9, 0x10000006, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x10007, 0x3, 0x9, 0x48c93690, 0x42, 0xc400], [0x6, 0x6, 0x80000001, 0x2, 0x102, 0x100, 0x10008d0, 0x9, 0x5, 0x7ff7, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x5, 0x4, 0x3, 0x2, 0x86, 0x1, 0xc, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x7fd, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800103, 0x200, 0x80, 0xc, 0xcc52, 0x950bfaf, 0x2001000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0x4, 0xbf, 0x10002, 0x403, 0x13, 0x3, 0x0, 0x1, 0xfffffff0, 0x10, 0x400006, 0x1c, 0x120000, 0xffff, 0x6, 0xaaed, 0xfffffffd, 0xff], [0x9, 0xbb33, 0x3, 0xb, 0x5, 0x1, 0x6, 0x205, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe623, 0xfffffffd, 0x2, 0x7fff, 0x2, 0x14c, 0x60a5, 0x1, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0x10, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x95ff, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x1007d, 0x26, 0x55a4, 0x30b1d693, 0x5a2b, 0x7f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendto$inet6(r0, &(0x7f0000000b80)="d79962e9c40172675b635e2d26d253dc4915347e77a85a7f9de2c978f99d025ae135dea86d41714e0de20b377de2bf83559f840696af0976a65dbf2af825a177136ad4a562d00c0c24d26541368689396453ce13916abb6d9b26451a7d81036dfadbcae1721a6fde5ac10d35951300595ebc", 0x72, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000240)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000940)={0x0, 0x5, 0x0, &(0x7f00000004c0)=[{}, {}, {0x80000000}, {}, {}], 0x2, 0x0, &(0x7f0000000340)=[{}, {}], 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000a80)={0x80000000, &(0x7f00000009c0), &(0x7f0000000a00)}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000700)={r1, 0x0, &(0x7f0000000b00)}) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd70000000000002000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.539616939s ago: executing program 2 (id=118): syz_open_procfs$userns(0x0, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/timers\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2(&(0x7f0000000080), 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.42976381s ago: executing program 2 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x800, 0x20000002, 0x202}, 0x0, &(0x7f0000000040), &(0x7f0000000980)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) personality(0x4100001) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r5, r4) ppoll(&(0x7f0000000140)=[{r3, 0x8002}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) accept4(r0, &(0x7f0000000300)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000380)=0x80, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d000905"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'bond0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x4a, 0x9, 0x38, 0x5, 0xa, 0xc, 0x7, 0x5, 0x3, 0xe0, 0x68, 0x2, 0x9, 0x3, 0x2, 0xc, [0x7, 0x10000]}}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.361598765s ago: executing program 4 (id=120): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x2d, 0x0, 0x0, 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0xa) fchdir(r5) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 3.463952408s ago: executing program 4 (id=121): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x268, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r12, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 2.811962177s ago: executing program 3 (id=122): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) fsopen(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./trace/trace\x00', 0x80201, 0x88) r2 = syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) socket$packet(0x11, 0x3, 0x300) setresuid(0x0, 0xee01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x6d) r4 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r4], 0x1) r5 = dup2(r2, r4) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0xc0d, 0x401], 0x2) writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000000c0)="dc", 0x1}], 0x2) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x58, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1}, {0x2}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}]}]}, 0x100}}, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f00000002c0)={0x11, &(0x7f0000000280)="de921cf40cffffffff1163a1f46a371dbe"}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000000068000105000000000000000000000000000000000800010003000000060003000100000002000700000001000400000008000200"/80], 0x100}}, 0x0) 2.52471871s ago: executing program 4 (id=123): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x8}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x17}, 0x1, 0x0, 0x0, 0x4}, 0x20004055) pipe2$9p(&(0x7f0000000000), 0x0) socket(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, 0x0, 0x27, 0x288c0) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) lsm_set_self_attr(0x65, &(0x7f00000005c0)=ANY=[], 0x32, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xc00, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x0, 0xb}, {0x7, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xfff2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) socket(0x10, 0x3, 0x0) 2.433227474s ago: executing program 2 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz \x00\x00000000'], 0x2a, 0x0) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, &(0x7f0000000540), 0x0, 0xfffffffffffffffd) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, 0x0, 0x0) write(r1, &(0x7f0000000700)='bind', 0x4) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ffff65c5efa6d0d642a9075c47e451f9a944ed939b3d241049c13e"], 0x64}, 0x1, 0x0, 0x0, 0x4080000}, 0x2890) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 2.37714389s ago: executing program 1 (id=125): socket$unix(0x1, 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") write$char_usb(r1, &(0x7f0000000200)="5502000000000000", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd3b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0x4, 0xfff3}}}, 0x24}}, 0x24040084) r2 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$midi(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x105c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x38, 0xc, [@midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x0, 0x0, [], 0x5}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x3, 0x0, [], 0x9}], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x7, 0x10, {0x4}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) epoll_create1(0x80000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x16, 0x64, 0xe1, 0x8, 0x1164, 0x622, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0x1, 0x20, 0x6, "", [{{0x9, 0x4, 0x34, 0x3, 0x1, 0xfe, 0xa6, 0x8b, 0x4, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0x6, 0x7}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb5, 0x50, 0xa6, "", [{{0x9, 0x4, 0x0, 0xa2, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x7, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x0, 0x3}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xb8, 0x10, 0xa, 0x40, 0x2}, 0x8d, &(0x7f0000000180)={0x5, 0xf, 0x8d, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6c, 0x8, 0xe, 0x401, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x1d, 0xd, 0x0, 0xc431}, @generic={0x69, 0x10, 0xd, "ec4a5b0fb7c7fdfdfa48dc70bce66806fb0c09efe5e34df435957cca1742d871bc2da4797262fb1685902499a12c183e9ef09d2aadcd7ef44f7ab8455c2e42bfd63f2e31da2d9463a4e9f04377dd543b5f8126c4d8053c8cf0884191d81b0a33192e953e5156"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x1, 0x1, 0x3ff}]}, 0x7, [{0x68, &(0x7f0000000240)=@string={0x68, 0x3, "8522e50e2de2e3db809db7660ce726adc200612aa79eebb7d1ba412974bbbe28c96511e880350b0f363ac8a923fb2689b4d55b7ee986baf719c5825013713e136839ea7217aabdbc5e6f5c6c8c8546207849ee0a81e794b081a15a355468a8b495dafb688a95"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x459}}, {0x77, &(0x7f0000000340)=@string={0x77, 0x3, "66251c3a055e9345e116611e1648e6db14984960e38c1b2eef7c0066c83f3af71edbf219a0d42b142b62688385b5bfa7e62b15522d295cd1ddaf9b107d4b3c3dcab2f73b84aea63a92a5aa11ff997ee9700d0d1eddadcaaf19c5454a630239c68530b161ebe485b6bb3cc3ab43b248a9c5bfee0e1d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}, {0xbe, &(0x7f0000000400)=@string={0xbe, 0x3, "d3b45ddd87a3c6fbf29531b40d42bf9cfd9f37235fe97e8eadcf46ce438098e7076cfa16444d22528f09405fb12c80c9920ec33163f49ed36d992ee2d44bd0bfba877784977f4529eb480540db0fc866a3f12049bf29450f2a762e3c281ffb81229d8c4534112f46b02c8b53e23d54f75579f129ca039c17c8bc2e71abc47c5b0854909a8922f8008e60fc1930efa689841162402863e3525aa971349bcd770ef83ef27e3d651bdb036e8f30d9cec2126b951d0f2090e9d35d7f5c1a"}}, {0x2d, &(0x7f00000004c0)=@string={0x2d, 0x3, "91699edf23847556691bb8f1f1ca3c6da4f2639e7c3bd865d584978eb1694210a23331c21507b37429c03c"}}, {0xa1, &(0x7f0000000500)=@string={0xa1, 0x3, "504d95d63df7ae5ee52c622778222cb23ebe5298aba33b035266bef2a290c7ddd6d5772ed04082b94c8c172ed2e126815d8d9acae5f0ddddcd086615a3fc863f6e26359ed444d8b1c73c804db83d0667e04bb9d29c36a0808f5baf2a06fdde7fe9ee4fc6c8db76bcf73cb52d2c1269ed7ae002dc4f1e97f48399ba70bd876e724d7e0922af2a433e112a8bad290a49493c1e033cf18bf4ab3a02808ee8b3d5"}}]}) syz_usb_control_io$printer(r3, &(0x7f0000000740)={0x14, &(0x7f0000000640)={0x20, 0x1, 0x7c, {0x7c, 0x21, "af0ec6389ca64c690d51c237b7ebe1e94d0ca62c69b07cc699bfccff8c455a48588c0e67fe2b12d0670d01fd75d5cd346f46fe79db8b0f0b03e0ae4bda13d225210b177fd8819a6caab79af9adc7b128ecb7cb7b22f894cfa3193c3ce3b87fcf476b70c85798838afa57c58ffba8e172e5a57daefed0655f2343"}}, &(0x7f0000000700)={0x0, 0x3, 0x30, @string={0x30, 0x3, "1913a02a260bc43060861fbdd9e3e0bfff46fea8d703ce8aa87c222b5aee60887835ac664f352fbc377ef7bc1064"}}}, &(0x7f0000000a00)={0x34, &(0x7f0000000780)={0x0, 0x7, 0x6f, "fd19721686529e4c2d4d6ca271af8c6e693b6fd106ea1918263b399d26a153e089b33e1f557aba781f66fd4d95ce1b6beb5f558b12dc4ae134a0e52ac718d3316263338395f4be92b5b575f29b8d7611de7146aa41b693d0588561e1b576e03c8eea56b26d0386d952da3e98f62df3"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000008c0)={0x20, 0x0, 0x84, {0x82, "da8d967fadc2f131d589ffe1879bd38c9d6bfff9df3b819d5737834b3fe2bbd4f4151ceb35c624d6aa67df3508e03ed4983d3249150aa6cbeb64657b9158406ce00956726508c76f73db8485a1327427ce7adb356058ef7bb70b763ea762e42a06e41ead6e4226f1613278c0bddeb743b468b89f1b9a83b0d60e0bea5efe9414e89a"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x2}, &(0x7f00000009c0)={0x20, 0x0, 0x1}}) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = accept$alg(r2, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000c80)={0x14, &(0x7f0000000a40)={0x20, 0x4, 0x100, {0x100, 0xf, "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"}}, &(0x7f0000000b80)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "0b7988a91e6df56e0edd28beb228700bc517aa77c8060ccf71d1c6339de27546acdfadc2e11d3e3adfab591442f8b830bb043734af43b9642c0f86cab44bc58ca400a3a90b62673de89e216b952ea876be7eb3b617f0e7ddbc5d6b7f95cb79a919747c86fb04b61dbe821dca9ca6061dd4c2aa558fab94fe08e84937b08af8926bb96fb69815b06e2d4b3715ff459e6a6db816d96bab84de9a619934b9dfeb29a808629010824c1f0e62d8d3fcf165f1a9b4dd7f0d9eb6bc4e07d4218a0bc31816ba0029a005b75dbd102c8262622865b2c43d32"}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x40, 0x7, 0x79, "066a93caf3d64a1c8322ee52ea9ab8285828a0f0505df5979804cf1474a618a8e4803839ebb69e68956f172b2adad6648aaa199652f8fa6424d0d9ebe0a1ec219ba93087f7419df174a32238f7c5707e710021b4413eb5c22bf311b2904f34df85992eb0cd65601569f884bb53df8724b8f6a6af1ec066249b"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x81, 0x2, "ab1d"}, &(0x7f0000000e00)={0x20, 0x82, 0x2, "9e73"}, &(0x7f0000000e40)={0x20, 0x83, 0x2, "17ea"}, &(0x7f0000000e80)={0x20, 0x84, 0x3, "b73e87"}, &(0x7f0000000ec0)={0x20, 0x85, 0x3, "d14399"}}) recvmsg(r4, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$inet(r4, &(0x7f0000005d00), 0x4000000000001e3, 0x8044) 1.503999136s ago: executing program 4 (id=126): r0 = socket$packet(0x11, 0x2, 0x300) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) clock_gettime(0x0, 0x0) io_getevents(0x0, 0x8, 0x2, &(0x7f0000000180)=[{}, {}], 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4800) mount$tmpfs(0x0, &(0x7f0000005dc0)='.\x00', &(0x7f0000005e00), 0x1000000, &(0x7f0000005e40)={[{@nr_inodes={'nr_inodes', 0x3d, [0x30]}}]}) 1.428151597s ago: executing program 3 (id=127): r0 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x399, r0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600fc000000000000000000000000000000ff020000000000000000000000000001000040", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6337000090780000"], 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) setns(0xc9, 0x0) 1.372525832s ago: executing program 2 (id=128): socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4140, 0x85) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES8=r0], 0x2b) sendfile(r3, r1, 0x0, 0x95e2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd0c, &(0x7f0000000000)="0400000000000000000000003801") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x1993) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) 1.170517506s ago: executing program 3 (id=129): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) getsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x26e1, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0xf, 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x4000010, r5, 0x671d8000) 661.9676ms ago: executing program 0 (id=130): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x494, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000002c000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008eeff00b7030000feffffff850000007b00000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x5, 0xe, 0x0, &(0x7f0000000900)="0101000071a78326c799dbe888a8", 0x0, 0xd00, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x10c, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x2, 0xf}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r3 = syz_ublk_setup_io_uring(0x1a30, &(0x7f0000000240)={0x0, 0x8be, 0x400, 0x1024002, 0x8004d}, &(0x7f0000000380)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x1, 0x40, 0x1}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000001c0)={0x2e, 0x4d, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000100)=@any_dev={0x3, 0x9ad, 0x0, 0x0, 0x1000, 0x800, 0x0, 0x0, 0x62}}}, 0x0) 414.67165ms ago: executing program 4 (id=131): ptrace$setsig(0x4203, 0x0, 0x1, &(0x7f0000000440)={0x25, 0x5, 0x48b0960f}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040044}, 0x4000095) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000003c0)="f8c0c809001000000000000100008000000000372be90aa7eb4167816a39f4748cfc8b64aa9cd6be0d948929b215b750b033b962ecd27372a41a2f9eff2aaab4bffc8d4083e08d04488151af0f1b2c1f651bcc60933e61020e69a5b17e61696ee1045fc39da74f7e81aeb700", 0xfffffebf}], 0x2}}, {{0x0, 0x0, &(0x7f0000003680), 0x1}}], 0x2, 0x4000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x412102, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0)={0xffffffffffffffff}, 0x1, {0xa, 0x4e24, 0xe3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x80000000, 0x0, 0x800, 0x4, 0xa}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x1000000000000, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280), 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc0100"/56], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 244.172638ms ago: executing program 2 (id=132): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88801e80500180012800e0001007769726567756172640000", @ANYRES32=r3, @ANYBLOB="08001f000500cf00"], 0x48}}, 0x440088c4) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) r6 = getpid() tgkill(r6, r5, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@deltaction={0x104, 0x31, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x5f, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x104}}, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) 0s ago: executing program 3 (id=133): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x8, 0x3, {{0x15, 0x4, 0x1, 0x14, 0x54, 0x68, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0x88, 0x3, 0x8, [{@loopback, 0x30000000}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x7cd9}, {@local, 0x24b}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0x43, 0x0, 0x0, [0x6]}, @generic={0x7, 0xe, "abb73471590e5a4140817210"}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c40)={&(0x7f0000001300)={0x268, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf8}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '/dev/sequencer2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '(,\'.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1a23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x28000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x2400c044}, 0x0) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, r10, 0x331, 0x1ffc, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r12, 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 64.530423][ T30] audit: type=1400 audit(1786981656.911:129): avc: denied { mounton } for pid=5581 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.553982][ T30] audit: type=1400 audit(1786981656.941:130): avc: denied { mount } for pid=5581 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.556492][ T5581] cgroup: Unknown subsys name 'net' [ 64.582997][ T30] audit: type=1400 audit(1786981656.971:131): avc: denied { unmount } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.735533][ T5581] cgroup: Unknown subsys name 'cpuset' [ 64.743118][ T5581] cgroup: Unknown subsys name 'rlimit' [ 64.861350][ T30] audit: type=1400 audit(1786981657.241:132): avc: denied { setattr } for pid=5581 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.884742][ T30] audit: type=1400 audit(1786981657.241:133): avc: denied { create } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.913668][ T30] audit: type=1400 audit(1786981657.241:134): avc: denied { write } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.934384][ T30] audit: type=1400 audit(1786981657.241:135): avc: denied { read } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.954821][ T30] audit: type=1400 audit(1786981657.241:136): avc: denied { mounton } for pid=5581 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.980302][ T30] audit: type=1400 audit(1786981657.241:137): avc: denied { mount } for pid=5581 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.017435][ T5583] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.027730][ T30] audit: type=1400 audit(1786981657.411:138): avc: denied { relabelto } for pid=5583 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.966819][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.936892][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.940331][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.945219][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.959159][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.966293][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.974367][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.976234][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.989666][ T5595] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.997091][ T5595] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.005461][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.006275][ T5599] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.014730][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.020809][ T5599] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.034164][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.034914][ T5599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.048563][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.052377][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.063804][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.071696][ T5599] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.072732][ T4914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.096212][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.106840][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.114547][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.122571][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.130002][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.318100][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.325271][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.332450][ T5593] bridge_slave_0: entered allmulticast mode [ 69.339259][ T5593] bridge_slave_0: entered promiscuous mode [ 69.369160][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.376363][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.383497][ T5593] bridge_slave_1: entered allmulticast mode [ 69.390142][ T5593] bridge_slave_1: entered promiscuous mode [ 69.396722][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.403793][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.410874][ T5600] bridge_slave_0: entered allmulticast mode [ 69.417648][ T5600] bridge_slave_0: entered promiscuous mode [ 69.440533][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.447687][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.454943][ T5600] bridge_slave_1: entered allmulticast mode [ 69.461751][ T5600] bridge_slave_1: entered promiscuous mode [ 69.513950][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.528858][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.536076][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.543359][ T5592] bridge_slave_0: entered allmulticast mode [ 69.550020][ T5592] bridge_slave_0: entered promiscuous mode [ 69.569620][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.580343][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.589535][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.596711][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.603871][ T5592] bridge_slave_1: entered allmulticast mode [ 69.610454][ T5592] bridge_slave_1: entered promiscuous mode [ 69.622893][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.629949][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.637999][ T5606] bridge_slave_0: entered allmulticast mode [ 69.645280][ T5606] bridge_slave_0: entered promiscuous mode [ 69.659307][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.674904][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.682018][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.689430][ T5603] bridge_slave_0: entered allmulticast mode [ 69.696284][ T5603] bridge_slave_0: entered promiscuous mode [ 69.703088][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.710154][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.717346][ T5606] bridge_slave_1: entered allmulticast mode [ 69.724085][ T5606] bridge_slave_1: entered promiscuous mode [ 69.748265][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.755422][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.762583][ T5603] bridge_slave_1: entered allmulticast mode [ 69.769172][ T5603] bridge_slave_1: entered promiscuous mode [ 69.783523][ T5593] team0: Port device team_slave_0 added [ 69.797125][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.825742][ T5593] team0: Port device team_slave_1 added [ 69.832718][ T5600] team0: Port device team_slave_0 added [ 69.839865][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.851169][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.862208][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.878142][ T5600] team0: Port device team_slave_1 added [ 69.891874][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.903407][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.944266][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.951257][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.977362][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.998951][ T5592] team0: Port device team_slave_0 added [ 70.006317][ T5592] team0: Port device team_slave_1 added [ 70.024599][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.031579][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.057524][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.068866][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.075817][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.082970][ T4914] Bluetooth: hci0: command tx timeout [ 70.102159][ T5601] Bluetooth: hci2: command tx timeout [ 70.107629][ T5599] Bluetooth: hci1: command tx timeout [ 70.113201][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.137063][ T5603] team0: Port device team_slave_0 added [ 70.144029][ T5606] team0: Port device team_slave_0 added [ 70.155180][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.162114][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.188758][ T4914] Bluetooth: hci4: command tx timeout [ 70.192447][ T4914] Bluetooth: hci3: command tx timeout [ 70.194250][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.210473][ T5603] team0: Port device team_slave_1 added [ 70.211562][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.223056][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.249787][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.262176][ T5606] team0: Port device team_slave_1 added [ 70.282201][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.289274][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.315218][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.333021][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.339955][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.365915][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.382991][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.389924][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.415799][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.462412][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.469351][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.495363][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.510133][ T5593] hsr_slave_0: entered promiscuous mode [ 70.516317][ T5593] hsr_slave_1: entered promiscuous mode [ 70.538236][ T5600] hsr_slave_0: entered promiscuous mode [ 70.544262][ T5600] hsr_slave_1: entered promiscuous mode [ 70.550063][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 70.556238][ T5600] Cannot create hsr debugfs directory [ 70.562154][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.569178][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.595068][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.613069][ T5592] hsr_slave_0: entered promiscuous mode [ 70.619030][ T5592] hsr_slave_1: entered promiscuous mode [ 70.625307][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 70.631024][ T5592] Cannot create hsr debugfs directory [ 70.654082][ T5606] hsr_slave_0: entered promiscuous mode [ 70.660051][ T5606] hsr_slave_1: entered promiscuous mode [ 70.666089][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 70.671802][ T5606] Cannot create hsr debugfs directory [ 70.753169][ T5603] hsr_slave_0: entered promiscuous mode [ 70.759151][ T5603] hsr_slave_1: entered promiscuous mode [ 70.765140][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 70.770845][ T5603] Cannot create hsr debugfs directory [ 70.894663][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.901484][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.067548][ T5592] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.078474][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.086041][ T5592] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.094679][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.102783][ T5592] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.111068][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.118883][ T5592] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.127433][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.179015][ T5593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.188734][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.197712][ T5593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.206969][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.214954][ T5593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.223934][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.233223][ T5593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.241847][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.303994][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.313269][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.321332][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.330836][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.339030][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.347736][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.355634][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.364546][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.443278][ T5600] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.451627][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.459617][ T5600] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.468459][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.476759][ T5600] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.485375][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.493037][ T5600] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.501315][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.557492][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.603542][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.611802][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.619795][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.628320][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.636571][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.646581][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.654579][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.663656][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.700586][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.716492][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.727179][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.749817][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.757224][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.766782][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.773904][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.801519][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.834929][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.842005][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.855259][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.870798][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.877877][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.886938][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.893996][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.915204][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.922251][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.945744][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.997695][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.021069][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.028153][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.050925][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.058068][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.070160][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 72.070173][ T30] audit: type=1400 audit(1786981664.451:152): avc: denied { sys_module } for pid=5592 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.096629][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.151561][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.165286][ T4914] Bluetooth: hci0: command tx timeout [ 72.165671][ T5599] Bluetooth: hci1: command tx timeout [ 72.170689][ T5601] Bluetooth: hci2: command tx timeout [ 72.197091][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.204225][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.242855][ T5601] Bluetooth: hci3: command tx timeout [ 72.243242][ T4914] Bluetooth: hci4: command tx timeout [ 72.256643][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.263768][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.789133][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.904367][ T5592] veth0_vlan: entered promiscuous mode [ 72.934245][ T5592] veth1_vlan: entered promiscuous mode [ 72.999417][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.049576][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.079977][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.098065][ T5592] veth0_macvtap: entered promiscuous mode [ 73.129314][ T5592] veth1_macvtap: entered promiscuous mode [ 73.144476][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.199335][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.215295][ T5606] veth0_vlan: entered promiscuous mode [ 73.243036][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.267152][ T5606] veth1_vlan: entered promiscuous mode [ 73.294503][ T5593] veth0_vlan: entered promiscuous mode [ 73.331615][ T5603] veth0_vlan: entered promiscuous mode [ 73.342094][ T5593] veth1_vlan: entered promiscuous mode [ 73.364693][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.377315][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.396637][ T5603] veth1_vlan: entered promiscuous mode [ 73.448905][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.457394][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.463700][ T5606] veth0_macvtap: entered promiscuous mode [ 73.482589][ T5600] veth0_vlan: entered promiscuous mode [ 73.493049][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.512084][ T5606] veth1_macvtap: entered promiscuous mode [ 73.529908][ T5593] veth0_macvtap: entered promiscuous mode [ 73.537289][ T5600] veth1_vlan: entered promiscuous mode [ 73.546520][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.555530][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.558645][ T5593] veth1_macvtap: entered promiscuous mode [ 73.581884][ T5603] veth0_macvtap: entered promiscuous mode [ 73.583924][ T30] audit: type=1400 audit(1786981665.971:153): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.wh5vLH/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.606455][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.615337][ T30] audit: type=1400 audit(1786981665.971:154): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.643430][ T30] audit: type=1400 audit(1786981665.971:155): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.wh5vLH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.675170][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.684368][ T5603] veth1_macvtap: entered promiscuous mode [ 73.693119][ T179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.704197][ T30] audit: type=1400 audit(1786981665.971:156): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.726817][ T30] audit: type=1400 audit(1786981665.971:157): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.wh5vLH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 73.733810][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.758427][ T30] audit: type=1400 audit(1786981665.971:158): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.wh5vLH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 73.763813][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.798069][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.816619][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.817567][ T30] audit: type=1400 audit(1786981665.971:159): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 73.845721][ T30] audit: type=1400 audit(1786981666.001:160): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.846584][ T5600] veth0_macvtap: entered promiscuous mode [ 73.870668][ T30] audit: type=1400 audit(1786981666.001:161): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="gadgetfs" ino=7641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 73.882820][ T5600] veth1_macvtap: entered promiscuous mode [ 73.919267][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.976038][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.993818][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.024044][ T196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.052158][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125231][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.133699][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.146535][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.158514][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.192865][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.208378][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.216650][ T196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.223075][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.230254][ T5690] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 74.233888][ T196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.249727][ T4914] Bluetooth: hci2: command tx timeout [ 74.249752][ T4914] Bluetooth: hci1: command tx timeout [ 74.255486][ T5601] Bluetooth: hci0: command tx timeout [ 74.274281][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.282149][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.304293][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.313719][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.322928][ T4914] Bluetooth: hci3: command tx timeout [ 74.332820][ T4914] Bluetooth: hci4: command tx timeout [ 74.345814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.354584][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.363045][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.384548][ T5690] usb 4-1: Using ep0 maxpacket: 8 [ 74.409801][ T5690] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 74.419745][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.440755][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.452112][ T5690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 74.481370][ T5690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 74.518218][ T5690] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 74.546571][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.563388][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.700972][ T29] IPVS: starting estimator thread 0... [ 74.772465][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822665][ T5790] IPVS: using max 43 ests per chain, 103200 per kthread [ 74.887387][ T5787] geneve2: entered promiscuous mode [ 74.892815][ T5787] geneve2: entered allmulticast mode [ 74.974604][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.100321][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.117417][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.136723][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.161817][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.284864][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.348593][ T3275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.396070][ T3275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.440304][ T3275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.538751][ T5789] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 75.606495][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.667414][ T5780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.756783][ T5780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.764538][ T5780] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.791499][ T5690] mdc800 4-1:1.0: Found Mustek MDC800 on USB. [ 76.008701][ T5808] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.035747][ T5808] CIFS: Attempting to mount //127.0.0.1/share [ 76.092671][ T5808] CIFS: VFS: Error connecting to socket. Aborting operation. [ 76.100383][ T5808] CIFS: VFS: cifs_mount failed w/return code = -111 [ 76.108659][ T5703] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.361199][ T5601] Bluetooth: hci0: command tx timeout [ 76.367534][ T5601] Bluetooth: hci2: command tx timeout [ 76.373862][ T4914] Bluetooth: hci1: command tx timeout [ 76.402559][ T4914] Bluetooth: hci4: command tx timeout [ 76.407992][ T5601] Bluetooth: hci3: command tx timeout [ 77.103660][ T5690] usb 4-1: USB disconnect, device number 2 [ 77.171718][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 77.171733][ T30] audit: type=1400 audit(1786981669.551:195): avc: denied { create } for pid=5819 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.212367][ T5703] usb 5-1: Using ep0 maxpacket: 8 [ 77.303004][ T5690] mdc800 4-1:1.0: Mustek MDC800 disconnected from USB. [ 77.371328][ T5703] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.382754][ T30] audit: type=1400 audit(1786981669.751:196): avc: denied { append } for pid=5822 comm="syz.3.9" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.385564][ T5703] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 77.460700][ T5825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8'. [ 77.829392][ T30] audit: type=1400 audit(1786981669.751:197): avc: denied { open } for pid=5822 comm="syz.3.9" path="/dev/sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 77.890317][ T5703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.952167][ T5703] usb 5-1: config 0 descriptor?? [ 77.989651][ T30] audit: type=1400 audit(1786981669.751:198): avc: denied { create } for pid=5822 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 78.116594][ T30] audit: type=1400 audit(1786981669.831:199): avc: denied { map } for pid=5819 comm="syz.2.8" path="socket:[8186]" dev="sockfs" ino=8186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.145466][ T30] audit: type=1400 audit(1786981669.831:200): avc: denied { read } for pid=5819 comm="syz.2.8" path="socket:[8186]" dev="sockfs" ino=8186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.216900][ T30] audit: type=1400 audit(1786981669.831:201): avc: denied { ioctl } for pid=5819 comm="syz.2.8" path="socket:[8186]" dev="sockfs" ino=8186 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.262894][ T5703] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 78.280035][ T5586] udevd[5586]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 78.312532][ T5833] CIFS: Attempting to mount //127.0.0.1/share [ 78.319451][ T5833] CIFS: VFS: Error connecting to socket. Aborting operation. [ 78.327336][ T5833] CIFS: VFS: cifs_mount failed w/return code = -111 [ 78.379267][ T30] audit: type=1400 audit(1786981670.521:202): avc: denied { append } for pid=5822 comm="syz.3.9" name="v4l-subdev3" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.443671][ T30] audit: type=1400 audit(1786981670.741:203): avc: denied { ioctl } for pid=5822 comm="syz.3.9" path="/dev/sg0" dev="devtmpfs" ino=716 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 78.472421][ T5690] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.514039][ T30] audit: type=1400 audit(1786981670.801:204): avc: denied { unlink } for pid=5836 comm="syz.2.12" name="#1" dev="tmpfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 78.634277][ T5690] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 78.651021][ T5842] CacheFiles: No cache directory specified [ 78.679871][ T5690] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.476524][ T5690] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.486489][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.502416][ T5690] usb 1-1: config 0 descriptor?? [ 79.511828][ T5690] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 79.518931][ T5690] dvb-usb: bulk message failed: -22 (3/0) [ 79.530295][ T5690] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 79.539453][ T5690] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 79.546873][ T5690] usb 1-1: media controller created [ 79.555501][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 79.575438][ T5690] dvb-usb: bulk message failed: -22 (6/0) [ 79.582005][ T5690] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 79.611162][ T5690] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 79.649725][ T5690] dvb-usb: schedule remote query interval to 150 msecs. [ 79.658480][ T5690] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 79.679154][ T5850] Bluetooth: MGMT ver 1.23 [ 79.772869][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.782456][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.823746][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 79.849246][ T9] dvb-usb: error while querying for an remote control event. [ 79.876904][ T5857] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 79.885624][ T9] libceph: connect (1)[c::]:6789 error -101 [ 79.994500][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 80.050308][ T5720] dvb-usb: bulk message failed: -22 (1/0) [ 80.061773][ T5720] dvb-usb: error while querying for an remote control event. [ 80.095770][ T5861] input: syz0 as /devices/virtual/input/input6 [ 80.098373][ T5855] ceph: No mds server is up or the cluster is laggy [ 80.132524][ T5690] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.238756][ T5330] dvb-usb: bulk message failed: -22 (1/0) [ 80.260340][ T5330] dvb-usb: error while querying for an remote control event. [ 80.325311][ T5690] usb 3-1: Using ep0 maxpacket: 16 [ 80.357319][ T5690] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 80.377938][ T5690] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.391090][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.403121][ T5690] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 80.409811][ T983] usb 1-1: USB disconnect, device number 2 [ 80.419590][ T5690] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 80.439715][ T5690] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.465107][ T5690] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 80.473945][ T5690] usb 3-1: Manufacturer: syz [ 80.514308][ T5690] usb 3-1: config 0 descriptor?? [ 80.538524][ T983] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 83.066021][ T5690] rc_core: IR keymap rc-hauppauge not found [ 83.081418][ T5720] usb 5-1: USB disconnect, device number 2 [ 83.102450][ T5690] Registered IR keymap rc-empty [ 83.126423][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 83.164244][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 83.164258][ T30] audit: type=1400 audit(1786981675.551:233): avc: denied { name_bind } for pid=5881 comm="syz.4.23" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 83.170447][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 83.206689][ T5883] netlink: 'syz.2.24': attribute type 13 has an invalid length. [ 83.250496][ T5883] gretap0: refused to change device tx_queue_len [ 83.258194][ T5690] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 83.275167][ T983] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.299974][ T5883] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 83.313469][ T30] audit: type=1400 audit(1786981675.581:234): avc: denied { node_bind } for pid=5881 comm="syz.4.23" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 83.351260][ T5690] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 83.402415][ T5703] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.444500][ T5888] CacheFiles: No cache directory specified [ 83.483062][ T983] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 83.527778][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 83.606004][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 83.701364][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.237331][ T30] audit: type=1400 audit(1786981675.781:235): avc: denied { create } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.366311][ T983] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 84.387834][ T30] audit: type=1400 audit(1786981675.801:236): avc: denied { setopt } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.440096][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 84.462003][ T983] usb 1-1: can't read configurations, error -71 [ 84.504770][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 84.524772][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.542432][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.572438][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.575801][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.592532][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.597387][ T30] audit: type=1400 audit(1786981675.801:237): avc: denied { getopt } for pid=5877 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.622487][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.654841][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.658019][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.700441][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 84.714967][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 84.737779][ T30] audit: type=1400 audit(1786981677.111:238): avc: denied { open } for pid=5898 comm="syz.4.28" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.762579][ T5690] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 84.786858][ T5690] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 84.792503][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.804484][ T5690] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 84.821794][ T30] audit: type=1400 audit(1786981677.121:239): avc: denied { mount } for pid=5898 comm="syz.4.28" name="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 84.844543][ T5690] usb 3-1: USB disconnect, device number 2 [ 84.892119][ T5703] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 84.932101][ T5703] usb 2-1: Manufacturer: syz [ 85.009865][ T30] audit: type=1400 audit(1786981677.121:240): avc: denied { search } for pid=5898 comm="syz.4.28" name="/" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 85.047368][ T5703] usb 2-1: config 0 descriptor?? [ 85.210350][ T30] audit: type=1400 audit(1786981677.121:241): avc: denied { search } for pid=5898 comm="syz.4.28" name="cluster" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.107457][ T5690] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.486548][ T30] audit: type=1400 audit(1786981677.121:242): avc: denied { write search } for pid=5898 comm="syz.4.28" name="cluster" dev="configfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 86.490979][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 86.520391][ T5916] ceph: No mds server is up or the cluster is laggy [ 86.553986][ T10] cfg80211: failed to load regulatory.db [ 86.572355][ T5703] rc_core: IR keymap rc-hauppauge not found [ 86.578345][ T5703] Registered IR keymap rc-empty [ 86.584512][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 86.633090][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 86.793762][ T5690] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 86.892746][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 86.900319][ T5690] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 86.930986][ T5690] usb 3-1: config 0 interface 0 has no altsetting 0 [ 87.009294][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 87.023879][ T5690] usb 3-1: Product: syz [ 87.034527][ T5690] usb 3-1: Manufacturer: syz [ 87.053649][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 87.066957][ T5690] usb 3-1: SerialNumber: syz [ 87.114524][ T5690] usb 3-1: config 0 descriptor?? [ 87.133434][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 87.174525][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 87.232079][ T5690] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 87.397277][ T5690] usb 3-1: USB disconnect, device number 3 [ 87.400566][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.215745][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.252953][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.494986][ T5938] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 88.505888][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 88.505917][ T30] audit: type=1400 audit(1786981680.831:271): avc: denied { accept } for pid=5932 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 88.581870][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.606948][ T5935] ceph: No mds server is up or the cluster is laggy [ 88.621389][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.624495][ T983] libceph: connect (1)[c::]:6789 error -101 [ 88.643955][ T983] libceph: mon0 (1)[c::]:6789 connect error [ 88.662429][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.682849][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.704173][ T5928] syzkaller0: entered promiscuous mode [ 88.709679][ T5928] syzkaller0: entered allmulticast mode [ 88.716320][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.719935][ T30] audit: type=1400 audit(1786981681.081:272): avc: denied { create } for pid=5927 comm="syz.4.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.835900][ T30] audit: type=1400 audit(1786981681.091:273): avc: denied { ioctl } for pid=5927 comm="syz.4.35" path="socket:[8791]" dev="sockfs" ino=8791 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 88.846179][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.875128][ T30] audit: type=1400 audit(1786981681.151:274): avc: denied { create } for pid=5950 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.893022][ T5952] netlink: 'syz.0.38': attribute type 13 has an invalid length. [ 88.894469][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 88.913905][ T30] audit: type=1400 audit(1786981681.151:275): avc: denied { bind } for pid=5950 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 88.956544][ T5703] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 88.965793][ T5703] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 88.976346][ T5952] gretap0: refused to change device tx_queue_len [ 88.984598][ T5703] usb 2-1: USB disconnect, device number 2 [ 88.988127][ T5952] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 89.076383][ T30] audit: type=1400 audit(1786981681.461:276): avc: denied { unmount } for pid=5600 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 89.382570][ T5703] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.439260][ T30] audit: type=1400 audit(1786981681.561:277): avc: denied { write } for pid=5958 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.722527][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 89.729394][ T30] audit: type=1400 audit(1786981681.561:278): avc: denied { read } for pid=5958 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.802920][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 90.054677][ T5690] IPVS: starting estimator thread 0... [ 90.118659][ T5968] geneve2: entered promiscuous mode [ 90.124632][ T5968] geneve2: entered allmulticast mode [ 90.215524][ T5969] IPVS: using max 77 ests per chain, 184800 per kthread [ 90.314317][ T5703] usb 2-1: unable to read config index 0 descriptor/all [ 91.141691][ T10] libceph: connect (1)[c::]:6789 error -101 [ 91.166047][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 91.591472][ T5703] usb 2-1: can't read configurations, error -71 [ 91.597868][ T30] audit: type=1400 audit(1786981682.161:279): avc: denied { mount } for pid=5953 comm="syz.3.39" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 91.622610][ T30] audit: type=1800 audit(1786981682.711:280): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.42" name="ipv4_address" dev="configfs" ino=9446 res=0 errno=0 [ 91.677689][ T5982] ceph: No mds server is up or the cluster is laggy [ 92.686540][ T5703] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.733844][ T5954] Zero length message leads to an empty skb [ 92.837372][ T5990] syzkaller0: entered promiscuous mode [ 92.844721][ T5990] syzkaller0: entered allmulticast mode [ 92.872361][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 92.889927][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 92.941116][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.962165][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 93.009575][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 93.051302][ T5703] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 93.082082][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.106626][ T5703] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 93.116195][ T5703] usb 2-1: Manufacturer: syz [ 93.183986][ T5996] netlink: 'syz.2.49': attribute type 49 has an invalid length. [ 93.241668][ T5703] usb 2-1: config 0 descriptor?? [ 93.269457][ T5996] bond0: (slave bond_slave_0): Releasing backup interface [ 93.769701][ T5996] bond_slave_0: entered promiscuous mode [ 93.787387][ T5996] bond_slave_0: entered allmulticast mode [ 93.794901][ T5703] rc_core: IR keymap rc-hauppauge not found [ 93.808574][ T5703] Registered IR keymap rc-empty [ 93.832718][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 93.892457][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 94.015001][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 94.085430][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input9 [ 94.199478][ T6014] CacheFiles: No cache directory specified [ 94.854629][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 94.854655][ T30] audit: type=1400 audit(1786981686.611:287): avc: denied { create } for pid=6006 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.043303][ T6008] CIFS: Attempting to mount //127.0.0.1/share [ 95.051288][ T6008] CIFS: VFS: Error connecting to socket. Aborting operation. [ 95.058727][ T6008] CIFS: VFS: cifs_mount failed w/return code = -111 [ 95.110622][ T30] audit: type=1400 audit(1786981686.611:288): avc: denied { setopt } for pid=6006 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.134156][ T30] audit: type=1400 audit(1786981686.611:289): avc: denied { write } for pid=6006 comm="syz.2.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.156154][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.183697][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.202534][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.216510][ T30] audit: type=1400 audit(1786981687.601:290): avc: denied { write } for pid=6010 comm="syz.0.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.243006][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.282652][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.305002][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.334855][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.363550][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.366902][ T3275] Bluetooth: hci5: Frame reassembly failed (-84) [ 95.396892][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.552437][ T5703] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 95.576082][ T5703] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 95.591339][ T30] audit: type=1400 audit(1786981687.971:291): avc: denied { write } for pid=6002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.592418][ T5594] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.624967][ T5703] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 95.688182][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.695882][ T983] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.810000][ T5703] usb 2-1: USB disconnect, device number 4 [ 95.862477][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 95.894325][ T983] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 95.910559][ T29] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.037632][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 96.051845][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 96.061861][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 96.070163][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.084015][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.103006][ T5594] usb 1-1: Using ep0 maxpacket: 16 [ 96.111692][ T5594] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 96.122932][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.140695][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.145404][ T30] audit: type=1400 audit(1786981688.521:292): avc: denied { write } for pid=6042 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.156886][ T983] usb 5-1: config 0 descriptor?? [ 96.185582][ T5594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.218921][ T5594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.236714][ T6036] ceph: No mds server is up or the cluster is laggy [ 96.246161][ T29] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.336810][ T6023] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 96.344691][ T5594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 96.357157][ T29] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.371500][ T5594] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 96.383127][ T5594] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.404190][ T29] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.419978][ T29] usb 4-1: Manufacturer: syz [ 96.426091][ T5594] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 96.440175][ T29] usb 4-1: config 0 descriptor?? [ 96.453783][ T5594] usb 1-1: Manufacturer: syz [ 96.475494][ T5594] usb 1-1: config 0 descriptor?? [ 96.536520][ T6049] CIFS: Attempting to mount //127.0.0.1/share [ 96.550185][ T6049] CIFS: VFS: Error connecting to socket. Aborting operation. [ 96.557918][ T6049] CIFS: VFS: cifs_mount failed w/return code = -111 [ 96.637607][ T983] usbhid 5-1:0.0: can't add hid device: -71 [ 96.656585][ T983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.692682][ T5796] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.885219][ T983] usb 5-1: USB disconnect, device number 3 [ 96.939140][ T5796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.060172][ T5796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.244183][ T5796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.390505][ T5796] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.417851][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 97.483406][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.491423][ T5796] usb 3-1: Product: syz [ 97.496276][ T5796] usb 3-1: Manufacturer: syz [ 97.500870][ T5796] usb 3-1: SerialNumber: syz [ 97.505483][ T5594] rc_core: IR keymap rc-hauppauge not found [ 97.512037][ T29] rc_core: IR keymap rc-hauppauge not found [ 97.517960][ T5594] Registered IR keymap rc-empty [ 97.522975][ T29] Registered IR keymap rc-empty [ 97.532617][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.539846][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.574023][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.584295][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.605016][ T5796] cdc_ncm 3-1:1.0: skipping garbage [ 97.613568][ T5594] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 97.627435][ T29] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 97.640391][ T5796] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 97.648770][ T5594] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 97.664368][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input11 [ 97.676604][ T5796] cdc_ncm 3-1:1.0: bind() failure [ 97.689626][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.704979][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.747669][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.755081][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.770888][ T6062] CIFS: Attempting to mount //127.0.0.1/share [ 97.812050][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.812555][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.829598][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.862053][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.872478][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.881741][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.895467][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 97.900647][ T6062] CIFS: VFS: Error connecting to socket. Aborting operation. [ 97.902795][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 97.921114][ T983] usb 3-1: USB disconnect, device number 4 [ 97.929473][ T6062] CIFS: VFS: cifs_mount failed w/return code = -111 [ 97.973107][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 98.772413][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 98.800326][ T30] audit: type=1400 audit(1786981691.171:293): avc: denied { write } for pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.126217][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.133751][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 99.147088][ T6078] CIFS: Attempting to mount //127.0.0.1/share [ 99.154492][ T6078] CIFS: VFS: Error connecting to socket. Aborting operation. [ 99.161872][ T6078] CIFS: VFS: cifs_mount failed w/return code = -111 [ 99.194541][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 99.729404][ T983] IPVS: starting estimator thread 0... [ 99.783553][ T6081] geneve2: entered promiscuous mode [ 99.788813][ T6081] geneve2: entered allmulticast mode [ 100.134301][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 100.162776][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.172030][ T30] audit: type=1400 audit(1786981692.551:294): avc: denied { write } for pid=6083 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.224613][ T29] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 100.243747][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 100.293882][ T5594] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 100.308642][ T29] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 100.319455][ T5594] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 100.329813][ T5594] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.342957][ T6082] IPVS: using max 77 ests per chain, 184800 per kthread [ 100.350547][ T5594] usb 1-1: USB disconnect, device number 5 [ 100.402155][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 100.592680][ T5796] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.717179][ T29] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.952510][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 100.959341][ T5796] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.984554][ T29] usb 4-1: USB disconnect, device number 3 [ 100.993886][ T6101] CacheFiles: No cache directory specified [ 101.352063][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.365112][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 101.377217][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 101.412915][ T5796] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 101.442355][ T5796] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.466398][ T5796] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 101.476154][ T5796] usb 2-1: Manufacturer: syz [ 101.508896][ T5796] usb 2-1: config 0 descriptor?? [ 101.631989][ T30] audit: type=1400 audit(1786981694.011:295): avc: denied { write } for pid=6109 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.402796][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.674192][ T5796] rc_core: IR keymap rc-hauppauge not found [ 102.721626][ T5796] Registered IR keymap rc-empty [ 102.778291][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 102.803678][ T6112] input: syz0 as /devices/virtual/input/input12 [ 102.905355][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.055335][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 103.086597][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13 [ 103.110455][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.164027][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.193629][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.202198][ T6128] CIFS: Attempting to mount //127.0.0.1/share [ 103.209677][ T6128] CIFS: VFS: Error connecting to socket. Aborting operation. [ 103.217142][ T6128] CIFS: VFS: cifs_mount failed w/return code = -111 [ 103.284245][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.312608][ T5719] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.330211][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.374738][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 103.562416][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 103.567642][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.595592][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 104.610705][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.621350][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.633269][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.648693][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 104.670610][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 104.680595][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 104.683277][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 104.696419][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.704516][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.720349][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 104.729568][ T5330] libceph: connect (1)[c::]:6789 error -101 [ 104.731910][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 104.742669][ T5719] usb 3-1: Manufacturer: syz [ 104.767820][ T5796] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 104.776997][ T5719] usb 3-1: config 0 descriptor?? [ 104.786253][ T5796] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 104.792198][ T5330] libceph: mon0 (1)[c::]:6789 connect error [ 104.801438][ T5796] usb 2-1: USB disconnect, device number 5 [ 105.053841][ T6141] ceph: No mds server is up or the cluster is laggy [ 105.053876][ T6142] ceph: No mds server is up or the cluster is laggy [ 105.073568][ T9] libceph: connect (1)[c::]:6789 error -101 [ 105.707254][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 105.782376][ T5719] rc_core: IR keymap rc-hauppauge not found [ 105.825079][ T5719] Registered IR keymap rc-empty [ 105.856895][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 105.929653][ T6164] CacheFiles: No cache directory specified [ 106.726497][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.756340][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 106.781564][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 106.805671][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.832932][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.863329][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.883638][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.904931][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.952407][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.982401][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 106.997797][ T6187] CIFS: Attempting to mount //127.0.0.1/share [ 107.005490][ T6187] CIFS: VFS: Error connecting to socket. Aborting operation. [ 107.012999][ T6187] CIFS: VFS: cifs_mount failed w/return code = -111 [ 107.074849][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.130477][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.212587][ T6190] netlink: 20 bytes leftover after parsing attributes in process `syz.1.87'. [ 107.552539][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 107.575258][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 107.586654][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 107.652761][ T5719] usb 3-1: USB disconnect, device number 5 [ 107.819823][ T5586] udevd[5586]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 107.836214][ T5816] Bluetooth: hci5: Frame reassembly failed (-84) [ 108.102380][ T5796] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.263156][ T5330] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 108.462512][ T5330] usb 1-1: Using ep0 maxpacket: 8 [ 108.493140][ T5330] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.500382][ T5719] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 108.509028][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.549236][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.700346][ T5330] usb 1-1: config 0 descriptor?? [ 109.102381][ T5796] usb 4-1: Using ep0 maxpacket: 8 [ 109.107976][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 109.117631][ T5796] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 109.126902][ T5719] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 109.432318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 109.512368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.022323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.072331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.153513][ T4914] Bluetooth: hci5: command 0x1003 tx timeout [ 110.155473][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.160936][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.171048][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.192231][ T30] audit: type=1400 audit(1786981701.661:296): avc: denied { connect } for pid=6217 comm="syz.4.97" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.219250][ T5719] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.283574][ T30] audit: type=1400 audit(1786981701.661:297): avc: denied { write } for pid=6217 comm="syz.4.97" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.293134][ T5796] usb 4-1: config 0 descriptor?? [ 110.314810][ T30] audit: type=1400 audit(1786981701.711:298): avc: denied { block_suspend } for pid=6217 comm="syz.4.97" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 110.338810][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.349986][ T5719] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.362549][ T5719] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.372275][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.372656][ T5719] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.396479][ T5719] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.404250][ T30] audit: type=1400 audit(1786981701.781:299): avc: denied { read write } for pid=6217 comm="syz.4.97" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.436577][ T5719] usb 3-1: Manufacturer: syz [ 110.458129][ T5719] usb 3-1: config 0 descriptor?? [ 110.470133][ T30] audit: type=1400 audit(1786981701.781:300): avc: denied { open } for pid=6217 comm="syz.4.97" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.493520][ T30] audit: type=1400 audit(1786981701.781:301): avc: denied { ioctl } for pid=6217 comm="syz.4.97" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 110.580838][ T5796] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 110.592574][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 110.602994][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 110.613645][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.625353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.636635][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.646666][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.656727][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.671062][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 110.685589][ T9] usb 2-1: Manufacturer: syz [ 110.700421][ T9] usb 2-1: config 0 descriptor?? [ 110.753271][ T5719] rc_core: IR keymap rc-hauppauge not found [ 110.759321][ T5719] Registered IR keymap rc-empty [ 110.764576][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.782483][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.803846][ T5719] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 110.822358][ T30] audit: type=1400 audit(1786981703.201:302): avc: denied { write } for pid=6198 comm="syz.3.91" name="iowarrior0" dev="devtmpfs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 110.831471][ T5719] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 110.863220][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.892886][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.913680][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.947439][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 110.949549][ T6230] input: syz0 as /devices/virtual/input/input17 [ 110.960589][ T5796] usb 4-1: USB disconnect, device number 4 [ 111.053378][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.164691][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.265296][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.312891][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.334148][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.364312][ T9] rc_core: IR keymap rc-hauppauge not found [ 111.373374][ T5719] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 111.374612][ T9] Registered IR keymap rc-empty [ 111.387353][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.395707][ T5719] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 111.405305][ T5719] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 111.417861][ T5719] usb 3-1: USB disconnect, device number 6 [ 111.428214][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.458898][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 111.486004][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input16 [ 111.505253][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.539726][ T5330] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 111.550559][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.582705][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.594973][ T5330] usb 1-1: USB disconnect, device number 6 [ 111.605277][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.629079][ T6233] CIFS: Attempting to mount //127.0.0.1/share [ 111.636452][ T6233] CIFS: VFS: Error connecting to socket. Aborting operation. [ 111.644704][ T6233] CIFS: VFS: cifs_mount failed w/return code = -111 [ 111.687770][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 111.849152][ T6236] geneve2: entered promiscuous mode [ 111.854848][ T6236] geneve2: entered allmulticast mode [ 112.212431][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.418850][ T6238] warning: `syz.3.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.742835][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.772966][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.792404][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.812450][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 112.834923][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 112.844421][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 112.865668][ T9] usb 2-1: USB disconnect, device number 6 [ 113.244327][ T5719] libceph: connect (1)[c::]:6789 error -101 [ 113.299603][ T5719] libceph: mon0 (1)[c::]:6789 connect error [ 113.337023][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 113.344687][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 113.813487][ T6251] ceph: No mds server is up or the cluster is laggy [ 113.813557][ T6254] ceph: No mds server is up or the cluster is laggy [ 113.834921][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 113.935359][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 114.056861][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 114.163994][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 114.631645][ T30] audit: type=1400 audit(1786981707.001:303): avc: denied { mount } for pid=6267 comm="syz.3.108" name="/" dev="autofs" ino=10020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.709939][ T6272] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 114.723005][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.731731][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.801844][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.809234][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.817627][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.824922][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.856981][ T6272] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 115.015514][ T30] audit: type=1400 audit(1786981707.021:304): avc: denied { ioctl } for pid=6265 comm="syz.0.107" path="/dev/v4l-subdev3" dev="devtmpfs" ino=944 ioctlcmd=0x5659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.054858][ T6279] CacheFiles: No cache directory specified [ 115.259662][ T30] audit: type=1400 audit(1786981707.141:305): avc: denied { read write } for pid=6273 comm="syz.4.111" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.556428][ T30] audit: type=1400 audit(1786981707.141:306): avc: denied { open } for pid=6273 comm="syz.4.111" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.762434][ T5330] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.804951][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.817507][ T30] audit: type=1400 audit(1786981708.191:307): avc: denied { read write } for pid=6288 comm="syz.0.114" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 115.921261][ T30] audit: type=1400 audit(1786981708.191:308): avc: denied { open } for pid=6288 comm="syz.0.114" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 115.982417][ T5330] usb 5-1: Using ep0 maxpacket: 8 [ 115.988306][ T5330] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.998127][ T6297] CIFS: Attempting to mount //127.0.0.1/share [ 116.005447][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.016560][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.022366][ T5594] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.042372][ T30] audit: type=1400 audit(1786981708.231:309): avc: denied { map_create } for pid=6269 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.072591][ T30] audit: type=1400 audit(1786981708.231:310): avc: denied { map_read map_write } for pid=6269 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.092506][ T30] audit: type=1400 audit(1786981708.241:311): avc: denied { prog_load } for pid=6269 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.133704][ T5330] usb 5-1: config 0 descriptor?? [ 116.147711][ T6297] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.163044][ T30] audit: type=1400 audit(1786981708.341:312): avc: denied { write } for pid=6250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.200772][ T6297] CIFS: VFS: cifs_mount failed w/return code = -111 [ 116.212494][ T5594] usb 4-1: Using ep0 maxpacket: 16 [ 116.220378][ T5594] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 116.231060][ T30] audit: type=1400 audit(1786981708.561:313): avc: denied { write } for pid=6299 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.262379][ T5594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.307141][ T30] audit: type=1400 audit(1786981708.691:314): avc: denied { prog_run } for pid=6291 comm="syz.1.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 116.310719][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.395081][ T5330] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.400616][ T5594] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 116.440629][ T5594] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 116.465551][ T5594] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.503694][ T5594] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 116.516434][ T5594] usb 4-1: Manufacturer: syz [ 116.559368][ T5594] usb 4-1: config 0 descriptor?? [ 116.671001][ T10] usb 5-1: USB disconnect, device number 4 [ 116.902351][ T5594] rc_core: IR keymap rc-hauppauge not found [ 116.918591][ T5594] Registered IR keymap rc-empty [ 116.931700][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 116.962537][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 116.993245][ T5594] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 117.029593][ T5594] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 117.069839][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.077529][ T5796] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 117.102682][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.124027][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.143586][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.152569][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 117.173131][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.192483][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.232505][ T5796] usb 2-1: Using ep0 maxpacket: 16 [ 117.242057][ T5796] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.253841][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.268981][ T5796] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.282357][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.285440][ T6334] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 117.293493][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.302018][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.310987][ T5796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.316549][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.326090][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.341819][ T5796] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.347299][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.356595][ T5796] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.358625][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.374267][ T5594] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 117.379625][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.386855][ T5796] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.392812][ T6334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.400883][ T5796] usb 2-1: Manufacturer: syz [ 117.431177][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 117.432193][ T5594] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 117.465097][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 117.473517][ T5594] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 117.486102][ T5796] usb 2-1: config 0 descriptor?? [ 117.487234][ T6334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 117.500047][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.501255][ T5594] usb 4-1: USB disconnect, device number 5 [ 117.510231][ T5330] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 117.513788][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.590254][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 117.609046][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 117.646689][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.671665][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 117.687381][ T10] usb 1-1: Manufacturer: syz [ 117.852432][ T5601] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 117.852732][ T4914] Bluetooth: hci5: command 0x1003 tx timeout [ 117.858742][ T5330] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 117.879939][ T10] usb 1-1: config 0 descriptor?? [ 117.887342][ T5330] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 117.914059][ T5330] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.945830][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 117.954583][ T5330] usb 3-1: Product: syz [ 117.962550][ T5796] rc_core: IR keymap rc-hauppauge not found [ 117.964091][ T5330] usb 3-1: Manufacturer: syz [ 117.968653][ T5796] Registered IR keymap rc-empty [ 117.974290][ T5330] usb 3-1: SerialNumber: syz [ 117.986981][ T5330] usb 3-1: config 0 descriptor?? [ 118.000720][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.032873][ T5330] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 118.055771][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.075959][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.104689][ T5796] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 118.134598][ T5796] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input19 [ 118.170055][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.197552][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.226226][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.282363][ T10] rc_core: IR keymap rc-hauppauge not found [ 118.284978][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.352577][ T5594] usb 3-1: USB disconnect, device number 7 [ 118.359020][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.434302][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.546048][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.643773][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.692696][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.732518][ T5796] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 118.836778][ T5796] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 118.886007][ T5796] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 118.979269][ T10] Registered IR keymap rc-empty [ 118.984283][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 118.992771][ T5796] usb 2-1: USB disconnect, device number 7 [ 119.003938][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.051479][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 119.069170][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input20 [ 119.085819][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.119683][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.153411][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.173428][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.203361][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.242441][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.294230][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.344027][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 119.361626][ T6349] CacheFiles: No cache directory specified [ 119.994971][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.073952][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 120.133937][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 120.144019][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 120.156457][ T10] usb 1-1: USB disconnect, device number 7 [ 120.242577][ T5796] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 120.404515][ T5796] usb 2-1: Using ep0 maxpacket: 8 [ 120.437942][ T5796] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 120.475149][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.126'. [ 120.693313][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 120.851164][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.873510][ T5796] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 120.885264][ T5796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.898850][ T6369] netlink: 'syz.3.129': attribute type 13 has an invalid length. [ 120.901999][ T6351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.948479][ T6369] gretap0: refused to change device tx_queue_len [ 120.955134][ T6351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.976789][ T6351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.989609][ T6369] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 121.018832][ T5796] mdc800 2-1:1.0: Found Mustek MDC800 on USB. [ 121.106116][ T5586] udevd[5586]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 121.283719][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.462623][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 121.468443][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 121.479539][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.490603][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.502082][ T10] usb 1-1: config 0 descriptor?? [ 121.827101][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.863594][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.927436][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.942928][ T6373] [ 121.945262][ T6373] ====================================================== [ 121.952266][ T6373] WARNING: possible circular locking dependency detected [ 121.958663][ T5330] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 121.959266][ T6373] syzkaller #0 Not tainted [ 121.971091][ T6373] ------------------------------------------------------ [ 121.978096][ T6373] syz.0.130/6373 is trying to acquire lock: [ 121.983981][ T6373] ffff88802a4e6a18 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x22/0x450 [ 121.993466][ T6373] [ 121.993466][ T6373] but task is already holding lock: [ 122.000815][ T6373] ffffffff9025d968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 122.009173][ T6373] [ 122.009173][ T6373] which lock already depends on the new lock. [ 122.009173][ T6373] [ 122.019558][ T6373] [ 122.019558][ T6373] the existing dependency chain (in reverse order) is: [ 122.028554][ T6373] [ 122.028554][ T6373] -> #1 (minor_rwsem#2){++++}-{4:4}: [ 122.036026][ T6373] lock_acquire+0x1b9/0x370 [ 122.041048][ T6373] down_write+0x8b/0x1f0 [ 122.045808][ T6373] usb_register_dev+0x11d/0x570 [ 122.051180][ T6373] mdc800_usb_probe+0x382/0x6d0 [ 122.056546][ T6373] usb_probe_interface+0x303/0x8f0 [ 122.062176][ T6373] really_probe+0x241/0xa60 [ 122.067196][ T6373] __driver_probe_device+0x20e/0x450 [ 122.072994][ T6373] driver_probe_device+0x4a/0x140 [ 122.078536][ T6373] __device_attach_driver+0x1df/0x320 [ 122.084425][ T6373] bus_for_each_drv+0x159/0x1e0 [ 122.089790][ T6373] __device_attach+0x1e4/0x4d0 [ 122.095070][ T6373] device_initial_probe+0xaf/0xd0 [ 122.100612][ T6373] bus_probe_device+0x64/0x160 [ 122.105890][ T6373] device_add+0x121d/0x1970 [ 122.110913][ T6373] usb_set_configuration+0xd97/0x1c60 [ 122.116799][ T6373] usb_generic_driver_probe+0xa1/0xe0 [ 122.122679][ T6373] usb_probe_device+0xef/0x400 [ 122.127963][ T6373] really_probe+0x241/0xa60 [ 122.132978][ T6373] __driver_probe_device+0x20e/0x450 [ 122.138777][ T6373] driver_probe_device+0x4a/0x140 [ 122.144317][ T6373] __device_attach_driver+0x1df/0x320 [ 122.150207][ T6373] bus_for_each_drv+0x159/0x1e0 [ 122.155566][ T6373] __device_attach+0x1e4/0x4d0 [ 122.160845][ T6373] device_initial_probe+0xaf/0xd0 [ 122.166384][ T6373] bus_probe_device+0x64/0x160 [ 122.171659][ T6373] device_add+0x121d/0x1970 [ 122.176679][ T6373] usb_new_device.part.0+0xcc2/0x1686 [ 122.182569][ T6373] hub_event.cold+0x1e3/0xe90 [ 122.187762][ T6373] process_one_work+0xa23/0x1940 [ 122.193649][ T6373] worker_thread+0x5ef/0xe50 [ 122.198752][ T6373] kthread+0x370/0x450 [ 122.203333][ T6373] ret_from_fork+0x72b/0xd50 [ 122.208439][ T6373] ret_from_fork_asm+0x1a/0x30 [ 122.213731][ T6373] [ 122.213731][ T6373] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 122.221457][ T6373] check_prev_add+0xeb/0xe60 [ 122.226567][ T6373] __lock_acquire+0x136c/0x1a40 [ 122.231930][ T6373] lock_acquire+0x1b9/0x370 [ 122.236950][ T6373] __mutex_lock+0x1a4/0x1bd0 [ 122.242055][ T6373] mdc800_device_open+0x22/0x450 [ 122.247506][ T6373] usb_open+0x189/0x220 [ 122.252181][ T6373] chrdev_open+0x234/0x6a0 [ 122.257125][ T6373] do_dentry_open+0x6ab/0x14d0 [ 122.262400][ T6373] vfs_open+0x82/0x3f0 [ 122.266982][ T6373] path_openat+0x2873/0x4280 [ 122.272083][ T6373] do_file_open+0x20e/0x430 [ 122.277096][ T6373] do_sys_openat2+0x10f/0x1e0 [ 122.282286][ T6373] __x64_sys_openat+0x12d/0x210 [ 122.287648][ T6373] do_syscall_64+0x115/0x870 [ 122.292750][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.299155][ T6373] [ 122.299155][ T6373] other info that might help us debug this: [ 122.299155][ T6373] [ 122.309366][ T6373] Possible unsafe locking scenario: [ 122.309366][ T6373] [ 122.316800][ T6373] CPU0 CPU1 [ 122.322150][ T6373] ---- ---- [ 122.327500][ T6373] rlock(minor_rwsem#2); [ 122.331828][ T6373] lock(&mdc800->io_lock); [ 122.338838][ T6373] lock(minor_rwsem#2); [ 122.345594][ T6373] lock(&mdc800->io_lock); [ 122.350088][ T6373] [ 122.350088][ T6373] *** DEADLOCK *** [ 122.350088][ T6373] [ 122.358232][ T6373] 1 lock held by syz.0.130/6373: [ 122.363152][ T6373] #0: ffffffff9025d968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 122.371955][ T6373] [ 122.371955][ T6373] stack backtrace: [ 122.377828][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(full) [ 122.377850][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 122.377862][ T6373] Call Trace: [ 122.377869][ T6373] [ 122.377876][ T6373] dump_stack_lvl+0x100/0x190 [ 122.377900][ T6373] print_circular_bug.cold+0x178/0x1c7 [ 122.377930][ T6373] check_noncircular+0x146/0x160 [ 122.377956][ T6373] check_prev_add+0xeb/0xe60 [ 122.377979][ T6373] __lock_acquire+0x136c/0x1a40 [ 122.378006][ T6373] lock_acquire+0x1b9/0x370 [ 122.378028][ T6373] ? mdc800_device_open+0x22/0x450 [ 122.378050][ T6373] ? __pfx___might_resched+0x10/0x10 [ 122.378075][ T6373] __mutex_lock+0x1a4/0x1bd0 [ 122.378097][ T6373] ? mdc800_device_open+0x22/0x450 [ 122.378117][ T6373] ? mdc800_device_open+0x22/0x450 [ 122.378138][ T6373] ? __pfx___mutex_lock+0x10/0x10 [ 122.378160][ T6373] ? __pfx___might_resched+0x10/0x10 [ 122.378184][ T6373] ? down_read+0x13b/0x4c0 [ 122.378206][ T6373] ? __pfx_down_read+0x10/0x10 [ 122.378227][ T6373] ? __pfx_mdc800_device_open+0x10/0x10 [ 122.378249][ T6373] ? mdc800_device_open+0x22/0x450 [ 122.378268][ T6373] mdc800_device_open+0x22/0x450 [ 122.378288][ T6373] ? __pfx_mdc800_device_open+0x10/0x10 [ 122.378308][ T6373] usb_open+0x189/0x220 [ 122.378335][ T6373] ? __pfx_usb_open+0x10/0x10 [ 122.378361][ T6373] chrdev_open+0x234/0x6a0 [ 122.378381][ T6373] ? __pfx_chrdev_open+0x10/0x10 [ 122.378401][ T6373] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 122.378427][ T6373] do_dentry_open+0x6ab/0x14d0 [ 122.378445][ T6373] ? __pfx_chrdev_open+0x10/0x10 [ 122.378466][ T6373] vfs_open+0x82/0x3f0 [ 122.378490][ T6373] path_openat+0x2873/0x4280 [ 122.378514][ T6373] ? __pfx_path_openat+0x10/0x10 [ 122.378535][ T6373] do_file_open+0x20e/0x430 [ 122.378555][ T6373] ? __pfx_do_file_open+0x10/0x10 [ 122.378582][ T6373] ? alloc_fd+0x471/0x7a0 [ 122.378602][ T6373] ? do_getname+0x191/0x390 [ 122.378626][ T6373] do_sys_openat2+0x10f/0x1e0 [ 122.378649][ T6373] ? __pfx_do_sys_openat2+0x10/0x10 [ 122.378675][ T6373] __x64_sys_openat+0x12d/0x210 [ 122.378699][ T6373] ? __pfx___x64_sys_openat+0x10/0x10 [ 122.378732][ T6373] do_syscall_64+0x115/0x870 [ 122.378751][ T6373] ? clear_bhb_loop+0x70/0xc0 [ 122.378771][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.378790][ T6373] RIP: 0033:0x7f9fe675e90e [ 122.378805][ T6373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 122.378822][ T6373] RSP: 002b:00007f9fe7676b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.378838][ T6373] RAX: ffffffffffffffda RBX: 00007f9fe76776c0 RCX: 00007f9fe675e90e [ 122.378850][ T6373] RDX: 0000000000000002 RSI: 00007f9fe7676c00 RDI: ffffffffffffff9c [ 122.378860][ T6373] RBP: 00007f9fe6835024 R08: 0000000000000000 R09: 0000000000000000 [ 122.378870][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.378881][ T6373] R13: 00007f9fe6a26038 R14: 00007f9fe6a25fa0 R15: 00007ffee9f50e68 [ 122.378898][ T6373] [ 122.686864][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.734471][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 122.839812][ T5690] usb 1-1: USB disconnect, device number 8 [ 122.846289][ T5330] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 122.857820][ T5330] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.868219][ T5330] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 122.877135][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.886583][ T5330] usb 3-1: config 0 descriptor?? [ 122.893173][ T5330] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 122.899784][ T5330] dvb-usb: bulk message failed: -22 (3/0) [ 122.906836][ T5330] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 122.915570][ T5330] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 122.924029][ T5330] usb 3-1: media controller created [ 122.929591][ T5330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 122.940091][ T5330] dvb-usb: bulk message failed: -22 (6/0) [ 122.946093][ T5330] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 122.954807][ T5330] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 122.966624][ T5330] dvb-usb: schedule remote query interval to 150 msecs. [ 122.973618][ T5330] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 123.022631][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 123.096149][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.2.132'. [ 123.105090][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'. [ 123.132394][ T5330] dvb-usb: bulk message failed: -22 (1/0) [ 123.138200][ T5330] dvb-usb: error while querying for an remote control event. [ 123.178259][ T5330] usb 3-1: USB disconnect, device number 8 [ 123.184936][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.199885][ T5330] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 123.210855][ T10] usb 4-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 123.222022][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 123.232058][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.241056][ T10] usb 4-1: Product: syz [ 123.245285][ T10] usb 4-1: Manufacturer: syz [ 123.249872][ T10] usb 4-1: SerialNumber: syz [ 123.255479][ T10] usb 4-1: config 0 descriptor?? [ 123.269379][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 123.286768][ T5586] udevd[5586]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.465472][ T5796] usb 4-1: USB disconnect, device number 6 [ 124.140101][ T5796] usb 2-1: USB disconnect, device number 8 [ 124.151610][ T5796] mdc800 2-1:1.0: Mustek MDC800 disconnected from USB.