last executing test programs: 10m38.055455381s ago: executing program 1 (id=3936): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = memfd_secret(0x80000) fsetxattr$system_posix_acl(r3, &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0xc0}}, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0x1]}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x948da1317f7d192d, 0x2, {0x0, 0xffffffff}}}]}, 0x64}}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x10000000) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000100)) 10m37.402669539s ago: executing program 1 (id=3938): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10m36.865644873s ago: executing program 1 (id=3941): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, 0xffffffffffffffff, 0x7eb4e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x3, 0x1, "0f036b04b0f9ffffffbc0000e00000027ffe7a54000000b7fdf160040000000000000030db50320b7d365800", 0x1}, 0x60) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) 10m31.429476124s ago: executing program 1 (id=3956): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0x2}, [], {0x4, 0x2}, [{0x8, 0x2, r1}], {0x10, 0x6}, {0x20, 0x7}}, 0x2c, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r3, 0xffffffff80000601, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x1, 0x6}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff57, 0x0, 0x0, 0x2400003, 0x0, @void, @value}, 0x20) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000200)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cae130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2dca696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000000)='./file1\x00', r5, &(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 10m31.132665952s ago: executing program 1 (id=3957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 10m30.624355834s ago: executing program 1 (id=3960): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r5, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f00000002c0)={0x0, 0x2, 0x20000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x1, 0x106) 10m30.371064492s ago: executing program 32 (id=3960): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) write$P9_RLINK(r0, &(0x7f0000000300)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r5, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f00000002c0)={0x0, 0x2, 0x20000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x1, 0x106) 10m19.604493407s ago: executing program 2 (id=3999): r0 = semget$private(0x0, 0x4000000009, 0x0) semop(r0, &(0x7f0000000040)=[{0x3, 0xff77}], 0x1) r1 = semget(0x0, 0x0, 0x0) semtimedop(r1, &(0x7f0000000280)=[{0x4, 0x5}, {0x0, 0xfffe, 0x1000}], 0x2, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000040)=0x519c16d5, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x800, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getrlimit(0x7, 0x0) close(0xffffffffffffffff) 10m18.147985872s ago: executing program 2 (id=4006): r0 = request_key(0x0, &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000480)=""/21, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) 10m18.075327411s ago: executing program 2 (id=4008): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000180)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) 10m17.39303022s ago: executing program 2 (id=4012): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x0) msync(&(0x7f00004bb000/0x2000)=nil, 0x2000, 0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 10m16.40084562s ago: executing program 2 (id=4018): r0 = request_key(0x0, &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000480)=""/21, 0x15) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) 10m16.295958511s ago: executing program 2 (id=4020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="63aa455cdfa0bbc7f5dc0412da16d83d0064b6eb917a0dc63974c16b5a6980872637acc3b4ba3cce1fc24a960bb22791112fffdeb1a12c430b040310edb62a7c591d63b94f82f9145f495fd4ff42497f", 0x50}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x44880) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) syz_usb_connect$cdc_ecm(0x5, 0x84, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x92, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xb, 0x24, 0x6, 0x0, 0x0, "543244995d4d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x5, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x147a, 0x21}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xb, 0x77}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd8, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0xf7, 0x2}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x241, 0x6, 0x80, 0xd, 0x20, 0xb}, 0x1f6, &(0x7f0000000540)={0x5, 0xf, 0x1f6, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x8, 0x8df}, @generic={0x83, 0x10, 0x1, "32efcf8c7cef81ce3d3c792bd9af685106bcd17d1d21475a6b6ecc4d78035fbcb9934a56613242c948878d1b8b2ed86b6bd436388daa83a2527d93131a14b5e7236c6498653cfa0025487ef0844282e3d8b98fc3e63889c5d37cf7800b5174b08e17dc17ab7d14ec06be76c3f5be8f26d1bae042d4ba779815c4574a704b4a2c"}, @generic={0x7b, 0x10, 0x3, "5e2e2b840f32d9579dc4c9168e055ceb8a31a629f3a0ba44d4f50409300239d6e4008e20226895a420fc82170ea127d352ac893180024fff27e1281427c285595c61204300cb17705c9c228e53c83309f4196cd34df271c076c1d15c8b75cda9c855443cfb25ace9bd189da272732c485e654107957cfc01"}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x83bd, 0x0, 0x4, [0xc0, 0x3f00, 0x30]}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0xff, 0x0, 0x6}, @generic={0xc8, 0x10, 0x1f, "aa1d2963614061c2f3b026079cb253ef8f8508f07ac090392dc2ee487bc4f3eef1931c730a371427e9c22fdc43bc050fe00f14d95f8f44159b676c64e0e5ea70e0bc0638f90820b31c415843f77b5ab7244ca7fdc63c650a3f74b90439b54d692a95d232495734f43e5be43c42a8b2ecf4536b7bb7b8d3c170ee787a47d1d7bf709e06c17edcba4b28e9422efec7707884fab97592b3200d9e8d7c0a956eee42b54458c054047ddf91dbd4b031f75220321282bd47792250dde09a9bc07a02894ca2ed4fb1"}]}, 0x4, [{0xdb, &(0x7f0000000740)=@string={0xdb, 0x3, "3a42635782a3a4314205af497b70c02349ce4d38d6f99b5f79c1e578204fe4c58e34558738ecd0d1fe092aa96cb642e19a08017e28a83531e2f0efe08d40b91a3ff9b4ed0ceedc60f3abe9ce7d4d2288927370e98b7c3909ab42f753a4534178d56ce7298b542e8d1d9952b504ab2b4513b4fd4bc8f51999d9acdc87c420ecdc1df2f8c1021c5ed1f33eb87ee3a8dad07f14b15c9d8bdfc340128b93af7b8bbfe6b3dc5e53b7f9a631917783b80471353bd90672c97af9af5606e85efdb410a8bc4f3cd6e1f073d8dca57f6adb6e917ee64ffa49888625218c"}}, {0x50, &(0x7f0000000840)=@string={0x50, 0x3, "a0dd7c317797026a78cab21db624c1df5cf2450ccd1ae173fb468cb161e6f59dcf515a11814c5e15c26f96170617c35844ec08f85b00faf417d07aa06bf15111edbc241cbd1abcabb5756f7ff7ff"}}, {0x5b, &(0x7f00000008c0)=@string={0x5b, 0x3, "929eb61a9fb407dc08b05611be1859f1a55673477a9c774e81be89403f7311ac404da6865271c8f66f78295c4708af9b65280d72a1b019137fe29013f89d43dd8e185809dc85f97b4dda2e477df42d8ac060885fb27d9e19ed"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xe42}}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5900000002060108000000000000000000000000140007800800114000000000050015000c0000000500010026000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x5c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 10m1.208226317s ago: executing program 33 (id=4020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0d", 0xe) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000008880)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="63aa455cdfa0bbc7f5dc0412da16d83d0064b6eb917a0dc63974c16b5a6980872637acc3b4ba3cce1fc24a960bb22791112fffdeb1a12c430b040310edb62a7c591d63b94f82f9145f495fd4ff42497f", 0x50}], 0x1, 0x0, 0x0, 0x40}], 0x1, 0x44880) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x1, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) syz_usb_connect$cdc_ecm(0x5, 0x84, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x92, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0xb, {{0xb, 0x24, 0x6, 0x0, 0x0, "543244995d4d"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7fff, 0x5, 0x7}, [@ncm={0x6, 0x24, 0x1a, 0x147a, 0x21}, @obex={0x5, 0x24, 0x15, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xb, 0x77}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x5, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd8, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0xf7, 0x2}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x241, 0x6, 0x80, 0xd, 0x20, 0xb}, 0x1f6, &(0x7f0000000540)={0x5, 0xf, 0x1f6, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x6, 0x8, 0x8df}, @generic={0x83, 0x10, 0x1, "32efcf8c7cef81ce3d3c792bd9af685106bcd17d1d21475a6b6ecc4d78035fbcb9934a56613242c948878d1b8b2ed86b6bd436388daa83a2527d93131a14b5e7236c6498653cfa0025487ef0844282e3d8b98fc3e63889c5d37cf7800b5174b08e17dc17ab7d14ec06be76c3f5be8f26d1bae042d4ba779815c4574a704b4a2c"}, @generic={0x7b, 0x10, 0x3, "5e2e2b840f32d9579dc4c9168e055ceb8a31a629f3a0ba44d4f50409300239d6e4008e20226895a420fc82170ea127d352ac893180024fff27e1281427c285595c61204300cb17705c9c228e53c83309f4196cd34df271c076c1d15c8b75cda9c855443cfb25ace9bd189da272732c485e654107957cfc01"}, @ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x83bd, 0x0, 0x4, [0xc0, 0x3f00, 0x30]}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0xff, 0x0, 0x6}, @generic={0xc8, 0x10, 0x1f, "aa1d2963614061c2f3b026079cb253ef8f8508f07ac090392dc2ee487bc4f3eef1931c730a371427e9c22fdc43bc050fe00f14d95f8f44159b676c64e0e5ea70e0bc0638f90820b31c415843f77b5ab7244ca7fdc63c650a3f74b90439b54d692a95d232495734f43e5be43c42a8b2ecf4536b7bb7b8d3c170ee787a47d1d7bf709e06c17edcba4b28e9422efec7707884fab97592b3200d9e8d7c0a956eee42b54458c054047ddf91dbd4b031f75220321282bd47792250dde09a9bc07a02894ca2ed4fb1"}]}, 0x4, [{0xdb, &(0x7f0000000740)=@string={0xdb, 0x3, "3a42635782a3a4314205af497b70c02349ce4d38d6f99b5f79c1e578204fe4c58e34558738ecd0d1fe092aa96cb642e19a08017e28a83531e2f0efe08d40b91a3ff9b4ed0ceedc60f3abe9ce7d4d2288927370e98b7c3909ab42f753a4534178d56ce7298b542e8d1d9952b504ab2b4513b4fd4bc8f51999d9acdc87c420ecdc1df2f8c1021c5ed1f33eb87ee3a8dad07f14b15c9d8bdfc340128b93af7b8bbfe6b3dc5e53b7f9a631917783b80471353bd90672c97af9af5606e85efdb410a8bc4f3cd6e1f073d8dca57f6adb6e917ee64ffa49888625218c"}}, {0x50, &(0x7f0000000840)=@string={0x50, 0x3, "a0dd7c317797026a78cab21db624c1df5cf2450ccd1ae173fb468cb161e6f59dcf515a11814c5e15c26f96170617c35844ec08f85b00faf417d07aa06bf15111edbc241cbd1abcabb5756f7ff7ff"}}, {0x5b, &(0x7f00000008c0)=@string={0x5b, 0x3, "929eb61a9fb407dc08b05611be1859f1a55673477a9c774e81be89403f7311ac404da6865271c8f66f78295c4708af9b65280d72a1b019137fe29013f89d43dd8e185809dc85f97b4dda2e477df42d8ac060885fb27d9e19ed"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xe42}}]}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5900000002060108000000000000000000000000140007800800114000000000050015000c0000000500010026000000050005000a00000005000400000000000d000300686173683a6e657400000000090002"], 0x5c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 7m14.877889746s ago: executing program 5 (id=4742): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="65f32e0f213ee1b60f90cf0f35660f38807d000f22200f013cbaf80c66b8089aaa8d66efbafc0c66ed66b9800000c00f326635002000000f300fe2bd2300"}], 0xaaaaaaaaaaaacd1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x4000000) write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f407", 0xc) 7m14.343932502s ago: executing program 5 (id=4744): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0xa) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008881) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x8001, 0x1) r7 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r7}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, r6, 0x5}) mount$9p_fd(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000000000), 0xa00040, &(0x7f0000002d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="297765b300013d", @ANYRESHEX=r2, @ANYBLOB=',cache=readahead,\x00']) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) shutdown(r9, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000140)={0x6, 0x7ffd, 0xffffbf8b, 0x3, 0x9, "635d509d2718c014df1a4569ec44cf1dd88567", 0x7, 0xed}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) 7m13.537469099s ago: executing program 5 (id=4751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000280), 0x0, 0x1}, 0x20) 7m13.358856167s ago: executing program 5 (id=4752): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x100000}, 0x20) unshare(0x2a020400) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000050000000000ec00a70000feffffff95000000000000ff"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}}}, 0x24}}, 0x0) 7m13.085563742s ago: executing program 5 (id=4754): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x2000, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0) 7m12.524407935s ago: executing program 5 (id=4756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x12, 0xffffffffffffffff, 0x76575000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m12.350903457s ago: executing program 34 (id=4756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x12, 0xffffffffffffffff, 0x76575000) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.364714825s ago: executing program 7 (id=6266): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.350862449s ago: executing program 4 (id=6267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='q', 0x7, 0x0, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000001c0007800c00040000000000000000000c000300"], 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003e80)=ANY=[@ANYBLOB="00cb3000", @ANYRES16=r3, @ANYBLOB="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"], 0x148c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x141840) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66f09cea6bb67ada4fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000015409b002200000000000003000005fa4b8cc6a67fc647502de9763408fe43675f736c680b915db27426cfe4717b55e45d2331ca50778432970ce5488674241b9ab051bf8b3cf81f8ce0fc83bc68a803010afa3f"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r7, &(0x7f0000004580)={0x2020}, 0x2020) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r7, 0x0) 10.20632332s ago: executing program 3 (id=6268): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/208, 0xd0}, {&(0x7f0000000380)=""/232, 0xe8}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f00000018c0)=""/240, 0xf0}, {&(0x7f0000001640)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000001480)=""/244, 0xf4}], 0xa}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 10.035566904s ago: executing program 4 (id=6269): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) (async) r3 = openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0045878, 0x0) (async) sendfile(r2, r3, &(0x7f0000000080)=0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4,,[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) (async, rerun: 32) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000380)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x32, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x1, 0x0]}]}, 0x48}}, 0x0) (async) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000facf89109904068255f40000000109021b0001000000000904940001ff"], 0x0) (async) r7 = getpgrp(0x0) (async) unshare(0x68040200) (async) r8 = socket(0x8, 0x843cd534a5df667f, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020067eecbb89cb73f39000008000200ac1e0001050016002b000000"], 0x2c}}, 0x0) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11040000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r9, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEYS={0x5c, 0x51, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b7c3be89ed9a0210fbaad87932"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, @NL80211_ATTR_CONTROL_PORT={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000899}, 0xc1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r8, {0xfffffffffffffff8}}, './file0\x00'}) accept4(r11, 0x0, &(0x7f0000000580), 0x80000) (async, rerun: 64) syz_usb_connect$uac1(0x3, 0xbe, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x3, 0x1, 0xc0, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x100, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x305, 0x3, 0x4, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x3, 0xe7, 0x40, "907478b8fcb2cd1d2c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0xd, 0x8, "", "844c39"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x1, 0x0, 0x5, {0x7, 0x25, 0x1, 0x3, 0x3a, 0xb}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x40, 0xf364, 0x2, "88f1c438"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xca, 0x3, 0x9, 0x0, "14f4af5522"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0x3, "dad99299a9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x6, 0x5e, 0xd9, {0x7, 0x25, 0x1, 0x2, 0xa6, 0x40}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x12, 0x51, 0x9, 0x20, 0x9}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x68, &(0x7f0000000400)=@string={0x68, 0x3, "5dab98595b28c798ab982d390169d7339d44fe2c46a3786f69fe89a45ef03508ce174e04c1aed57428314f465d891a24cff8819a96d3a55ffda7dd52d1783f2e487468b2f2762028f35ad2474f0a780478ce61acd4a3c9a5a037fdaf1ad4f57de4d827d6b113"}}, {0xaf, &(0x7f0000000480)=@string={0xaf, 0x3, "5ad1c033da93d1207fee1bb840a3a8521a4f76b9413e82971b1e841356dc02f5f76709cc6a6dd083b757bb774c25369126a25e2890b6e7d1b6dcf513c9779b67f5b308973ce9c5b08a8d027df04cb177f8abbc2c1ff33338f6cefa2ae4c614a3e4032a2a658301314db741d607f5c35e12a49e3996a5562d53cba9a21c5fb5ef84cc286c428c89505877dfb1bc7bb2b50d6742b61cb72c17b107746c0054206c1abdb37064938658f444c3f1a7"}}]}) (rerun: 64) syz_pidfd_open(r7, 0x0) 9.916246219s ago: executing program 3 (id=6270): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x0, 0x2000010142, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4) sendmsg$key(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b00)=ANY=[], 0x10}}, 0x850) read$msr(r2, &(0x7f0000000200)=""/163, 0xa3) read$FUSE(r2, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffead) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x9459831e6c2e00fd, {0x2, 0x0, @empty}}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000006c0)={@any, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f6e7b000000000c00028008000300090000002638338ef7f088d8e52bbe80e23d1554cca0da38d651d8e648430492c1c248e48721ffa428238f1ba608402e201468d11ac2c1ad135f6f91e9b58f2967e5379bb9d954066ba9bcd74e069471519bda8c20de4ad70f4fc2bd5465565bf800a3323127dc1d517c660929c1f58c57ca7ec5da2e34de17174f760224204d357c7eb1998eee00b4c81d6f94031ea4767b52046a313462e81b2b68711f2ee3"], 0x3c}}, 0x20005) r8 = socket(0x40000000015, 0x5, 0x40001) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20004000) mkdir(&(0x7f0000000a80)='./file0\x00', 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x10040044}, 0x8004) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000200)={&(0x7f0000000280)={{@hyper, 0x8}, {@host, 0x9}, 0x400, "a15d4d042576cb3f84f19a3f77d0fb6c7f5a048f5cd156ffdf5c2fe47d1b85bccb725c9471d60cec9975d889d9fc220fde9a87baa4f3509da2013a0a7a22b57bb538d6c671213f19364a63d4dd04645f1bbf2947043eaf7c383848e15bf57b50856319bf03e82860ea9814fea2e50aae3ab84e42d8b6fa6dbc65e45c7895ec74acc2af0bdf45ddffed29cea4310c257d93219d1e0d82f6c7bee3225c7b4f410df373ad44e094b969ac329cf9ef4ef2c5019493ae37a1d03b81b1483a90a25d2ecf6f560561ff4ccf4825fc9f26af8d927728027c1172944d58430f0d2c7c4a3dfaa88dbea606f8c1886dd699fbf79cb91af2db94cf7c34d395604cec61fcfa52a1e40056a31210143f0914ebfbdfbbafec00a70223a7ab691af18617ba8253c0dc5d2f375b2858ea9052253dca1790265e21f469eb14cddda5ff2bb3fb7dc69d57bdbc517e8ff3dbb4d500c51496ce23b70ade60a8e84f3e7d644a8b7a662354026c57a3130020e99b71fd4f2a215a18d1c932d5a2928283369b10312044bbbbab4f2d00ee44654acdc92e19f7cb9a15288167d57bb831c8e31f3b274735a9cee2d724e0af79a5a6f796179d882e493a6e4864f0aeaeb3a1cd93b758679224bfbc8519ebd1b121c8ba56195d8df0e5800b3a292a03dfbcab98a291fedaf542e0c423142ef577ae7ae629374d7cd796510e358e26becdd88c071c89212e5bd48a43f2593fa349e88e079ceaa751e06b8db72b4d3af721ee2e2f4465f1cfbfb98f6f69afb542a464cde57a8eae26fbb3506d8230489ec776af1178d755ed6bc4cfa78993ae9c955f9ec251e8ff5d2dce879e06416a6a7853e001d8b6b850bb377081050f04d67328d43018a4c25c75d2a3ae06fbb3746affff46cb557b6ab0dd268b2e5ea3abaf7e1bf90f25ea2e43549a563309d1f43fe1080008d3a83cac464f4efe47d8f7bbd2681246f3182bac95c58e0b1e281e5ff5dede3f787393047fce9e880867cfd60f9e3ae192593e71415f770ac7f1a1cb1fde2e9fb391f279649242ba46096fe0deaad56646c30bff72d502624121b1eb3e6d5e0885b39dbde48ac5bc7a6eba773785bfa31678702021d51fd6a090e17484693f4fd67a49af0e3bfc0d30ae3a44f036542ce38ba05d5131b872e5c127d7f2bc11f587bb2b7039aef8fb41d64f9688ff1de711d24c8a24dec1831e632bd168f5ff0e3d49fb587f706c9e5ce57d7a8c93e915c4b1970b6b2370290733ab81dc42c5b7305f44af35af01de3e56dbcc5590526c082092fbd63c477f9749b8788d241a24c22067f4e0ab5723848761e71b96de4bcde83f0bd0fe5a2d5eefc047fa50cd5dd26e7f4e009731e5af32293f48914fdc8fa294ed1d5098d05daaf95b5a45394b13b39dfa2dedaea50bb6350715eda85cb9aa5d8c8f8d13a990c2c1a1a9c1c9108d8df8b4ce54"}, 0x418, 0x3}) write$UHID_CREATE(r1, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/124, 0x7c, 0x3, 0xb, 0x8001, 0x3ff, 0x2}}, 0x120) 9.674196534s ago: executing program 4 (id=6272): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x80000000, 0x1d483) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000404730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 8.943258058s ago: executing program 6 (id=6273): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) creat(0x0, 0xa) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008881) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x8001, 0x1) r7 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r7}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, r6, 0x5}) mount$9p_fd(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000000000), 0xa00040, &(0x7f0000002d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="297765b300013d", @ANYRESHEX=r2]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) shutdown(r9, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000140)={0x6, 0x7ffd, 0xffffbf8b, 0x3, 0x9, "635d509d2718c014df1a4569ec44cf1dd88567", 0x7, 0xed}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) 8.908911547s ago: executing program 7 (id=6274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="14a1000000000000003641000000", @ANYRES16=0x0, @ANYBLOB="02002cbd7000ffdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="ea02000000000000280012800b00010062726964676500001800028005001900800000000c0021"], 0x48}}, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000140)=""/225) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x43b3, 0x0, 0xe, 0x0, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r7, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000440005007f000001000000000000000000000000000000003c00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000c00080008"], 0x178}}, 0x0) syz_emit_ethernet(0x85, &(0x7f0000000080)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x73, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x7, 0x8, 0x64, 0xffff, 0x7, 0x89, 0x40, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x2c, 0xdd, 0x1, 0x4, [{@local, 0x9}, {@remote, 0x5}, {@remote, 0x4}, {@broadcast, 0x3}, {@remote, 0x3}]}, @rr={0x7, 0x13, 0x4, [@local, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, "cd8457"}}}}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000380)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000540)={0x60, 0x2, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, &(0x7f00000004c0)=[{0x9, 0x1}, {0x800, 0x3a85, 0x101}, {0x7, 0x4, 0x4}, {0x1, 0xe13, 0x80000001}, {0x6, 0x4, 0x8}], 0x5, 0x200, 0x44, 0x65, 0x1d, 0x40}) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) setsockopt$inet6_int(r8, 0x29, 0x18, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x10180, 0x0) 8.472460632s ago: executing program 4 (id=6276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r3, &(0x7f0000000300)="5d983b18c51b916b32a560587e4ca3e49ecffc8834d3c6dc27b5203c1c87e39a51beaeaa97048e9e5cdf2b14f4ad694722dbc9f8db1ff8b965467d16aebd43a2612c7cf7fe40903b711173546299e709fced7766e93d8dd2a8360f458ec1690f37ecc65a1a8a2d4e33", &(0x7f0000000380)=""/127}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000580000/0x2000)=nil, 0x2000, 0xa) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x8202, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @dev, @private}, &(0x7f0000000500)=0xc) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="12d01dfbef761289ff07008005000000000f0400", @ANYRES32=r2, @ANYBLOB="0f00"/20, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="0500000003000000000000000800"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) 7.594680757s ago: executing program 0 (id=6277): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffdba) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@enum64={0xc, 0x6, 0x0, 0x13, 0x1, 0x8, [{0xe, 0x80000001, 0xd1}, {0xe, 0x8, 0x51}, {0x6, 0x8, 0x80fc}, {0xe, 0x5, 0xa}, {0x4, 0x6b8865a7, 0x10}, {0xc, 0x9, 0x5}]}, @restrict={0xa}]}, {0x0, [0x0, 0x30, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000800)=""/197, 0x7f, 0xc5, 0x0, 0x2, 0x10000, @value}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x8, 0x10000, 0x12, 0x0, 0xffffffffffffffff, 0x5c, '\x00', 0x0, r4, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009a47ad20b80402024630000000010902120001000040000904"], 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r8, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000240701700ff00000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="002206000000"], 0x0}, 0x0) quotactl_fd$Q_SYNC(r6, 0xffffffff80000102, 0x0, 0x0) 7.310693956s ago: executing program 7 (id=6278): socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0406"], 0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x4001, 0x6}}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0x110b, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x3, 0x0, 0x0, 0x1, 0x14}}, &(0x7f0000001280)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r8 = dup(r0) ioctl$TIOCL_SETVESABLANK(r8, 0x541c, &(0x7f0000000080)) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_clone3(&(0x7f0000000240)={0x4000000, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x37}, &(0x7f0000000180)=""/14, 0xe, &(0x7f00000001c0)=""/53, &(0x7f0000000200)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) 5.664237773s ago: executing program 7 (id=6279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='q', 0x7, 0x0, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000001c0007800c00040000000000000000000c000300"], 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003e80)=ANY=[@ANYBLOB="00cb3000", @ANYRES16=r3, @ANYBLOB="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"], 0x148c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x141840) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66f09cea6bb67ada4fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000015409b002200000000000003000005fa4b8cc6a67fc647502de9763408fe43675f736c680b915db27426cfe4717b55e45d2331ca50778432970ce5488674241b9ab051bf8b3cf81f8ce0fc83bc68a803010afa3f"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r7, &(0x7f0000004580)={0x2020}, 0x2020) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r7, 0x0) 5.636535685s ago: executing program 0 (id=6280): iopl(0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xc0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r5, 0x10d, 0x83, &(0x7f00000002c0), &(0x7f0000000080)=0x4) syz_usb_connect(0x5, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100006aeb6cc28ddc6f3f080a113011a3b3010203010902240001020010030904f10202048f45000902000009058202"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.560553859s ago: executing program 3 (id=6281): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="aa0de9685d19d2e5719cee0980784c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b00000000000600110081000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x8) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000000, 0x3) io_uring_setup(0xdac, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sendmsg(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="02dd84a43f5c0786ae91a9aed8f26aa1640b734e8294ccf84f869897a77f32687d2a93feb4922a1415cddf330cb8ebd5b50694a2ed918616f796ee96e377afb00a5276ca6e42122cf8a0cd2e7dc6", 0x4e}, {&(0x7f0000000440)="33a0f650bc3e69a72c14f83df12e8fc8e9839dbac83cceb4950a8aa7ecdb12e8d9bf60f2bf0bdecad9c825a17fcaf126ffce67c7c9d4188f3879e1c7e9fcaf597351ae6d8eb36576441d01817b01e3814d8afa286a366cd98df2453d6022608c3ac9ceb80f9b816f77ba02201b6d52dad1d508991d42c40db4a69a357e9f332cef989152855b1493", 0x88}, {&(0x7f00000005c0)="4a771894c8731ce66c6a71d77d5255e3e254c391157d919c54885e136d0eb8a0b9c055a482b4caa115b6272d4fbfd0dd10070ee599848d9310999756d9959f343f42615c1ec280369e5343b54470eb8595ec44d4eb62bf528d4fe5b35df8df071c33be5d20990c8568fa95fb82254293487e084887ef81d2b1fa100faa028f5f890794e77013643df109a462", 0x8c}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1128}, 0x24028846) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4085}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 5.433629402s ago: executing program 6 (id=6282): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = epoll_create(0x3416) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}], 0x5, 0x7fff) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_mr_vif\x00') read$FUSE(r1, &(0x7f0000007700)={0x2020}, 0x2020) syz_io_uring_setup(0x10c3, &(0x7f00000006c0)={0x0, 0x8adc, 0x200, 0xffffffff, 0xfff9, 0x0, r1}, 0x0, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, 0x0, 0x0) sendto$inet_nvme_pdu(0xffffffffffffffff, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100b874959b1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) close(0xffffffffffffffff) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_clone3(&(0x7f00000004c0)={0x200001000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0), 0x0, 0x20008880}}], 0x2, 0x4c054) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x3}) r6 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='xs_stream_read_data\x00', r6, 0x0, 0x8}, 0x18) lseek(r4, 0xfffffffbffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 5.431670631s ago: executing program 4 (id=6283): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = dup(r1) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r2, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000001c0)=0x204021, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r5 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x12, r4}, 0x10) 4.536280305s ago: executing program 7 (id=6284): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) listen(r6, 0x10001) shutdown(r6, 0x1) 4.535287715s ago: executing program 3 (id=6285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.282261757s ago: executing program 6 (id=6286): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40026) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x470b92d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xffe0, 0x8}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x7fff, 0xef, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) 2.165696894s ago: executing program 7 (id=6287): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0xee01) keyctl$setperm(0x5, r0, 0xd012117) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffa, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x3, 0xe2a01) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="00010000", @ANYRES16=r3, @ANYBLOB="cd3e000000000200000001000000ce00010043b81510ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d40000080002000500000014000500"/250], 0x100}, 0x1, 0x0, 0x0, 0x8040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0xb9, &(0x7f0000000280)=ANY=[], 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x230002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x3, 0xb6) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r8, &(0x7f0000000000)={0xa, 0xe0, 0x4, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x62, 0x0) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000040)={0xe3b7, 0x40000, "4d9d25bfa0f22469b4039cbecd1b03edf34a2232d234f7ab", {0x6, 0x3}, 0x6}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r9, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$netrom(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x4004550d, 0x0) 2.115595299s ago: executing program 0 (id=6288): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40026) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x470b92d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0xffe0, 0x8}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x7fff, 0xef, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) 2.11490978s ago: executing program 3 (id=6289): r0 = socket$kcm(0x10, 0x5, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000002000), 0x5d5d, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r2, 0x0, 0x78) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000002040)={0x0, [[0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0xfffffffc, 0x0, 0x0, 0x8]], '\x00', [{}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x10000}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}}, 0x20000144) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x311a80, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r6, 0x5402, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f00000000c0)={0xfe, 0x1, 0xff00}) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r8 = syz_open_pts(r6, 0x42) r9 = dup3(r8, r6, 0x0) ioctl$HIDIOCGRDESC(r9, 0x90044802, &(0x7f0000000c00)={0x192, "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"}) ioctl$NBD_DO_IT(r9, 0xab03) fchdir(r9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="88000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04006c0025003300b00008000802110000010802110000009af8b2e52db1f70e0100030007001001af000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) ioctl$FBIO_WAITFORVSYNC(r9, 0x40044620, 0x0) 2.03008554s ago: executing program 6 (id=6290): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x42402) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f00000000c0)=0x3200e0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xa000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a2d29730e5519c08cc79a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c0500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xa9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close_range(r3, 0xffffffffffffffff, 0x3000000) 640.566159ms ago: executing program 0 (id=6291): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000180)={0x6, 0x2}, &(0x7f0000000280)) r4 = socket(0x25, 0x1, 0x2) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, 0x0, 0x0) 530.959177ms ago: executing program 4 (id=6292): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1001, 0x0, 0x0, 0xff, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffec, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc000000, 0x0, 0x0, 0x10000, 0x9]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$kcm(0x29, 0x7, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0xea60}}, 0x0) 515.935564ms ago: executing program 3 (id=6293): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) creat(0x0, 0xa) pipe(&(0x7f0000002c40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, 0x0, 0x20008881) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x8001, 0x1) r7 = eventfd(0x6) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r7}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x25a, 0x0, 0x0, r6, 0x5}) mount$9p_fd(0x0, &(0x7f0000002c80)='./file0\x00', &(0x7f0000000000), 0xa00040, &(0x7f0000002d00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="297765b300013d", @ANYRESHEX=r2]) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) shutdown(r9, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, "7a58beca3900000000000000000000000200"}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) ioctl$TCSETSW2(r8, 0x402c542c, &(0x7f0000000140)={0x6, 0x7ffd, 0xffffbf8b, 0x3, 0x9, "635d509d2718c014df1a4569ec44cf1dd88567", 0x7, 0xed}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) 450.926798ms ago: executing program 6 (id=6294): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x800041}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c00}, 0x40000140) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000002280)=@base={0xa, 0x5, 0x7, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) 450.484851ms ago: executing program 0 (id=6295): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='q', 0x7, 0x0, 0x8}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000140000001c0007800c00040000000000000000000c000300"], 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000003e80)=ANY=[@ANYBLOB="00cb3000", @ANYRES16=r3, @ANYBLOB="000027bd7000ffdbdf251400000008000280040004006c00078008000100060000000c000400020000000000000008000200080000000c000400716e0000000000000c00030007000000000000000c00040000000000000000000c000300070000000000000008000200040000000c000400fed50000000000000800010009000000240009800800010001800000080002000800000008000200001000000800010007000000ac00068008000600000000004a00040067636d286165732900000000000000000000000000000000000000000000000022000000800c5108aa15a3d520219f7f8df0ed2da581eb3edaa769d87f69bff657d900fae0a200000400020008000100feffffff4400040067636d28616573290000000000000000000000000000000000000000000000001c0000009cbd7972bb09683fc8ecea474d8fc4f895eaeff220c7e33f6294269404000200540101805400028008000400100000000800010006000000080001000f00000008000200010000000800010003000000080001000600000008000300ff07000008000300750000000800020008000000080001001700000044000280080004000700000008000300018000000800040001000080080003000000000008000100030000000800030003000000080002000700000008000100150000004c0002800800020007000000080004000010000008000200ffffffff08000100040000000800030001000000080001001000000008000200040000000800040008000000080001000a000000380004001400010002004e22ac14141a0000000000000000200002000a004e230000007fff020000000000000000000000000001070000000e0001006574683a766c616e300000001400028008000400a7050000080004001e0000000e0001006574683a74756e6c30000000500004800c0007800800040070e4000014000780080003000100000008000200130900000900010073797a30000000001300010062726f6164636173742d6c696e6b00000900010073797a30000000003810068004000200040002000400050008000600030000000400050008000600040000000400050004000200080001007d02000004100300b7b6aba62af4c67b69d5f5ba3a59fcc1c20e799b9f396c7b8e70a7a5b2edb567743fd1bb89294515f4bd275bea56e62b10cebab74d71e90a5346ad7deede370a02727bc28133cf500b38e6a7953ea50e3b15c06c1982be6ab2f1f33b34c02aa0a4679313c4cffc801a3797400eb9be7b7c1e89be66457a3293fb55d20f63133d3a68296b1f7bb2c07a1078e8dc877d79f21f4bbdce76eab7bd969c4c764436779d78c6e009bad26e6a86a9355ae1541268e575c67034443be8749a4a368ef8a8f73a4c9f245fe3b23d575e3415cf6e831227b5f752d826ce0fc8df8b487b77e7ba38fb657f4739043ffc44ab12c601ac1abd8542520789371fc7ccc116b58d2e300c970bde8c553461b306f75ded1e1af43f8863a3c12dc72dd9928f5a1335df9a7d5c260d56a2981e80ef4da3b6893b43b499c7d176093e6f12e60a2a065e7ea8aa59190e8e321c30919c716a961af9caf9f9e3aa34e170dc2803a1f11d7e4db7fab5eaf0b10ce04afa61f2a7a2304e38dfe46c502fae16d156004ea6acda9f098ee90f6995f0580791807412c28c85be1b47131b23273f24989126b47b665b87ac30d6042c77146a24e2c5ff7a2b2498f5332c9dc1e820bf5d069efa407383aa0683d601403319fc09a658142ae95e7d52541e10ebb8c3d13ce402396e20a52d78efa6c5ec728ac98475c2c1ea79adca543378afa0aa5b264f05213084852202731de91acb1521a7f84d237d76b4371a7c9709910bcee3fd4c5dfcefbf9f9f8bbac665eb31f8e78178899ac9fe81fe474148a42f94f6693d8136d5bebf4b0e6af9070887076d39382fc585da60d34cf63df2c9558ae44c401057e24e0f2dd2b0769f23d871af4b45d2e33efbeede415c319555235d2d9b50f1a014e05c0aa48e099a6d959545a3d4f9b2eaa48dd8eb6dc4463780529f439eb40e6e534acc8ef73adec946ea7433770b4026655a89a27047194a59c3972a055d6017852a1ad08c2c08f7fb99410357569d1458b9bbefa134c4e91c7c73c71551dcb5bc286723c6a7be7399c3ab32d34a25c189b6e712c47936bd1cb0a32f2065d1ec07f761162590353d33810e14e2cf8460038597ee0778398e1e5e06fd96414384b1751fab71671bbc6874bd0b3a5c8173cb5e43b2c641b2193e120007b06004d21640e63b3643a7c7eb68993666812d489bbf6c66cbef3b590f113f8d0005f0db3a678e04588e48d155aabe45ff4708b4d06d2a211139da42e50538dd24d7613e5231cd79bfb957a3acc5f54c1b3f3f43cb6a974d5928d16ce49fd4b4b5ba03dcf1030b8195c6dd55c5b26fd0d53b2678056e449787f01d89fd285b515c7bac3144e3a7419c263109fc66a3e124675007bab67953af70985927aab0135958a544c13258c57e8b442d7f0cd47b5896c6ef7849ad263f0ebbda97c102cfcb6471d93cf0126ebff5503bea94c40e54032bd166321bf90c58bcd2fe1ca1cd72e86e7fa1760942f48a4e3bcf527703063c9a57ae9bd39dfec6852ca721388f481e5fbae1ec03702bb6e77805b09cc98c2623c5bc8fedb0906abb566896c3bf856ca35dcd20e16ed9e9d956242433e6854e296d51ef9fa981ef98d9dc248dbc925d43f8746f0cb5dbd79ec573ddedba56ae722a3cd42f15ba085d8638a22f32ce5215fd03167802476030597451d80ce37a40dd3cc54f01be878f32dfa9ffb0e12c1d74883240f40d2614f5faad73a0233fbaa72022250472327b54662901f4d3c47c3064c45a085d4ade2eef6d4d840c0b434ad19a1dc689c4c3c4801f50733066041a3944d7a5601ed801c50cf57ada0b8bd633c59282b5d840a9ff81beca6bb41ab0fb8102a7261550b86b401ff9240ffcc6385d66ab76b8746ab7431a8d54e3f2568016bf9a44bc3a1eef52540cda6de0e870c9fec8ea61740428a9e0bd2f5d122abc1ea61240c5a7efd876aaa58e0acca7e3650ee9e61278f8b42b21c928c8d2dbe2719a11119dac004e9a30c81913d00f56b822d2f68ef1dcd874e49e1a5b80886a2210665862d049eed1d995b4fb9bb0bd6f7c44f182b93f6ab3ded912d3567b45cbc9a8900759e5dd9eeffef7e9e1eee1b253522de769f9fb338b9778847d0dd8ed9ce5bdc9d5271a5c751d341208479bfc12b3302fb6c3cec321023f0fe8344ddd1bb38c661a8877eff026ae56df0a887ddc5f957ea7d52a205d51f6873dcfbadb072fa8e6e13c0fa263e331bcbbd56675d5b118bf6e78621b537851ca54bef99122e437bae6f4778bbe73231bd26b9f2d3dffa90097d1e0f22220704b471cd88237bdbd3a9d5f98edb734c15a2f785cd817b26bfd98a50b79441d8dfd896e1eeca70374354e474b2c2f2806c2208177b60e98d796c95322862978e678ceb2fb59284d89de06f78d753d70c43e203d1857d3a0d014b938dfb2905f01585868d19ede562ecbd9de649d9a64273c41a86ae4754a9828e0350a6b5b815c3be1565dee682f2acbadddd7e9ede145eaafbae1070257ed1b4f0eca498f436f490f0c5e13fe591461882a14a6d0057c7fed24fa9ddfda3b1c99fa32769fd153cccb673cc971e986aa73a2839dc08091b02e5df2e0df7961243b4865119636a8aeed2099c17d33fcf7ee5de5afa05f84941426581757aba9fa7f6714c8ffeed928350bb077d29d1d81025cddd56cfd2cfc227be26b05ed95fee49ce156b723e8dc0b2bf95f803ec8bbb604e52b72692d8ac4c2cb84971ebce8a0058b65b9840bf918a0973650535511b5b9a6779203e6c6603f7bfa2213affde22ea06d336dced668dd5bbe6a1366770391af8a581f69ce003ccee088c569a6c48d0a8567c22dfa17241904f686e744282ecf3a3374952d4b370e7fc05ebd1ba88651bb87083cc67219dcf16e5ab9be643edfa3de443e0af9cc7cdb58f0dccda1f2def380e3d8d2fa32f0c3456fe194027698217597bb35baad1a901b9fd1efa36fd50e3538040fbe064b8ec59d42374b56a4da2eca49b0f5881cac75ae62b2babc2107b2df6f6cc9610374cae411c382f75605eead45b932be898cd6681cc5572c7c3b27628469cbdd56e99aaed4773af33f4439e9dfa4b172a0cf1199fd3734192039a3c4338148bd53ed69ced9a3dd189149d8dc9fdd65b8ced436f953ece395abc897034f2ee339c2b3b8e04e4c5c7a1c58a1f4c8fd4ec5b67371d511fe1d0f0af3a8e51cf23c1e2875e4fcfbb7ee0fba39ad6e844e7b8eda279dcd1cb1974bb5f9b31aec63df479137cd4a3cc41235fb8e2c4b465d048a71b0923e6f72f644f17002e09d9773cb6b5a3187bbb5ac05907958a81f1a7b6417650edd97c1ca0ce2f3a2d2d29c8c189b82bf456b7fcc7a58c2f07b23b3c9a00e4ee5b3b89245159f341e9e1358bd539c1a05890feaddcf62f10c2e5e5c91c4fee24e0601abbdb56ef6d6427a10206e87fa765c129067dac93dbbb913b2c7bdbd3662fcd210c0a005d57be297ccc54b341d020d90eb941ac9c098275947a8a1d5ab9812c9580af1e09037b204d5e9152fa172547a5548c16b18c6c3ff71a9c5a5c7a04ede32e93dd1d47c8ad0d429482436b13991c702033a7d5cd570e0b408a3c094a0e49cbc797574bdb9689def13c42a7af3dfd26a3ec247fd99e14da25b41b34b7c471ff2b3a22efcfb21ae3b5f49dbc3f8b67203a5cf49906bae9dd341acf3209a2d8043b78bf83b85a2363e94690decf622c0f09a46156838ff1dd49b985ce07d6113051d36dfca2d4296cda6917ca99e711cd125b87e785ca90d25392ef40be257b1ddbcc2e3d4e501598f81884351309b032156d6e38d927734bd3afea39a474bb6ff3ce9ff75c0c8d2b9134c83d3a5341d66657b33a0c4938d55e1f7a9cb64bf4ba7b6217b9f079422a8ab15a090aad64b4f61f6cf3e7c6c379372a1050a8f19d181c5fc937a4b2dcb4e00ae3f7675c5182628820bbe5b2f8246c91735d0af70c5e0233cdd418f56b99e08f60c8f6d43c2b44ec24e515d97cd55bde8fb24cee0c2671507594a4cc8c487650ef99499c8a39a0f0b4423c4f96f73f1d2bab0d5f7d4810e99772fac5eebbbfbb790ef1b511c90fdf13967c0d41ec418bc07db08a8b90ba593f930549bdf6566d265a61d41734900ac622a108b46213e5624bb18116861c395ba5f15f31cd99194607bc79704b76e351b8bf3ff7cbda7e79621e9f26510034a79b6602e034c59bcbde905c6173157ffda7a99749272c86131368b387a33069999d1b31d50e1f1fcfc33db4f9d1a0aa72da9fe6425e7a78e64a691559301bd58cd11b88d8ca51b6d17621d1f81ac4b02b84c8efef4880c37113c498585b82bfdfded5628f4cd7be61a43609b05e0aae3d5059ad7fe5a73b38f1f58c54eb495dffa01563280e3855f5a4f9e232983d32dcd1d4abe728a2c2daf4772ccb1e16ce387cff49822b8982884f4419cfad8bb8bf64c9f8d12f35fbc4b31d4b80e950572aff2cf5ec331894336fabada12f8ceec909311a13e3ba61a1ee1ed3d3427eb2fa85e4cbfc6a56a191a1d728b150d310c25260db3c75e8684b4faa947dabb426670a12e293d1127b5d38d43a9e2ff5719b2b1b67e039ee5b69d3b4a19cb356837c907bc2f413904440ad0a8a80a9feb8412f67bc142890fe507de8a8c2c59dded7b12ab57f3a66febe095419577ead7a1e55f89ed4bc7a3bf075fadd31ebe954a78781561b707d58f0ab67067ebeb345f9ec180e37dd6c425b17e03ac43bb012582dd99bd80aa70134439f5a415afab651d776d8dc6f2858b69e96970a5ee8066a8184a150d73396ca3240d8bf3d96377a1e3fe76dfebd0cef83464077d1d1499cc86a3582c1bea6b4bb974976c5d5854c30c899db38019846705da7d4228ff2737dd5cd629a34aa0aeb7aa91d7433230536d57bb32b87825caef14460c24a7a93bd284f96ec3161674d04cc5d7d8ac7bcd31754cee56cd2e90dc36fdb588935049064d95e369714a5cbb7cbd62cce2ca62da9202508090280023e2100acd35a6e328ea979bd31d6f61cf768e439a8ef8796f1228149b8d060cc987a6a67b345058468e8d3aa58461a80d26c50576bd6fc511eda8d37f6906c696efea9af184cd3151ded1c46fd3c1588dcda0c64d622fcf8041bfa42738d5bad68f89a5d3077977d605fa32e25f9ded8609ea1cf0f038b237163f9e19aa4aa8eda993441fd76165f70cf3445bd1ea1159cf69e72801ea9f665da2b3a0cf798ba37fc24b023c53551a3f0a8139df74d4062803011656cc45819cce6055d1f9e820845b734327baff47067974cbe0fd190c8c0f1fc8af9df6db6097edcd7f624849885b5bdd4b5c6e9d8f387e779904294bb748f5837524e45ba88cd18a838f2b4af8b1e54efc8a29ae9959a8bb9aab4572aef81e3bd95bccf1dbb1f62158d26a0b16504a8500ff9aa7994f393c506193507369a6fd95e6010ec4922b1f5b229df226f1fb6dae877782412ee1d7c473d76e3ff98a857697c3ac13215ad455dba0e319fafaa43bde427bd835651313196afb6c06737c75edd900c350c2d6a167fc9b5a27a9b23b68b1c798ce4673a9b5011854957e787e7522e6db8ac90980836914051225e84d84c73923dd4c23b313b281479472f7675acac2a706fc06c4495e3d76cdf2817cffe58f97a94199c1741ef5ab7735d7bbc89efdbee5644599d8317d130a2d34627c2399338db2d739cb1bbce1f5b8b3310e68f83b43b998fc000904c9f971f4abac014032d1301b2a3247d5dcd0f4177e4ff8806acc1121e0659b5ab9ba1cc5e5152e50eb4a740d37cda2b7d1980004800900010073797a3000000000340007800800040080000000080002000100000008000400a9be0000080002000fd800000800040003000000080004000200000054000780080001000f000000080003000900000008000300ffff000008000200debb00000800010011000000080003000500000008000400ff0100000800040005000000080003001000000008000300b2e10000440004801c000780080001001c000000080003000300000008000400070000000c00078008000200010000000900010073797a30000000000900010073797a30000000007c0001800d0001007564703a73797a3200000000080003000100000044000400200001000a004e20000000062001000000000000000000000000000001000000200002000a004e2200000002ff0200000000000000000000000000010f0000000c00028008000300020000000800030008000000080003000800"], 0x148c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x141840) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66f09cea6bb67ada4fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=ANY=[@ANYBLOB="1400000015409b002200000000000003000005fa4b8cc6a67fc647502de9763408fe43675f736c680b915db27426cfe4717b55e45d2331ca50778432970ce5488674241b9ab051bf8b3cf81f8ce0fc83bc68a803010afa3f"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002300)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r7, &(0x7f0000004580)={0x2020}, 0x2020) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r9, r7, 0x0) 84.974424ms ago: executing program 6 (id=6296): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40026) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x470b92d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x8}, {}, {0xb, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x7fff, 0xef, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r8 = syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) 0s ago: executing program 0 (id=6297): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x2000, 0x747, 0x0, 0x3, 0x0, 0x0, 0x9}, 0xc) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r5, &(0x7f0000000180)=""/196, 0xc4, 0xffffffffff600000, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40488e4) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) listen(r6, 0x10001) shutdown(r6, 0x1) kernel console output (not intermixed with test programs): id problems! [ 1541.113989][T25142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.125459][T25142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.138426][T25142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.149599][T25142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.158974][T25142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.168331][T25142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.177694][T25142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.577905][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5418'. [ 1541.919240][ T8284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.933354][ T8284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.430143][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1542.439072][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.622236][T25413] hub 2-0:1.0: USB hub found [ 1542.631475][T25413] hub 2-0:1.0: 1 port detected [ 1543.614613][T25426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5426'. [ 1543.714592][T25424] 9pnet_fd: Insufficient options for proto=fd [ 1545.459694][ T5825] Bluetooth: hci3: Malformed Event: 0x02 [ 1545.995784][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.003308][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.886626][T25467] delete_channel: no stack [ 1549.496493][T17928] Bluetooth: hci5: command 0x0405 tx timeout [ 1549.947047][ T970] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1550.001694][ T29] audit: type=1326 audit(2000000321.759:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25499 comm="syz.0.5443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d85d29 code=0x0 [ 1550.104843][ T970] usb 7-1: Using ep0 maxpacket: 16 [ 1550.123477][ T970] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1550.132425][ T970] usb 7-1: config index 0 descriptor too short (expected 8210, got 18) [ 1550.146070][ T970] usb 7-1: config 123 interface 0 has no altsetting 0 [ 1550.202168][ T970] usb 7-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 1550.224289][ T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.232802][ T970] usb 7-1: Product: ᠁ [ 1550.237209][ T970] usb 7-1: Manufacturer: ѕ [ 1550.242152][ T970] usb 7-1: SerialNumber: ᫎ뢝맭߅ﶎ瀆ቓ꩗另铿峷⁠צ鰇좸仳ᇁꑣ䓐赘锤棡釞衭惜࢟㕝妼솺暥랕簲纯埪軇彝햁蘭㓏椄줸㤃ⱴɌ摽镽㔙籮즆裸ꖦ呱観뱣Ⲇਚᙅ먵뾑툋ﳯ⃱㯚靧␛疡딧뀃䧐耭㲛㩝뀏喠볞㜄쫄嫌⿊읉靖ꐆ踠熳伶鍌엏졤黦⿑딘ႄ艺鲶 [ 1550.846559][ T970] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 1550.896405][ T970] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1550.945614][ T970] dib0700: firmware download failed at 7 with -22 [ 1550.957883][ T970] usb 7-1: USB disconnect, device number 32 [ 1553.061675][T25539] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 1553.094879][ T29] audit: type=1400 audit(2000000324.849:2880): avc: denied { relabelto } for pid=25538 comm="syz.7.5451" name="cgroup.procs" dev="cgroup" ino=1048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 1553.175339][ T29] audit: type=1400 audit(2000000324.889:2881): avc: denied { associate } for pid=25538 comm="syz.7.5451" name="cgroup.procs" dev="cgroup" ino=1048 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 1553.306412][T25544] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.5454'. [ 1553.373677][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5455'. [ 1553.715089][ T970] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1553.894724][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5460'. [ 1553.992881][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5460'. [ 1554.100399][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5460'. [ 1554.457394][T25575] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.5463'. [ 1554.465265][ T970] usb 8-1: Using ep0 maxpacket: 16 [ 1554.466954][T25575] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1554.476928][ T970] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1554.494742][ T970] usb 8-1: config 0 has no interface number 0 [ 1554.500878][ T970] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1554.511611][ T970] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1554.522787][ T970] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1554.540852][ T970] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1554.583023][ T970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.593648][ T970] usb 8-1: Product: syz [ 1554.599021][ T970] usb 8-1: Manufacturer: syz [ 1554.603642][ T970] usb 8-1: SerialNumber: syz [ 1554.611282][ T970] usb 8-1: config 0 descriptor?? [ 1554.618397][T25547] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1554.626856][T25547] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1554.911201][T25547] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1554.924295][T25547] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1555.494912][ T2144] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1555.615172][T25586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5467'. [ 1555.675603][ T2144] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1555.687483][ T2144] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1555.717906][ T2144] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1555.753929][ T2144] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.810152][ T970] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -32 [ 1555.828788][ T2144] usb 5-1: config 0 descriptor?? [ 1556.163713][T25602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.564059][ T5868] usb 8-1: USB disconnect, device number 21 [ 1560.010878][ T2144] usb 5-1: USB disconnect, device number 104 [ 1561.916612][T25661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5487'. [ 1562.091263][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5489'. [ 1565.110766][T25691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5499'. [ 1565.344138][ T2144] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1565.633919][ T2144] usb 5-1: Using ep0 maxpacket: 16 [ 1565.641607][ T2144] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1565.650697][ T2144] usb 5-1: config index 0 descriptor too short (expected 8210, got 18) [ 1565.660402][ T2144] usb 5-1: config 123 interface 0 has no altsetting 0 [ 1565.670049][ T2144] usb 5-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 1565.679768][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.688368][ T2144] usb 5-1: Product: ᠁ [ 1565.692614][ T2144] usb 5-1: Manufacturer: ѕ [ 1565.697759][ T2144] usb 5-1: SerialNumber: ᫎ뢝맭߅ﶎ瀆ቓ꩗另铿峷⁠צ鰇좸仳ᇁꑣ䓐赘锤棡釞衭惜࢟㕝妼솺暥랕簲纯埪軇彝햁蘭㓏椄줸㤃ⱴɌ摽镽㔙籮즆裸ꖦ呱観뱣Ⲇਚᙅ먵뾑툋ﳯ⃱㯚靧␛疡딧뀃䧐耭㲛㩝뀏喠볞㜄쫄嫌⿊읉靖ꐆ踠熳伶鍌엏졤黦⿑딘ႄ艺鲶 [ 1566.943691][T25722] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1567.478597][ T2144] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 1567.492313][ T2144] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1567.501760][ T2144] dib0700: firmware download failed at 7 with -22 [ 1567.522476][ T2144] usb 5-1: USB disconnect, device number 105 [ 1567.604038][T16634] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1567.643952][T25730] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1568.128690][T16634] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1568.221557][T16634] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1568.252880][T16634] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1568.297490][T16634] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1568.310890][T25736] 9pnet_virtio: no channels available for device syz [ 1569.006094][T16634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.133242][ T29] audit: type=1400 audit(2000000340.889:2882): avc: denied { connect } for pid=25741 comm="syz.4.5513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1569.762716][T25734] syz.0.5511 (25734) used greatest stack depth: 20400 bytes left [ 1569.819593][T16634] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1569.828030][T16634] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input73 [ 1569.904682][T16634] input: failed to attach handler kbd to device input73, error: -5 [ 1570.435262][T25750] veth0_to_team: entered promiscuous mode [ 1570.445410][T25750] veth0_to_team: entered allmulticast mode [ 1570.477465][T16634] usb 7-1: USB disconnect, device number 33 [ 1572.883708][T25766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5521'. [ 1574.012646][T25792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1574.224828][ T970] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1575.014790][ T970] usb 8-1: device descriptor read/64, error -71 [ 1575.243759][T25809] netlink: 'syz.4.5534': attribute type 1 has an invalid length. [ 1575.266367][ T970] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1575.403958][ T970] usb 8-1: device descriptor read/64, error -71 [ 1575.535241][ T970] usb usb8-port1: attempt power cycle [ 1575.913061][ T970] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1575.935366][ T970] usb 8-1: device descriptor read/8, error -71 [ 1576.944012][ T970] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1577.020804][ T970] usb 8-1: device descriptor read/8, error -71 [ 1577.135645][ T970] usb usb8-port1: unable to enumerate USB device [ 1577.422819][T25839] fuse: Bad value for 'group_id' [ 1577.451862][T25839] fuse: Bad value for 'group_id' [ 1577.989013][T25739] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1578.156398][T25739] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.175814][T25739] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1578.204016][T25739] usb 5-1: config 1 has no interface number 0 [ 1578.211397][T25739] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.233777][T25739] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1578.361339][T25739] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1578.405927][T25739] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.414536][T25739] usb 5-1: Product: syz [ 1578.418912][T25739] usb 5-1: Manufacturer: syz [ 1578.423719][T25739] usb 5-1: SerialNumber: syz [ 1579.324331][T16634] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1579.356623][T25858] overlayfs: failed to resolve './bus/file0': -2 [ 1579.716158][T16634] usb 7-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1579.727430][T16634] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.585967][T16634] usb 7-1: config 0 descriptor?? [ 1580.607804][T25864] overlayfs: missing 'lowerdir' [ 1581.115344][T25875] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 1581.497767][T25890] overlayfs: failed to resolve './file1': -2 [ 1581.555330][ T5825] Bluetooth: Unknown LE signaling command 0x87 [ 1581.561789][ T5825] Bluetooth: Wrong link type (-22) [ 1581.894923][T16634] pegasus 7-1:0.0: probe with driver pegasus failed with error -71 [ 1581.937263][T16634] usb 7-1: USB disconnect, device number 34 [ 1582.170725][T25739] cdc_ncm 5-1:1.1: bind() failure [ 1582.178914][T25739] usb 5-1: USB disconnect, device number 106 [ 1582.887362][ T29] audit: type=1400 audit(2000000354.639:2883): avc: denied { setopt } for pid=25897 comm="syz.4.5563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1583.636979][T25913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1583.674020][T25913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5569'. [ 1583.912244][T25913] bond1: entered allmulticast mode [ 1583.924913][T25913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1584.672116][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5571'. [ 1584.956515][T25933] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5575'. [ 1586.086172][T25951] dccp_v6_rcv: dropped packet with invalid checksum [ 1587.147588][T25969] block device autoloading is deprecated and will be removed. [ 1587.158710][T25969] syz.3.5587: attempt to access beyond end of device [ 1587.158710][T25969] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1587.234089][T25971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5588'. [ 1587.354952][T25975] trusted_key: encrypted_key: master key parameter is missing [ 1587.904920][ T970] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1588.035322][ T970] usb 5-1: device descriptor read/64, error -71 [ 1588.262736][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5591'. [ 1588.624758][ T970] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1588.755282][ T970] usb 5-1: device descriptor read/64, error -71 [ 1588.866398][ T970] usb usb5-port1: attempt power cycle [ 1588.874732][T25464] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 1589.026484][T25464] usb 8-1: config 0 has an invalid interface number: 151 but max is 0 [ 1589.035723][T25464] usb 8-1: config 0 has no interface number 0 [ 1589.051602][T25464] usb 8-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1589.064790][T25464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.083435][T25464] usb 8-1: Product: syz [ 1589.107673][T25464] usb 8-1: Manufacturer: syz [ 1589.120302][T25464] usb 8-1: SerialNumber: syz [ 1589.150036][T25464] usb 8-1: config 0 descriptor?? [ 1589.223879][ T970] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1589.247859][ T970] usb 5-1: device descriptor read/8, error -71 [ 1589.467209][T25464] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1589.494851][ T970] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1589.563633][ T970] usb 5-1: device descriptor read/8, error -71 [ 1589.581180][T25464] usb 8-1: USB disconnect, device number 26 [ 1589.685864][ T970] usb usb5-port1: unable to enumerate USB device [ 1591.175435][T25739] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1591.317558][T26014] xt_CT: No such helper "snmp" [ 1591.355618][T25739] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.365944][T25739] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1591.382931][T25739] usb 7-1: config 1 has no interface number 0 [ 1591.389201][T25739] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.400697][T25739] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1591.502874][T26025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5602'. [ 1591.908032][T25739] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1591.917329][T25739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.925893][T25739] usb 7-1: Product: syz [ 1591.930090][T25739] usb 7-1: Manufacturer: syz [ 1591.936886][T25739] usb 7-1: SerialNumber: syz [ 1591.958358][T26029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5604'. [ 1592.229055][T26034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1594.059278][T26060] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5613'. [ 1594.400658][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5615'. [ 1595.799667][T25739] cdc_ncm 7-1:1.1: bind() failure [ 1595.808564][T25739] usb 7-1: USB disconnect, device number 35 [ 1597.185161][ T2327] pvrusb2: request_firmware fatal error with code=-110 [ 1597.193219][ T2327] pvrusb2: Failure uploading firmware1 [ 1597.198801][ T2327] pvrusb2: Device initialization was not successful. [ 1597.223249][ T29] audit: type=1400 audit(2000000368.979:2884): avc: denied { ioctl } for pid=26081 comm="syz.6.5621" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:ld_so_cache_t:s0" [ 1597.252815][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1597.252835][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1597.252936][T16805] pvrusb2: Device being rendered inoperable [ 1599.281710][T17928] Bluetooth: hci5: command 0x0405 tx timeout [ 1599.388147][T26132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5631'. [ 1599.420001][T26124] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5629'. [ 1599.431670][T26126] Bluetooth: MGMT ver 1.23 [ 1600.265511][T16805] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1600.644178][T16805] usb 4-1: device descriptor read/64, error -71 [ 1600.893965][T16805] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1601.024002][T16805] usb 4-1: device descriptor read/64, error -71 [ 1601.262742][T16805] usb usb4-port1: attempt power cycle [ 1601.624067][T16805] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1601.754588][T16805] usb 4-1: device descriptor read/8, error -71 [ 1602.034928][T25464] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1602.078159][T26188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1602.085406][T16805] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1602.116018][T16805] usb 4-1: device descriptor read/8, error -71 [ 1602.122646][T26184] fuse: Unknown parameter 'grou00000000000000000000' [ 1602.194734][T25464] usb 5-1: Using ep0 maxpacket: 16 [ 1602.206436][T25464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1602.219100][T25464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1602.233027][T25464] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1602.243320][T16805] usb usb4-port1: unable to enumerate USB device [ 1602.271728][T25464] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 1602.304562][T25464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.339272][T25464] usb 5-1: config 0 descriptor?? [ 1602.767013][T25464] input: HID 0955:7214 Haptics as /devices/virtual/input/input74 [ 1602.831798][T25464] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 1602.840560][T25464] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1602.973291][T26179] overlayfs: conflicting lowerdir path [ 1603.352572][T26221] FAULT_INJECTION: forcing a failure. [ 1603.352572][T26221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1603.389333][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.3.5662 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1603.400152][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1603.410265][T26221] Call Trace: [ 1603.413575][T26221] [ 1603.416496][T26221] dump_stack_lvl+0x16c/0x1f0 [ 1603.421182][T26221] should_fail_ex+0x497/0x5b0 [ 1603.425875][T26221] _copy_from_user+0x2e/0xd0 [ 1603.430483][T26221] do_tcp_setsockopt+0x78c/0x2660 [ 1603.435500][T26221] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1603.440959][T26221] ? sock_has_perm+0x25a/0x2f0 [ 1603.445725][T26221] ? selinux_netlbl_socket_setsockopt+0x184/0x470 [ 1603.452131][T26221] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 1603.458893][T26221] tcp_setsockopt+0xe2/0x100 [ 1603.463481][T26221] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1603.469396][T26221] do_sock_setsockopt+0x222/0x480 [ 1603.474447][T26221] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1603.480002][T26221] ? lock_acquire+0x2f/0xb0 [ 1603.484515][T26221] __sys_setsockopt+0x1a0/0x230 [ 1603.489376][T26221] __x64_sys_setsockopt+0xbd/0x160 [ 1603.494488][T26221] ? do_syscall_64+0x91/0x250 [ 1603.499165][T26221] ? lockdep_hardirqs_on+0x7c/0x110 [ 1603.504902][T26221] do_syscall_64+0xcd/0x250 [ 1603.509422][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1603.515329][T26221] RIP: 0033:0x7f1465d85d29 [ 1603.519741][T26221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1603.539406][T26221] RSP: 002b:00007f1466bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1603.547825][T26221] RAX: ffffffffffffffda RBX: 00007f1465f75fa0 RCX: 00007f1465d85d29 [ 1603.555794][T26221] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 1603.563867][T26221] RBP: 00007f1466bef090 R08: 0000000000000010 R09: 0000000000000000 [ 1603.571855][T26221] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1603.579827][T26221] R13: 0000000000000000 R14: 00007f1465f75fa0 R15: 00007fff0a83f8d8 [ 1603.587811][T26221] [ 1603.948050][ T5873] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1604.074866][ T5873] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1604.099831][ T5873] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1604.116052][ T5873] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1604.174769][T14926] usb 5-1: reset high-speed USB device number 111 using dummy_hcd [ 1604.315057][T14926] usb 5-1: device descriptor read/64, error -32 [ 1605.831320][T26251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5671'. [ 1605.904217][ T5825] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 1605.919358][ T29] audit: type=1800 audit(2000000377.679:2885): pid=26252 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.5673" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1606.365170][ T970] usb 5-1: USB disconnect, device number 111 [ 1607.365943][T25464] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1607.577403][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.584974][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.133411][T25464] usb 8-1: config 7 descriptor has 1 excess byte, ignoring [ 1608.151043][T25464] usb 8-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 1608.180350][T25464] usb 8-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 1608.190438][T25464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.201453][T25464] usb 8-1: Product: syz [ 1608.254756][T25464] usb 8-1: Manufacturer: syz [ 1608.259493][T25464] usb 8-1: SerialNumber: syz [ 1608.316485][T25464] rndis_host 8-1:7.0: skipping garbage [ 1608.332914][T25464] usb 8-1: bad CDC descriptors [ 1608.343101][T25464] option 8-1:7.0: GSM modem (1-port) converter detected [ 1608.415217][T26286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5683'. [ 1609.268897][T26296] hub 6-0:1.0: USB hub found [ 1609.279004][T26296] hub 6-0:1.0: 1 port detected [ 1609.528367][T25464] usb 8-1: USB disconnect, device number 27 [ 1609.549499][T25464] option 8-1:7.0: device disconnected [ 1609.727000][T16805] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1609.950237][T16805] usb 5-1: Using ep0 maxpacket: 32 [ 1609.978655][T16805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.015853][T16805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1610.100407][T16805] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1610.109676][T16805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.165545][T16805] usb 5-1: config 0 descriptor?? [ 1610.175833][T16805] hub 5-1:0.0: USB hub found [ 1611.790851][T16805] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1612.005293][T16805] usbhid 5-1:0.0: can't add hid device: -71 [ 1612.011340][T16805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1612.614798][T26336] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1612.817787][T16805] usb 5-1: USB disconnect, device number 112 [ 1613.568783][T26346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1614.234111][T25739] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1614.397916][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5700'. [ 1614.530391][T25739] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1614.546753][T25739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.563899][T25739] usb 8-1: Product: syz [ 1614.568320][T25739] usb 8-1: Manufacturer: syz [ 1614.573274][T25739] usb 8-1: SerialNumber: syz [ 1615.238050][T25739] usb 8-1: config 0 descriptor?? [ 1615.243895][T18468] libceph: connect (1)[c::]:6789 error -101 [ 1615.250023][T18468] libceph: mon0 (1)[c::]:6789 connect error [ 1615.332058][T25739] usb 8-1: can't set config #0, error -71 [ 1615.340002][T25739] usb 8-1: USB disconnect, device number 28 [ 1615.494517][T16805] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1615.517191][T16634] libceph: connect (1)[c::]:6789 error -101 [ 1615.523648][T16634] libceph: mon0 (1)[c::]:6789 connect error [ 1615.530371][T26377] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 0, id = 0 [ 1615.844020][T16805] usb 7-1: Using ep0 maxpacket: 32 [ 1615.855768][T16805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.989359][T16805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1616.035232][T16805] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1616.327026][T16634] libceph: connect (1)[c::]:6789 error -101 [ 1616.384840][T25464] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1616.439888][T16634] libceph: mon0 (1)[c::]:6789 connect error [ 1616.446665][T16805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1616.457466][T16805] usb 7-1: config 0 descriptor?? [ 1616.465959][T16805] hub 7-1:0.0: USB hub found [ 1616.693885][T25464] usb 5-1: Using ep0 maxpacket: 8 [ 1617.651387][T26396] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5710'. [ 1617.686147][T26365] ceph: No mds server is up or the cluster is laggy [ 1617.983980][T16805] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1618.011147][T16805] usbhid 7-1:0.0: can't add hid device: -71 [ 1618.023446][T16805] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1618.112353][T16805] usb 7-1: USB disconnect, device number 36 [ 1618.118491][T25464] usb 5-1: device descriptor read/all, error -71 [ 1618.581104][T26405] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5713'. [ 1618.790436][T26407] fuse: Unknown parameter 'grou00000000000000000000' [ 1619.065062][T26416] fuse: Unknown parameter 'group_id00000000000000000000' [ 1619.730627][ T29] audit: type=1400 audit(2000000391.489:2886): avc: denied { listen } for pid=26402 comm="syz.4.5714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1620.054817][ T970] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1620.062845][T25464] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1620.216357][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.244769][T25464] usb 4-1: Using ep0 maxpacket: 16 [ 1620.250182][ T970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.318908][T25464] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1620.343080][ T970] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1620.364952][T25464] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1620.376127][ T970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.385171][T25464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.406880][ T970] usb 8-1: config 0 descriptor?? [ 1620.413328][T25464] usb 4-1: config 0 descriptor?? [ 1620.430528][T25464] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 1620.618168][T26448] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode [ 1620.661890][T26448] macsec1: entered allmulticast mode [ 1620.674074][T26448] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 1620.690312][ T5180] bcm5974 4-1:0.0: could not read from device [ 1620.707017][T26434] bcm5974 4-1:0.0: could not read from device [ 1620.786629][ T5180] bcm5974 4-1:0.0: could not read from device [ 1620.802793][T25464] usb 4-1: USB disconnect, device number 19 [ 1620.848695][ T970] uclogic 0003:5543:0522.0021: item fetching failed at offset 3/5 [ 1620.877882][ T970] uclogic 0003:5543:0522.0021: parse failed [ 1620.887550][ T970] uclogic 0003:5543:0522.0021: probe with driver uclogic failed with error -22 [ 1621.777190][T26454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5727'. [ 1623.424021][T14926] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1623.596243][T14926] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 1623.607509][T14926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.621097][T14926] usb 7-1: config 0 descriptor?? [ 1624.195200][T14926] playstation 0003:054C:0DF2.0022: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 1624.303542][T26501] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1625.007780][T14926] playstation 0003:054C:0DF2.0022: Invalid byte count transferred, expected 20 got 0 [ 1625.053107][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 1625.070353][T14926] playstation 0003:054C:0DF2.0022: Failed to retrieve DualSense pairing info: -22 [ 1625.554874][T14926] playstation 0003:054C:0DF2.0022: Failed to get MAC address from DualSense [ 1625.563622][T14926] playstation 0003:054C:0DF2.0022: Failed to create dualsense. [ 1625.715522][T14926] playstation 0003:054C:0DF2.0022: probe with driver playstation failed with error -22 [ 1625.836953][T26506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1625.962265][T14926] usb 7-1: USB disconnect, device number 37 [ 1626.081037][T16805] usb 8-1: USB disconnect, device number 29 [ 1626.233678][T26517] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 1629.384967][T26544] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1631.454114][ T29] audit: type=1400 audit(2000000402.859:2887): avc: denied { setopt } for pid=26545 comm="syz.6.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1632.065695][T26562] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5756'. [ 1633.214851][T26579] delete_channel: no stack [ 1634.871557][T26595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5765'. [ 1635.391541][ T970] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1636.234864][ T970] usb 5-1: Using ep0 maxpacket: 16 [ 1636.261393][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1636.313187][ T970] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1636.349953][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.420997][ T970] usb 5-1: config 0 descriptor?? [ 1636.428955][ T970] pxrc 5-1:0.0: Could not find endpoint [ 1636.621370][ T29] audit: type=1326 audit(2000000408.379:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1636.659028][ T29] audit: type=1326 audit(2000000408.409:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1636.778521][T26604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1636.877590][T26637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5775'. [ 1636.890207][T26604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1636.907848][ T29] audit: type=1326 audit(2000000408.409:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.220814][T18468] usb 5-1: USB disconnect, device number 115 [ 1637.513991][ T29] audit: type=1326 audit(2000000408.409:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.591450][ T29] audit: type=1326 audit(2000000408.409:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.660042][ T29] audit: type=1326 audit(2000000408.409:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.700479][ T29] audit: type=1326 audit(2000000408.409:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.724040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.733230][ T29] audit: type=1326 audit(2000000408.409:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.756835][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.765895][ T29] audit: type=1326 audit(2000000408.409:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.789378][ C0] vkms_vblank_simulate: vblank timer overrun [ 1637.798722][ T29] audit: type=1326 audit(2000000408.409:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26625 comm="syz.6.5775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27b585d29 code=0x7ffc0000 [ 1637.822204][ C0] vkms_vblank_simulate: vblank timer overrun [ 1638.282865][T26657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5781'. [ 1638.443600][T26664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1638.626077][T26669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5786'. [ 1639.498225][T26690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5794'. [ 1639.544071][T25739] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1639.551942][T16805] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1639.783960][T25739] usb 7-1: Using ep0 maxpacket: 16 [ 1639.828667][T25739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.853179][T25739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.898313][T25739] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1639.962973][T25739] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1639.984778][T16805] usb 4-1: Using ep0 maxpacket: 32 [ 1640.010578][T25739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.030029][T16805] usb 4-1: config 0 has an invalid interface number: 111 but max is 3 [ 1640.070170][T16805] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1640.100278][T25739] usb 7-1: config 0 descriptor?? [ 1640.105503][ T5868] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1640.157070][T16805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.212621][T16805] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 1640.252515][T16805] usb 4-1: config 0 has no interface number 0 [ 1640.281839][T16805] usb 4-1: config 0 interface 111 altsetting 1 endpoint 0xB has an invalid bInterval 138, changing to 11 [ 1640.434413][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 1640.454771][T16805] usb 4-1: config 0 interface 111 altsetting 1 endpoint 0xC has invalid maxpacket 8224, setting to 64 [ 1640.467262][T16805] usb 4-1: config 0 interface 111 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1640.467836][ T5868] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1640.492575][T16805] usb 4-1: config 0 interface 111 has no altsetting 0 [ 1640.501218][ T5868] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.512679][T16805] usb 4-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=57.90 [ 1640.524329][T16805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.533431][T16805] usb 4-1: Product: syz [ 1640.538201][ T5868] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1640.549036][ T5868] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1640.557894][T16805] usb 4-1: Manufacturer: syz [ 1640.562594][ T5868] usb 5-1: Product: syz [ 1640.566936][ T5868] usb 5-1: Manufacturer: syz [ 1640.571608][T16805] usb 4-1: SerialNumber: syz [ 1640.580800][ T5868] hub 5-1:4.0: USB hub found [ 1640.594682][T16805] usb 4-1: config 0 descriptor?? [ 1640.623778][T16805] usb 4-1: Could not find all expected endpoints [ 1641.757850][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 1641.757871][ T29] audit: type=1800 audit(2000000412.889:2946): pid=26713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5792" name="bus" dev="overlay" ino=1894 res=0 errno=0 [ 1641.996678][ T5868] hub 5-1:4.0: 7 ports detected [ 1642.002034][ T5868] hub 5-1:4.0: insufficient power available to use all downstream ports [ 1642.898672][ T970] usb 4-1: USB disconnect, device number 20 [ 1643.120675][T26725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5804'. [ 1643.209270][T25739] usbhid 7-1:0.0: can't add hid device: -71 [ 1643.216299][T25739] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1643.238519][T25739] usb 7-1: USB disconnect, device number 38 [ 1643.261717][ T5868] hub 5-1:4.0: set hub depth failed [ 1643.262870][ T5825] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1643.293115][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: kworker/u9:4 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1643.304009][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1643.314089][ T5825] Workqueue: hci5 hci_rx_work [ 1643.318813][ T5825] Call Trace: [ 1643.322096][ T5825] [ 1643.325028][ T5825] dump_stack_lvl+0x16c/0x1f0 [ 1643.329715][ T5825] sysfs_warn_dup+0x7f/0xa0 [ 1643.334228][ T5825] sysfs_create_dir_ns+0x24d/0x2b0 [ 1643.339350][ T5825] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1643.345000][ T5825] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1643.350384][ T5825] ? kobject_add_internal+0x12d/0x990 [ 1643.355774][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 1643.360981][ T5825] kobject_add_internal+0x2c8/0x990 [ 1643.366195][ T5825] kobject_add+0x16f/0x240 [ 1643.370628][ T5825] ? __pfx_kobject_add+0x10/0x10 [ 1643.375570][ T5825] ? class_to_subsys+0x3e/0x160 [ 1643.380437][ T5825] ? do_raw_spin_unlock+0x172/0x230 [ 1643.385647][ T5825] ? kobject_put+0xab/0x5a0 [ 1643.390171][ T5825] device_add+0x289/0x1a70 [ 1643.394602][ T5825] ? __pfx_dev_set_name+0x10/0x10 [ 1643.399641][ T5825] ? __pfx_device_add+0x10/0x10 [ 1643.404497][ T5825] ? mgmt_send_event_skb+0x2f2/0x460 [ 1643.409799][ T5825] hci_conn_add_sysfs+0x17e/0x230 [ 1643.414923][ T5825] le_conn_complete_evt+0x107f/0x1da0 [ 1643.420306][ T5825] ? __pfx_lock_release+0x10/0x10 [ 1643.425335][ T5825] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1643.431060][ T5825] ? trace_contention_end+0xee/0x140 [ 1643.436363][ T5825] ? __mutex_lock+0x1cc/0xa60 [ 1643.441056][ T5825] hci_le_conn_complete_evt+0x23c/0x370 [ 1643.446619][ T5825] hci_le_meta_evt+0x2e2/0x5d0 [ 1643.451393][ T5825] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1643.457477][ T5825] hci_event_packet+0x666/0x1180 [ 1643.462417][ T5825] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1643.467712][ T5825] ? __pfx_hci_event_packet+0x10/0x10 [ 1643.473091][ T5825] ? mark_held_locks+0x9f/0xe0 [ 1643.477860][ T5825] ? kcov_remote_start+0x3cf/0x6e0 [ 1643.482996][ T5825] ? lockdep_hardirqs_on+0x7c/0x110 [ 1643.488205][ T5825] hci_rx_work+0x2c5/0x16b0 [ 1643.492715][ T5825] ? process_one_work+0x921/0x1ba0 [ 1643.497852][ T5825] process_one_work+0x9c5/0x1ba0 [ 1643.502832][ T5825] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1643.508490][ T5825] ? __pfx_process_one_work+0x10/0x10 [ 1643.513879][ T5825] ? rcu_is_watching+0x12/0xc0 [ 1643.518665][ T5825] ? assign_work+0x1a0/0x250 [ 1643.523270][ T5825] worker_thread+0x6c8/0xf00 [ 1643.527874][ T5825] ? __pfx_worker_thread+0x10/0x10 [ 1643.532989][ T5825] kthread+0x2c1/0x3a0 [ 1643.537151][ T5825] ? _raw_spin_unlock_irq+0x23/0x50 [ 1643.542357][ T5825] ? __pfx_kthread+0x10/0x10 [ 1643.546966][ T5825] ret_from_fork+0x45/0x80 [ 1643.551386][ T5825] ? __pfx_kthread+0x10/0x10 [ 1643.555985][ T5825] ret_from_fork_asm+0x1a/0x30 [ 1643.560772][ T5825] [ 1643.563926][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.577867][ T5825] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1643.595589][ T5825] Bluetooth: hci5: failed to register connection device [ 1643.620914][ T5825] Bluetooth: hci5: link tx timeout [ 1643.628221][ T5825] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1643.754366][ T5868] usb 5-1: USB disconnect, device number 116 [ 1643.757601][ T5825] Bluetooth: hci5: link tx timeout [ 1643.768059][ T5825] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1645.665350][ T5868] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 1645.685364][T26749] fuse: Bad value for 'user_id' [ 1645.700134][T26749] fuse: Bad value for 'user_id' [ 1645.843318][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 1645.850744][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1645.865711][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5814'. [ 1645.876702][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.906973][ T5868] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1645.916582][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.927350][ T5868] usb 7-1: config 0 descriptor?? [ 1646.350137][ T5868] isku 0003:1E7D:319C.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 1646.574544][T26739] netlink: 'syz.6.5807': attribute type 9 has an invalid length. [ 1647.263998][T26739] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5807'. [ 1647.352729][T26769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=6 (12 ns) > initial count (2 ns). Using initial count to start timer. [ 1647.723608][T26778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 1647.974127][ T5825] Bluetooth: hci5: command 0x0405 tx timeout [ 1648.115374][T26792] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1648.137733][T26800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6984 sclass=netlink_route_socket pid=26800 comm=syz.0.5827 [ 1648.880802][ T5868] isku 0003:1E7D:319C.0023: couldn't init struct isku_device [ 1648.908382][ T5868] isku 0003:1E7D:319C.0023: couldn't install keyboard [ 1648.991344][ T5868] isku 0003:1E7D:319C.0023: probe with driver isku failed with error -71 [ 1649.006279][ T5868] usb 7-1: USB disconnect, device number 39 [ 1649.394075][ T5868] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1649.576910][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1649.586496][ T5868] usb 7-1: Using ep0 maxpacket: 16 [ 1649.605282][ T5868] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 1649.630040][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.660903][ T5868] usb 7-1: config 0 descriptor?? [ 1649.736162][ T5868] usb 7-1: invalid MIDI EP [ 1649.751274][ T5868] usb 7-1: snd-bcd2000: error during probing [ 1649.760246][ T5868] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 1651.465238][T26851] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5843'. [ 1651.574358][T18468] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1651.617550][T26851] team1: Mode "" not found [ 1651.745355][T18468] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1651.758975][T18468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.775713][T18468] usb 4-1: config 0 descriptor?? [ 1651.783523][T18468] cp210x 4-1:0.0: cp210x converter detected [ 1651.873942][ T5868] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1652.034194][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1652.087897][ T5868] usb 8-1: config 0 has an invalid interface number: 23 but max is 0 [ 1652.147741][ T5868] usb 8-1: config 0 has no interface number 0 [ 1652.170551][ T5868] usb 8-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=13.d5 [ 1652.201172][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.201809][T25464] usb 7-1: USB disconnect, device number 40 [ 1652.232105][ T5868] usb 8-1: Product: syz [ 1652.257609][ T5868] usb 8-1: Manufacturer: syz [ 1652.260231][T26864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5846'. [ 1652.273755][ T5868] usb 8-1: SerialNumber: syz [ 1652.499809][ T5868] usb 8-1: config 0 descriptor?? [ 1652.660934][T18468] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1652.670017][T18468] usb 4-1: USB disconnect, device number 21 [ 1652.678860][ T5868] usb 8-1: bad CDC descriptors [ 1652.687657][T18468] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1652.696206][T18468] cp210x 4-1:0.0: device disconnected [ 1653.051035][T18468] usb 8-1: USB disconnect, device number 30 [ 1653.704808][T26882] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1654.396106][T26885] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1654.438142][T26900] futex_wake_op: syz.7.5858 tries to shift op by -1; fix this program [ 1654.485150][T26885] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5854'. [ 1654.712024][T25464] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1654.972423][T26904] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5860'. [ 1654.985208][T25464] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.997256][T25464] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1655.007061][T25464] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.021500][T25464] usb 7-1: config 0 descriptor?? [ 1655.975725][T26901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1655.988208][T26901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1656.514127][T18468] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1656.668536][T25464] usbhid 7-1:0.0: can't add hid device: -71 [ 1656.674188][T18468] usb 8-1: Using ep0 maxpacket: 8 [ 1656.676022][T25464] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1656.692436][T25464] usb 7-1: USB disconnect, device number 41 [ 1656.692919][T18468] usb 8-1: config 6 has an invalid interface number: 2 but max is 0 [ 1656.719466][T18468] usb 8-1: config 6 has no interface number 0 [ 1656.731549][T18468] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1656.745414][T18468] usb 8-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1656.757791][T18468] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1656.768820][T18468] usb 8-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1656.782521][T18468] usb 8-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1656.791986][T18468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.862265][T18468] usb 8-1: Product: syz [ 1656.874226][T18468] usb 8-1: Manufacturer: syz [ 1656.879354][T18468] usb 8-1: SerialNumber: syz [ 1656.901326][T18468] hso 8-1:6.2: Failed to find BULK IN ep [ 1656.962592][T26931] fuse: Bad value for 'fd' [ 1657.232911][T18468] usb 8-1: USB disconnect, device number 31 [ 1657.301566][T26939] netlink: 87 bytes leftover after parsing attributes in process `syz.3.5872'. [ 1657.359229][ T29] audit: type=1400 audit(2000000429.119:2947): avc: denied { map } for pid=26940 comm="syz.4.5873" path="socket:[98343]" dev="sockfs" ino=98343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1657.864787][T25464] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1658.198850][T16635] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1658.316418][T25464] usb 4-1: config index 0 descriptor too short (expected 72, got 10) [ 1658.325408][T25464] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 1658.332684][T25464] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1659.221458][T25464] usb 4-1: string descriptor 0 read error: -71 [ 1659.228483][T25464] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1659.238663][T25464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.257095][T25464] usb 4-1: can't set config #1, error -71 [ 1659.304017][T26958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5880'. [ 1659.467204][T25464] usb 4-1: USB disconnect, device number 22 [ 1659.525752][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1659.539931][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1659.569520][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1659.591355][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1659.602362][ T5825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1659.603664][T16635] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.628058][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1659.854235][T16635] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.336107][T16635] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.415105][T25464] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1660.433625][T26980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1660.466512][T26980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5887'. [ 1660.604723][T25464] usb 8-1: Using ep0 maxpacket: 32 [ 1660.620335][T25464] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1660.655038][T25464] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1660.690648][T25464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.712935][T16635] bridge_slave_1: left allmulticast mode [ 1660.719547][T25464] usb 8-1: Product: syz [ 1660.724747][T16635] bridge_slave_1: left promiscuous mode [ 1660.730494][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.738749][T25464] usb 8-1: Manufacturer: syz [ 1660.743402][T25464] usb 8-1: SerialNumber: syz [ 1660.750988][T25464] usb 8-1: config 0 descriptor?? [ 1660.759052][T25464] usb 8-1: bad CDC descriptors [ 1660.767873][T16635] bridge_slave_0: left allmulticast mode [ 1660.793328][T16635] bridge_slave_0: left promiscuous mode [ 1660.805562][T25464] usb 8-1: unsupported MDLM descriptors [ 1660.812944][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.134370][T16805] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1661.180315][T16635] dvmrp5 (unregistering): left allmulticast mode [ 1661.289220][ T29] audit: type=1326 audit(2000000433.049:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26988 comm="syz.0.5889" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1e3d85d29 code=0x0 [ 1661.354214][T16805] usb 4-1: Using ep0 maxpacket: 8 [ 1661.377448][T16805] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1661.386303][T16805] usb 4-1: config 0 has no interface number 0 [ 1661.393196][T16805] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1661.407733][T16805] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1661.420896][T16805] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1661.436560][T16805] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1661.450204][T16805] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1661.459981][T16805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.470253][T16805] usb 4-1: config 0 descriptor?? [ 1661.608996][T16805] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1661.822969][T17928] Bluetooth: hci4: command tx timeout [ 1661.887210][T16805] usb 4-1: USB disconnect, device number 23 [ 1661.901735][T16805] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1662.141671][T16635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1662.163771][T16635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1662.177175][T16635] bond0 (unregistering): Released all slaves [ 1662.268640][T16635] tipc: Left network mode [ 1662.342619][T16635] IPVS: stopping master sync thread 22236 ... [ 1662.481939][T16635] mac80211_hwsim hwsim35 wlan1 (unregistering): left allmulticast mode [ 1663.030346][T26960] chnl_net:caif_netlink_parms(): no params data found [ 1663.261794][ T5868] usb 8-1: USB disconnect, device number 32 [ 1664.148301][T17928] Bluetooth: hci4: command tx timeout [ 1664.635522][T16635] hsr_slave_0: left promiscuous mode [ 1664.641643][T16635] hsr_slave_1: left promiscuous mode [ 1664.648472][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1664.735700][T16635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.845411][T16635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1664.864192][T16635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.960208][T16635] veth1_macvtap: left promiscuous mode [ 1664.987675][T16635] veth0_macvtap: left promiscuous mode [ 1665.359464][T16635] veth1_vlan: left promiscuous mode [ 1665.365899][T16635] veth0_vlan: left allmulticast mode [ 1665.373077][T16635] veth0_vlan: left promiscuous mode [ 1666.322743][T17928] Bluetooth: hci4: command tx timeout [ 1666.765070][T27045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5903'. [ 1667.452331][T16635] team0 (unregistering): Port device team_slave_1 removed [ 1667.562382][T16635] team0 (unregistering): Port device team_slave_0 removed [ 1667.679275][ T5868] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1667.874089][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1667.883050][ T5868] usb 8-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1667.894990][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.913320][ T5868] usb 8-1: Product: syz [ 1667.920179][ T5868] usb 8-1: Manufacturer: syz [ 1667.925123][ T5868] usb 8-1: SerialNumber: syz [ 1667.932909][ T5868] usb 8-1: config 0 descriptor?? [ 1668.391593][ T5825] Bluetooth: hci4: command tx timeout [ 1668.636630][ T5868] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:ec:54:49:b2:1e [ 1668.861208][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.871797][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.297447][ T5868] rtl8150 8-1:0.0: eth5: rtl8150 is detected [ 1669.311301][ T5868] usb 8-1: USB disconnect, device number 33 [ 1669.428747][T27062] pim6reg: entered allmulticast mode [ 1669.485844][T27067] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5911'. [ 1670.433576][T26960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.441933][T26960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.449905][T26960] bridge_slave_0: entered allmulticast mode [ 1670.457369][T26960] bridge_slave_0: entered promiscuous mode [ 1670.546944][T26960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.585032][T26960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.625011][T26960] bridge_slave_1: entered allmulticast mode [ 1670.632262][T26960] bridge_slave_1: entered promiscuous mode [ 1670.772197][T26960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1670.807376][T26960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.100181][T26960] team0: Port device team_slave_0 added [ 1671.150284][T27099] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5920'. [ 1671.181343][ T5872] usb 8-1: new low-speed USB device number 34 using dummy_hcd [ 1671.246031][T26960] team0: Port device team_slave_1 added [ 1671.292268][T26960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.303113][T26960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.329081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.339169][T26960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.344145][ T5868] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1671.367143][T26960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.374892][T26960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.400883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1671.408895][T26960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.462306][ T5872] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1671.478838][ T5872] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1671.478985][T26960] hsr_slave_0: entered promiscuous mode [ 1671.499402][ T5872] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 1671.509696][ T5872] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 1671.524408][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 1671.530836][ T5872] usb 8-1: string descriptor 0 read error: -22 [ 1671.531021][T26960] hsr_slave_1: entered promiscuous mode [ 1671.543435][ T5872] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1671.543468][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.567862][ T5868] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1671.568259][T27091] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1671.584364][ T5868] usb 4-1: config 0 has no interface number 0 [ 1671.590550][ T5868] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1671.600685][ T5868] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1671.615362][ T5868] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1671.625413][T26960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.633325][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.641868][ T5868] usb 4-1: Product: syz [ 1671.643299][T26960] Cannot create hsr debugfs directory [ 1671.646389][ T5868] usb 4-1: Manufacturer: syz [ 1671.646411][ T5868] usb 4-1: SerialNumber: syz [ 1671.648149][ T5868] usb 4-1: config 0 descriptor?? [ 1671.670572][T27092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1671.965931][ T29] audit: type=1400 audit(2000000443.719:2949): avc: denied { getopt } for pid=27106 comm="syz.4.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1672.213488][T27092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1672.221278][ T5872] cdc_ncm 8-1:1.0: bind() failure [ 1672.233130][ T5872] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1672.241361][ T5872] cdc_ncm 8-1:1.1: bind() failure [ 1672.251162][ T5872] usb 8-1: USB disconnect, device number 34 [ 1672.442272][T27092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1672.460553][T27092] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1672.546377][T27122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5926'. [ 1672.847087][T27131] netlink: 'syz.4.5930': attribute type 1 has an invalid length. [ 1673.253791][ T5868] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1673.337952][T26960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1673.367293][ T5868] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1673.406978][T26960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1673.592750][ T5868] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1673.694331][T27140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5932'. [ 1673.871609][T26960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1674.252553][ T5868] usb 4-1: USB disconnect, device number 24 [ 1674.481413][T26960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1674.538096][T27143] fuse: Invalid rootmode [ 1674.671575][T27146] binder: 27144:27146 ioctl c0306201 0 returned -14 [ 1674.749928][T26960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.787541][T26960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.812097][ T8288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.819284][ T8288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.240199][ T8288] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.247344][ T8288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.317490][T27157] netdevsim netdevsim0: Direct firmware load for printk failed with error -2 [ 1675.327288][T27157] netdevsim netdevsim0: Falling back to sysfs fallback for: printk [ 1675.516502][T27161] syzkaller0: entered promiscuous mode [ 1675.547675][T27161] syzkaller0: entered allmulticast mode [ 1675.571237][T27168] usb usb1: usbfs: process 27168 (syz.7.5941) did not claim interface 0 before use [ 1675.977182][ T5872] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1676.157125][ T5872] usb 8-1: Using ep0 maxpacket: 16 [ 1676.198839][ T5872] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1676.227669][T25739] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1676.234704][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1676.253705][ T5872] usb 8-1: Product: syz [ 1676.260143][ T5872] usb 8-1: Manufacturer: syz [ 1676.278968][ T5872] usb 8-1: SerialNumber: syz [ 1676.287019][ T5872] usb 8-1: config 0 descriptor?? [ 1677.379593][T25739] usb 5-1: Using ep0 maxpacket: 16 [ 1677.401724][T25739] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1677.628796][T25739] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1677.652005][T25739] usb 5-1: Product: syz [ 1677.712106][T25739] usb 5-1: Manufacturer: syz [ 1677.723985][T25739] usb 5-1: SerialNumber: syz [ 1677.864280][T25739] usb 5-1: config 0 descriptor?? [ 1679.521876][T18468] usb 8-1: USB disconnect, device number 35 [ 1679.624978][ T29] audit: type=1326 audit(2000000450.459:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.0.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d85d29 code=0x7ffc0000 [ 1679.720954][ T29] audit: type=1326 audit(2000000450.459:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.0.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d85d29 code=0x7ffc0000 [ 1679.745053][ T29] audit: type=1326 audit(2000000450.549:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.0.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd1e3d85d29 code=0x7ffc0000 [ 1679.769042][ T29] audit: type=1326 audit(2000000450.549:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.0.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d85d29 code=0x7ffc0000 [ 1679.792689][ T29] audit: type=1326 audit(2000000450.559:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27193 comm="syz.0.5948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d85d29 code=0x7ffc0000 [ 1679.999556][T27204] Cannot find set identified by id 0 to match [ 1680.039040][T27204] Cannot find set identified by id 0 to match [ 1680.090398][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5952'. [ 1681.076841][ T5868] usb 5-1: USB disconnect, device number 117 [ 1681.145598][T27229] fuse: Invalid rootmode [ 1681.241333][T27232] Unsupported ieee802154 address type: 0 [ 1684.564267][ T29] audit: type=1400 audit(2000000456.319:2955): avc: denied { accept } for pid=27243 comm="syz.0.5962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1684.654855][T27246] xt_TCPMSS: Only works on TCP SYN packets [ 1685.096583][T27208] batadv0: entered promiscuous mode [ 1685.104397][T27208] team0: entered promiscuous mode [ 1685.109470][T27208] team_slave_0: entered promiscuous mode [ 1685.122191][T27208] team_slave_1: entered promiscuous mode [ 1685.129458][T27208] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1685.137537][T27208] Cannot create hsr debugfs directory [ 1685.143784][T27208] hsr1: entered promiscuous mode [ 1685.153854][T27208] hsr1: entered allmulticast mode [ 1685.164020][T27208] batadv0: entered allmulticast mode [ 1685.169327][T27208] team0: entered allmulticast mode [ 1685.183947][T27208] team_slave_0: entered allmulticast mode [ 1685.191486][T27208] team_slave_1: entered allmulticast mode [ 1685.265519][T26960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.901404][T25464] IPVS: starting estimator thread 0... [ 1688.947351][T27285] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5975'. [ 1688.953184][T26960] veth0_vlan: entered promiscuous mode [ 1689.054593][T26960] veth1_vlan: entered promiscuous mode [ 1689.074098][T26960] veth0_macvtap: entered promiscuous mode [ 1689.082733][T26960] veth1_macvtap: entered promiscuous mode [ 1689.100249][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.110920][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.120936][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.131552][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.141698][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.152486][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.162504][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.173005][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.182922][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.195450][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.205456][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.216103][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.226133][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.236833][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.247363][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1689.255008][T27287] IPVS: using max 26 ests per chain, 62400 per kthread [ 1689.258378][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.280594][T26960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1689.290604][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.301137][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.311245][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.321912][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.332164][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.344653][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.354875][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.365428][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.375329][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.385874][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.395771][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.406402][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.416555][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.427425][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.437367][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.448155][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.458420][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.468986][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.478875][T26960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1689.489441][T26960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1689.500742][T26960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1689.546578][T26960] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.556016][T26960] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.579198][T26960] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.589446][T26960] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.802995][T16635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.826757][T16635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.882830][T16635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.901829][T16635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1691.235096][ T29] audit: type=1400 audit(2000000462.999:2956): avc: denied { listen } for pid=27312 comm="syz.7.5983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1691.615190][ T5872] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1691.776161][ T5872] usb 8-1: Using ep0 maxpacket: 8 [ 1691.790942][ T5872] usb 8-1: config 0 has no interfaces? [ 1691.898651][ T5872] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1691.925926][ T5872] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.956606][ T5872] usb 8-1: config 0 descriptor?? [ 1692.294931][T17928] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1692.311327][T17928] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1692.322696][T17928] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1692.340347][T17928] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1692.350520][T17928] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1692.363718][T17928] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1692.847840][ T29] audit: type=1326 audit(2000000464.599:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1692.882981][T27329] block nbd7: NBD_DISCONNECT [ 1693.001986][ T29] audit: type=1326 audit(2000000464.599:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.477120][ T29] audit: type=1326 audit(2000000464.599:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.512940][ T29] audit: type=1326 audit(2000000464.599:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.564028][ T29] audit: type=1326 audit(2000000464.599:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.628515][ T29] audit: type=1326 audit(2000000464.599:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.686734][ T29] audit: type=1326 audit(2000000464.599:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.792378][ T29] audit: type=1326 audit(2000000464.599:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.815937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1693.851947][ T29] audit: type=1326 audit(2000000464.599:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27298 comm="syz.3.5980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1465d85d29 code=0x7fc00000 [ 1693.915739][ T5868] usb 8-1: USB disconnect, device number 36 [ 1694.544349][T17928] Bluetooth: hci6: command tx timeout [ 1694.668448][T27324] chnl_net:caif_netlink_parms(): no params data found [ 1695.253241][T27324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.279530][T27324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.288319][T27324] bridge_slave_0: entered allmulticast mode [ 1695.311864][T27324] bridge_slave_0: entered promiscuous mode [ 1695.339735][T27324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1695.360083][T27324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1695.387825][T27324] bridge_slave_1: entered allmulticast mode [ 1695.407139][T27324] bridge_slave_1: entered promiscuous mode [ 1695.486645][T27324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1695.526404][T27324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1696.654733][ T5825] Bluetooth: hci6: command tx timeout [ 1696.748849][T27368] fuse: Unknown parameter 'use00000000000000000000' [ 1696.933480][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5994'. [ 1696.950329][T27324] team0: Port device team_slave_0 added [ 1696.957393][T27373] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5997'. [ 1696.995012][T27324] team0: Port device team_slave_1 added [ 1697.003531][T27373] netlink: 'syz.6.5997': attribute type 7 has an invalid length. [ 1697.023478][T27373] netlink: 'syz.6.5997': attribute type 8 has an invalid length. [ 1697.053677][T27373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5997'. [ 1697.084309][T27376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5998'. [ 1697.125688][T27324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1697.132671][T27324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.176910][T27324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1697.483763][T27387] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1697.962939][T27324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1697.970234][T27324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.996214][T27324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.174609][ T5825] Bluetooth: hci6: command tx timeout [ 1700.577839][T27324] hsr_slave_0: entered promiscuous mode [ 1700.599553][T27324] hsr_slave_1: entered promiscuous mode [ 1700.628519][T27324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1700.660741][T27324] Cannot create hsr debugfs directory [ 1701.264333][T17928] Bluetooth: hci6: command tx timeout [ 1701.605479][T25464] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1701.904223][T27416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1701.933183][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1701.933197][ T29] audit: type=1400 audit(2000000473.689:3023): avc: denied { append } for pid=27415 comm="syz.3.6007" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1702.028765][T25464] usb 8-1: Using ep0 maxpacket: 8 [ 1702.057483][T25464] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 1702.079974][T27420] fuse: Unknown parameter 'use00000000000000000000' [ 1702.099052][T25464] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.120210][T25464] usb 8-1: config 0 has no interface number 0 [ 1702.132755][T25464] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1702.145781][T25464] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1702.157009][T25464] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1702.170955][T25464] usb 8-1: config 0 interface 52 has no altsetting 0 [ 1702.186998][T27324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.211891][T25464] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1702.222145][T25464] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1702.230972][T25464] usb 8-1: Manufacturer: syz [ 1702.239284][T25464] usb 8-1: config 0 descriptor?? [ 1702.379383][T27324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.458066][T27410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1702.484178][T27410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1702.505212][T25464] usb 8-1: Can not set alternate setting to 1, error: -71 [ 1702.512453][T25464] synaptics_usb 8-1:0.52: probe with driver synaptics_usb failed with error -71 [ 1702.526729][T25464] usb 8-1: USB disconnect, device number 37 [ 1702.526829][T27324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.704773][T27324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.824007][ T5868] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1703.214101][ T5868] usb 7-1: Using ep0 maxpacket: 8 [ 1703.241910][ T5868] usb 7-1: config 5 has an invalid interface number: 72 but max is 0 [ 1703.295488][ T5868] usb 7-1: config 5 has no interface number 0 [ 1703.340860][ T5868] usb 7-1: config 5 interface 72 has no altsetting 0 [ 1703.352069][ T5868] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 1703.362385][ T5868] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.372924][ T5868] usb 7-1: Product: syz [ 1703.377575][ T5868] usb 7-1: Manufacturer: syz [ 1703.382437][ T5868] usb 7-1: SerialNumber: syz [ 1703.440833][T27324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1703.451544][T27324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1703.461742][T27324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1703.475129][T27324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1703.611409][ T5868] ftdi_sio 7-1:5.72: FTDI USB Serial Device converter detected [ 1703.651503][ T5868] usb 7-1: Detected FT4232H [ 1703.669617][ T5868] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1703.702327][ T29] audit: type=1400 audit(2000000475.459:3024): avc: denied { bind } for pid=27429 comm="syz.3.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1703.752227][ T5868] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1703.775052][ T5868] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1703.799552][ T29] audit: type=1400 audit(2000000475.559:3025): avc: denied { write } for pid=27429 comm="syz.3.6012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1703.810834][T27324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.837312][ T5868] usb 7-1: USB disconnect, device number 42 [ 1703.864528][ T5868] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1703.933435][T27324] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.975668][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.982818][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1704.032634][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1704.039791][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.048470][ T5868] ftdi_sio 7-1:5.72: device disconnected [ 1704.053572][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6015'. [ 1704.083986][T27441] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6015'. [ 1704.107684][T27441] gretap0: entered promiscuous mode [ 1704.118114][T27441] batadv_slave_1: entered promiscuous mode [ 1704.720073][T27324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1705.539818][T27324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1707.378906][T27481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6024'. [ 1707.601811][T27486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6025'. [ 1707.611783][T16805] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1707.652231][T27486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6025'. [ 1707.683420][T27486] gretap0: entered promiscuous mode [ 1707.779490][T27486] batadv_slave_1: entered promiscuous mode [ 1707.786632][T27486] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1707.802204][T27486] Cannot create hsr debugfs directory [ 1707.928143][T27324] veth0_vlan: entered promiscuous mode [ 1707.984002][T16805] usb 8-1: Using ep0 maxpacket: 16 [ 1707.995736][T16805] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1708.005941][T16805] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1708.017639][T27324] veth1_vlan: entered promiscuous mode [ 1708.025374][T16805] usb 8-1: Product: syz [ 1708.031694][T16805] usb 8-1: Manufacturer: syz [ 1708.054354][T16805] usb 8-1: SerialNumber: syz [ 1708.084373][T16805] usb 8-1: config 0 descriptor?? [ 1709.674713][T27324] veth0_macvtap: entered promiscuous mode [ 1709.707762][T27324] veth1_macvtap: entered promiscuous mode [ 1709.769186][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.825715][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.840646][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.852201][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.862790][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.873785][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.884298][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.898717][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.909382][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.920321][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.941234][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1709.962143][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1709.983975][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.011207][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.021707][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.033599][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.043942][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1710.055059][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.086609][T27324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.531689][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.590045][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.630111][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.657901][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1710.716117][T16805] usb 8-1: USB disconnect, device number 38 [ 1710.767451][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1710.814374][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.043961][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.055843][T27507] x_tables: duplicate underflow at hook 1 [ 1711.072247][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.082276][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.094494][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.104527][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.115170][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.125255][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.085449][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.095365][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.105861][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.106806][T27528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=27528 comm=syz.6.6035 [ 1712.115755][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.115779][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.115803][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.115818][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.115837][T27324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.115852][T27324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.116847][T27324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.184753][T25464] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1712.580428][T27520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.595049][T27324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.604577][T27324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.613305][T27324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.622844][T27324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.698282][T16633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.705519][T16633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.713075][T25739] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1712.734996][T25464] usb 4-1: device descriptor read/64, error -71 [ 1712.956924][T25739] usb 8-1: Using ep0 maxpacket: 16 [ 1712.970256][T25739] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1712.980961][T27532] overlayfs: failed to clone upperpath [ 1712.996190][T25739] usb 8-1: config index 0 descriptor too short (expected 8210, got 18) [ 1713.085437][T25464] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1713.512043][T25739] usb 8-1: config 123 interface 0 has no altsetting 0 [ 1713.570916][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.593856][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.615014][ T5872] IPVS: starting estimator thread 0... [ 1713.647435][ T8288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.656283][ T8288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.672521][T25739] usb 8-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 1713.681815][T25739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.692074][T25739] usb 8-1: Product: ᠁ [ 1713.696505][T25739] usb 8-1: Manufacturer: ѕ [ 1713.701051][T25739] usb 8-1: SerialNumber: ᫎ뢝맭߅ﶎ瀆ቓ꩗另铿峷⁠צ鰇좸仳ᇁꑣ䓐赘锤棡釞衭惜࢟㕝妼솺暥랕簲纯埪軇彝햁蘭㓏椄줸㤃ⱴɌ摽镽㔙籮즆裸ꖦ呱観뱣Ⲇਚᙅ먵뾑툋ﳯ⃱㯚靧␛疡딧뀃䧐耭㲛㩝뀏喠볞㜄쫄嫌⿊읉靖ꐆ踠熳伶鍌엏졤黦⿑딘ႄ艺鲶 [ 1713.775894][T27539] IPVS: using max 28 ests per chain, 67200 per kthread [ 1714.473556][T27548] dccp_v6_rcv: dropped packet with invalid checksum [ 1716.156907][T25739] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 1716.219344][T25739] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1716.409045][T25739] dib0700: firmware download failed at 7 with -22 [ 1716.419916][T25739] usb 8-1: USB disconnect, device number 39 [ 1716.504412][T27573] 9pnet_fd: Insufficient options for proto=fd [ 1717.408487][T27582] nvme_fabrics: unknown parameter or missing value '0)fzH$' in ctrl creation request [ 1717.538398][T27586] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1717.565158][T27589] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1717.568852][T27586] netlink: 'syz.6.6052': attribute type 7 has an invalid length. [ 1717.714824][T27586] netlink: 'syz.6.6052': attribute type 8 has an invalid length. [ 1717.826237][T27586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6052'. [ 1718.745531][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1718.776190][T27603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.806522][T27603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.846597][T27606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1718.923113][T27603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.935295][T27603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1719.643913][T27617] affs: No valid root block on device nullb0 [ 1719.684520][T25739] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1720.273960][T25739] usb 8-1: Using ep0 maxpacket: 16 [ 1720.286132][T25739] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1720.508377][T25739] usb 8-1: config index 0 descriptor too short (expected 8210, got 18) [ 1720.991162][T25739] usb 8-1: config 123 interface 0 has no altsetting 0 [ 1721.086235][T25739] usb 8-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 1721.095913][T25739] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.116630][T25739] usb 8-1: Product: ᠁ [ 1721.120832][T25739] usb 8-1: Manufacturer: ѕ [ 1721.125466][T25739] usb 8-1: SerialNumber: ᫎ뢝맭߅ﶎ瀆ቓ꩗另铿峷⁠צ鰇좸仳ᇁꑣ䓐赘锤棡釞衭惜࢟㕝妼솺暥랕簲纯埪軇彝햁蘭㓏椄줸㤃ⱴɌ摽镽㔙籮즆裸ꖦ呱観뱣Ⲇਚᙅ먵뾑툋ﳯ⃱㯚靧␛疡딧뀃䧐耭㲛㩝뀏喠볞㜄쫄嫌⿊읉靖ꐆ踠熳伶鍌엏졤黦⿑딘ႄ艺鲶 [ 1721.217580][ T29] audit: type=1400 audit(2000000492.969:3026): avc: denied { accept } for pid=27629 comm="syz.6.6062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1721.255690][T27630] Invalid ELF header type: 2 != 1 [ 1721.281150][ T29] audit: type=1400 audit(2000000493.019:3027): avc: denied { module_load } for pid=27629 comm="syz.6.6062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1721.377479][T27636] input: syz1 as /devices/virtual/input/input79 [ 1721.704175][T25739] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 1721.892757][T25739] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1721.901017][T25739] dib0700: firmware download failed at 7 with -22 [ 1721.912246][T25739] usb 8-1: USB disconnect, device number 40 [ 1721.973744][T27654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1722.082860][T27654] netlink: 'syz.4.6070': attribute type 7 has an invalid length. [ 1722.181413][T27654] netlink: 'syz.4.6070': attribute type 8 has an invalid length. [ 1722.285605][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6070'. [ 1722.769707][T27662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.776958][T27662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.583141][T27675] Invalid ELF header type: 2 != 1 [ 1723.834992][T25464] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1723.915336][T27688] overlayfs: missing 'lowerdir' [ 1724.134339][T25464] usb 7-1: device descriptor read/64, error -71 [ 1724.395803][T25464] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1724.611423][T25464] usb 7-1: device descriptor read/64, error -71 [ 1724.827744][T25464] usb usb7-port1: attempt power cycle [ 1724.994156][T18468] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1725.175637][T25464] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1725.225530][T25464] usb 7-1: device descriptor read/8, error -71 [ 1725.274269][T18468] usb 5-1: Using ep0 maxpacket: 16 [ 1725.344085][T18468] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1725.363991][T18468] usb 5-1: config index 0 descriptor too short (expected 8210, got 18) [ 1725.372293][T18468] usb 5-1: config 123 interface 0 has no altsetting 0 [ 1725.589747][T18468] usb 5-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=71.bd [ 1725.646026][T18468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.654159][T18468] usb 5-1: Product: ᠁ [ 1725.655312][T25464] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1725.658318][T18468] usb 5-1: Manufacturer: ѕ [ 1725.658340][T18468] usb 5-1: SerialNumber: ᫎ뢝맭߅ﶎ瀆ቓ꩗另铿峷⁠צ鰇좸仳ᇁꑣ䓐赘锤棡釞衭惜࢟㕝妼솺暥랕簲纯埪軇彝햁蘭㓏椄줸㤃ⱴɌ摽镽㔙籮즆裸ꖦ呱観뱣Ⲇਚᙅ먵뾑툋ﳯ⃱㯚靧␛疡딧뀃䧐耭㲛㩝뀏喠볞㜄쫄嫌⿊읉靖ꐆ踠熳伶鍌엏졤黦⿑딘ႄ艺鲶 [ 1725.694650][T25464] usb 7-1: device descriptor read/8, error -71 [ 1726.303217][T25464] usb usb7-port1: unable to enumerate USB device [ 1726.506464][T18468] dvb-usb: found a 'Leadtek Winfast DTV Dongle (STK7700P based)' in cold state, will try to load a firmware [ 1726.524792][T18468] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1726.542081][T18468] dib0700: firmware download failed at 7 with -22 [ 1727.041870][T18468] usb 5-1: USB disconnect, device number 118 [ 1727.611745][T27720] Invalid ELF header type: 2 != 1 [ 1728.002846][T27733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6090'. [ 1729.751045][T27750] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1730.328770][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.336484][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.994241][T25739] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1732.378774][T25739] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1732.391770][T25739] usb 7-1: config 0 has no interface number 0 [ 1732.398374][T25739] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1732.412117][T25739] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1732.424708][T25739] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1732.438680][T25739] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 1732.487698][T25739] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1732.547534][T25739] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1732.571760][T25739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.618183][T25739] usb 7-1: config 0 descriptor?? [ 1732.638077][T27777] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1732.666463][T25739] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1732.733446][ T29] audit: type=1401 audit(2000000504.489:3028): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1732.938315][T27791] FAULT_INJECTION: forcing a failure. [ 1732.938315][T27791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1732.965072][T27791] CPU: 0 UID: 0 PID: 27791 Comm: syz.4.6110 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1732.975870][T27791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1732.985905][T27791] Call Trace: [ 1732.989163][T27791] [ 1732.992075][T27791] dump_stack_lvl+0x16c/0x1f0 [ 1732.996736][T27791] should_fail_ex+0x497/0x5b0 [ 1733.001408][T27791] _copy_from_user+0x2e/0xd0 [ 1733.005982][T27791] __io_uring_register+0x16e4/0x2290 [ 1733.011242][T27791] ? trace_contention_end+0xee/0x140 [ 1733.016515][T27791] ? __pfx___io_uring_register+0x10/0x10 [ 1733.022123][T27791] ? __mutex_lock+0x1cc/0xa60 [ 1733.026800][T27791] ? __x64_sys_io_uring_register+0x168/0x2b0 [ 1733.032759][T27791] ? __pfx_lock_release+0x10/0x10 [ 1733.037760][T27791] ? __pfx___mutex_lock+0x10/0x10 [ 1733.042768][T27791] ? __fget_files+0x40/0x3a0 [ 1733.047339][T27791] ? __fget_files+0x206/0x3a0 [ 1733.051999][T27791] __x64_sys_io_uring_register+0x17a/0x2b0 [ 1733.057783][T27791] do_syscall_64+0xcd/0x250 [ 1733.062267][T27791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.068151][T27791] RIP: 0033:0x7f759c585d29 [ 1733.072548][T27791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1733.092143][T27791] RSP: 002b:00007f759d470038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 1733.100547][T27791] RAX: ffffffffffffffda RBX: 00007f759c775fa0 RCX: 00007f759c585d29 [ 1733.108514][T27791] RDX: 00000000200023c0 RSI: 0000000000000011 RDI: 0000000000000003 [ 1733.116468][T27791] RBP: 00007f759d470090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.124440][T27791] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1733.132451][T27791] R13: 0000000000000000 R14: 00007f759c775fa0 R15: 00007fffeb356778 [ 1733.140425][T27791] [ 1737.794606][ T2144] usb 7-1: USB disconnect, device number 47 [ 1737.803369][ T2144] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1738.179425][T27815] fuse: Bad value for 'fd' [ 1738.326924][T27821] sd 0:0:1:0: PR command failed: 1026 [ 1738.327378][ T29] audit: type=1400 audit(2000000510.089:3029): avc: denied { ioctl } for pid=27817 comm="syz.6.6116" path="/33/file0/file0" dev="fuse" ino=0 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1738.373276][T27821] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1738.397960][T27821] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1740.454998][T17928] Bluetooth: hci6: link tx timeout [ 1740.460937][T17928] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1743.034888][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 1746.307980][T27915] netlink: 'syz.4.6139': attribute type 2 has an invalid length. [ 1746.764038][ T2144] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1746.925740][ T2144] usb 7-1: Using ep0 maxpacket: 16 [ 1746.949775][ T2144] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1746.969304][ T2144] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1746.999043][ T2144] usb 7-1: Product: syz [ 1747.015682][ T2144] usb 7-1: Manufacturer: syz [ 1747.033875][ T2144] usb 7-1: SerialNumber: syz [ 1747.047663][ T2144] usb 7-1: config 0 descriptor?? [ 1747.305544][T25464] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1748.499334][T27931] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1748.508996][T25464] usb 8-1: Using ep0 maxpacket: 8 [ 1749.141489][T25464] usb 8-1: config 2 has an invalid interface number: 96 but max is 0 [ 1749.150598][T25464] usb 8-1: config 2 has no interface number 0 [ 1749.158354][T25464] usb 8-1: config 2 interface 96 altsetting 250 has an endpoint descriptor with address 0x1E, changing to 0xE [ 1749.170993][T25464] usb 8-1: config 2 interface 96 altsetting 250 endpoint 0xE has invalid maxpacket 4988, setting to 64 [ 1749.183097][T25464] usb 8-1: config 2 interface 96 altsetting 250 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1749.195253][T25464] usb 8-1: config 2 interface 96 altsetting 250 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1749.209372][T25464] usb 8-1: config 2 interface 96 has no altsetting 0 [ 1749.315866][T25464] usb 8-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=fb.b4 [ 1749.325980][T25464] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.334462][T25464] usb 8-1: Product: syz [ 1749.338901][T25464] usb 8-1: Manufacturer: syz [ 1749.343749][T25464] usb 8-1: SerialNumber: syz [ 1749.651022][ T5872] usb 7-1: USB disconnect, device number 48 [ 1749.665868][T25464] flexcop_usb: set interface failed. [ 1749.671240][T25464] b2c2_flexcop_usb 8-1:2.96: probe with driver b2c2_flexcop_usb failed with error -22 [ 1749.678062][T27945] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1749.691599][T25464] usb 8-1: USB disconnect, device number 41 [ 1749.894770][T25739] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1750.218985][T27954] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1750.576619][T25739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 226, changing to 11 [ 1750.587930][T25739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.597836][T25739] usb 4-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1750.606962][T25739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.615250][ T2144] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1750.686059][T25739] usb 4-1: config 0 descriptor?? [ 1750.798101][ T29] audit: type=1326 audit(2000000522.559:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27958 comm="syz.6.6154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e35585d29 code=0x0 [ 1750.824157][ T2144] usb 5-1: Using ep0 maxpacket: 32 [ 1750.880576][ T2144] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1750.894554][ T2144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.902677][ T2144] usb 5-1: Product: syz [ 1750.906964][ T2144] usb 5-1: Manufacturer: syz [ 1750.911594][ T2144] usb 5-1: SerialNumber: syz [ 1750.923748][ T2144] usb 5-1: config 0 descriptor?? [ 1750.955246][T27961] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6154'. [ 1751.095604][T27941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1751.104357][T27941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1751.140477][ T2144] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1751.149716][ T2144] eb 9a 47 80 9b f8 7a f0 [ 1751.154406][ T2144] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 1751.391312][T25464] usb 5-1: USB disconnect, device number 119 [ 1751.765392][T27922] syz.7.6143 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1751.862324][T27922] CPU: 0 UID: 0 PID: 27922 Comm: syz.7.6143 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1751.873134][T27922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1751.883206][T27922] Call Trace: [ 1751.886494][T27922] [ 1751.889433][T27922] dump_stack_lvl+0x16c/0x1f0 [ 1751.894131][T27922] dump_header+0x101/0x900 [ 1751.898562][T27922] oom_kill_process+0x270/0xa60 [ 1751.903420][T27922] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 1751.909085][T27922] out_of_memory+0x351/0x1700 [ 1751.913792][T27922] ? __pfx_out_of_memory+0x10/0x10 [ 1751.918909][T27922] ? rcu_read_unlock+0x17/0x60 [ 1751.923687][T27922] ? find_held_lock+0x2d/0x110 [ 1751.928474][T27922] mem_cgroup_out_of_memory+0x207/0x270 [ 1751.934050][T27922] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1751.940111][T27922] ? do_raw_spin_unlock+0x172/0x230 [ 1751.945313][T27922] try_charge_memcg+0x54c/0xaf0 [ 1751.950179][T27922] ? __pfx_try_charge_memcg+0x10/0x10 [ 1751.955546][T27922] ? __pfx_lock_release+0x10/0x10 [ 1751.960590][T27922] ? trace_lock_acquire+0x14e/0x1f0 [ 1751.965816][T27922] mem_cgroup_swapin_charge_folio+0x14c/0x380 [ 1751.971907][T27922] __read_swap_cache_async+0x436/0x660 [ 1751.977382][T27922] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1751.983370][T27922] ? swp_swap_info+0xcf/0x130 [ 1751.988064][T27922] ? __pfx_swp_swap_info+0x10/0x10 [ 1751.993186][T27922] ? hlock_class+0x4e/0x130 [ 1751.997705][T27922] ? __lock_acquire+0x15a9/0x3c40 [ 1752.002748][T27922] swap_cluster_readahead+0x3ec/0x740 [ 1752.008138][T27922] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1752.014042][T27922] ? filemap_get_entry+0x1a8/0x3c0 [ 1752.019176][T27922] ? get_vma_policy+0x248/0x3c0 [ 1752.024042][T27922] swapin_readahead+0x12c/0xd60 [ 1752.028912][T27922] ? get_swap_device+0x362/0x5e0 [ 1752.033865][T27922] ? __pfx_swapin_readahead+0x10/0x10 [ 1752.039254][T27922] ? __filemap_get_folio+0x2a5/0xaf0 [ 1752.044558][T27922] ? swap_cache_get_folio+0x1e0/0x460 [ 1752.049947][T27922] ? get_swap_device+0x245/0x5e0 [ 1752.054909][T27922] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1752.060641][T27922] ? __pfx___lock_acquire+0x10/0x10 [ 1752.065867][T27922] do_swap_page+0x680/0x5970 [ 1752.070482][T27922] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1752.076148][T27922] ? rcu_is_watching+0x12/0xc0 [ 1752.080936][T27922] ? trace_lock_acquire+0x14e/0x1f0 [ 1752.086151][T27922] ? __pfx_do_swap_page+0x10/0x10 [ 1752.091190][T27922] ? lock_acquire+0x2f/0xb0 [ 1752.095706][T27922] ? __pte_offset_map+0x42/0x540 [ 1752.100664][T27922] ? __pfx_default_wake_function+0x10/0x10 [ 1752.106485][T27922] ? __pte_offset_map+0x1b9/0x540 [ 1752.111543][T27922] __handle_mm_fault+0x1055/0x2a40 [ 1752.116686][T27922] ? lock_vma_under_rcu+0x6b9/0x980 [ 1752.121900][T27922] ? __pfx___handle_mm_fault+0x10/0x10 [ 1752.127390][T27922] ? __pfx_get_timespec64+0x10/0x10 [ 1752.132612][T27922] handle_mm_fault+0x3fa/0xaa0 [ 1752.137402][T27922] do_user_addr_fault+0x60d/0x13f0 [ 1752.142540][T27922] exc_page_fault+0x5c/0xc0 [ 1752.147065][T27922] asm_exc_page_fault+0x26/0x30 [ 1752.151939][T27922] RIP: 0033:0x7f1679c5cb1c [ 1752.156371][T27922] Code: 66 0f 1f 44 00 00 69 3d 96 8b e4 00 e8 03 00 00 48 8d 1d 97 94 31 00 e8 72 91 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 1752.175997][T27922] RSP: 002b:00007ffdae5cc930 EFLAGS: 00010206 [ 1752.182093][T27922] RAX: 0000000000000000 RBX: 00007f1679f75fa0 RCX: 0000000000000000 [ 1752.190083][T27922] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055559135f808 [ 1752.198101][T27922] RBP: 00007f1679f77ba0 R08: 0000000000000000 R09: 00007f167aac8000 [ 1752.206091][T27922] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000001ac270 [ 1752.214089][T27922] R13: 00007f1679f76080 R14: 0000000000000032 R15: ffffffffffffffff [ 1752.222099][T27922] [ 1752.241262][T27922] memory: usage 307200kB, limit 307200kB, failcnt 103 [ 1752.309549][T25739] usbhid 4-1:0.0: can't add hid device: -71 [ 1752.321712][T25739] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1752.390359][T25739] usb 4-1: USB disconnect, device number 27 [ 1752.628568][T27922] memory+swap: usage 307444kB, limit 9007199254740988kB, failcnt 0 [ 1752.703989][T27922] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 1752.778314][T27922] Memory cgroup stats for /syz7: [ 1752.778803][T27922] cache 0 [ 1752.832912][T27922] rss 0 [ 1752.836638][T27922] rss_huge 0 [ 1752.839840][T27922] shmem 0 [ 1752.842775][T27922] mapped_file 0 [ 1752.847152][T27922] dirty 0 [ 1752.850093][T27922] writeback 0 [ 1752.853377][T27922] workingset_refault_anon 61 [ 1752.877406][T27922] workingset_refault_file 0 [ 1752.881954][T27922] swap 249856 [ 1752.973983][T27922] swapcached 0 [ 1752.977394][T27922] pgpgin 206738 [ 1752.980852][T27922] pgpgout 206738 [ 1753.014035][T27922] pgfault 215108 [ 1753.017622][T27922] pgmajfault 55 [ 1753.021090][T27922] inactive_anon 0 [ 1753.033926][T27922] active_anon 0 [ 1753.037428][T27922] inactive_file 0 [ 1753.041066][T27922] active_file 0 [ 1753.053900][T27922] unevictable 0 [ 1753.057391][T27922] hierarchical_memory_limit 314572800 [ 1753.062766][T27922] hierarchical_memsw_limit 9223372036854771712 [ 1753.083881][T27922] total_cache 0 [ 1753.087374][T27922] total_rss 0 [ 1753.090657][T27922] total_rss_huge 0 [ 1753.103955][T27922] total_shmem 0 [ 1753.107447][T27922] total_mapped_file 0 [ 1753.111426][T27922] total_dirty 0 [ 1753.124058][T27922] total_writeback 0 [ 1753.127902][T27922] total_workingset_refault_anon 61 [ 1753.133028][T27922] total_workingset_refault_file 0 [ 1753.153941][T27922] total_swap 249856 [ 1753.157787][T27922] total_swapcached 0 [ 1753.161680][T27922] total_pgpgin 206738 [ 1753.183954][T27922] total_pgpgout 206738 [ 1753.188061][T27922] total_pgfault 215108 [ 1753.192132][T27922] total_pgmajfault 55 [ 1753.203993][T27922] total_inactive_anon 0 [ 1753.208185][T27922] total_active_anon 0 [ 1753.212174][T27922] total_inactive_file 0 [ 1753.233875][T27922] total_active_file 0 [ 1753.239288][T27922] total_unevictable 0 [ 1753.243298][T27922] anon_cost 0 [ 1753.255012][T27922] file_cost 0 [ 1753.258338][T27922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.6143,pid=27922,uid=0 [ 1753.296724][T27922] Memory cgroup out of memory: Killed process 27922 (syz.7.6143) total-vm:103892kB, anon-rss:768kB, file-rss:23444kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1755.006034][T27982] bond0: entered promiscuous mode [ 1755.011070][T27982] bond_slave_0: entered promiscuous mode [ 1755.016924][T27982] bond_slave_1: entered promiscuous mode [ 1755.368200][T18468] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1756.534292][T18468] usb 8-1: device descriptor read/64, error -71 [ 1758.448319][T18468] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1758.536993][T28014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1759.113954][T18468] usb 8-1: device descriptor read/64, error -71 [ 1759.247329][T18468] usb usb8-port1: attempt power cycle [ 1759.684253][T18468] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1759.715640][T18468] usb 8-1: device descriptor read/8, error -71 [ 1760.114516][T18468] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1760.226553][T18468] usb 8-1: device descriptor read/8, error -71 [ 1760.493286][T18468] usb usb8-port1: unable to enumerate USB device [ 1763.829299][T28066] netlink: 88 bytes leftover after parsing attributes in process `syz.7.6179'. [ 1766.515458][T28084] fuse: Unknown parameter '0x0000000000000004' [ 1766.647998][T28088] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6184'. [ 1767.204196][ T2144] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1767.373985][ T2144] usb 4-1: Using ep0 maxpacket: 16 [ 1767.631010][ T2144] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1767.644035][ T2144] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1767.663061][ T2144] usb 4-1: Product: syz [ 1767.670099][ T2144] usb 4-1: Manufacturer: syz [ 1767.688763][ T2144] usb 4-1: SerialNumber: syz [ 1767.708370][ T2144] usb 4-1: config 0 descriptor?? [ 1769.318693][T14926] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1770.068724][T14926] usb 7-1: Using ep0 maxpacket: 16 [ 1770.083343][T14926] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1770.093383][T14926] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1770.159028][T14926] usb 7-1: Product: syz [ 1770.256412][T14926] usb 7-1: Manufacturer: syz [ 1770.286670][T14926] usb 7-1: SerialNumber: syz [ 1770.570018][T14926] usb 7-1: config 0 descriptor?? [ 1770.732013][T28121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6195'. [ 1770.760641][T28121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 1770.807362][T28123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6196'. [ 1770.833520][ T2144] usb 7-1: USB disconnect, device number 49 [ 1771.835417][T18468] usb 4-1: USB disconnect, device number 28 [ 1771.840727][T28133] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6198'. [ 1773.226364][T28135] netlink: 39 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1773.236686][T28135] netlink: 39 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1773.378754][ T29] audit: type=1400 audit(2000000545.139:3031): avc: denied { setopt } for pid=28140 comm="syz.6.6202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1773.467117][T28151] Invalid ELF header type: 2 != 1 [ 1774.536551][T28175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6212'. [ 1775.998223][T28200] Invalid ELF header type: 2 != 1 [ 1777.605476][T28220] binder: BINDER_SET_CONTEXT_MGR already set [ 1777.611675][T28220] binder: 28219:28220 ioctl 4018620d 20000100 returned -16 [ 1777.619755][T28220] binder: 28219:28220 ioctl 4008ae89 200000c0 returned -22 [ 1777.619790][T28223] binder: 28219:28223 ioctl 4008ae89 200000c0 returned -22 [ 1777.845499][T28216] batadv_slave_1: entered promiscuous mode [ 1777.870751][T28227] batadv_slave_1: left promiscuous mode [ 1779.241081][T28256] Invalid ELF header type: 2 != 1 [ 1781.342276][T28282] netlink: 'syz.6.6239': attribute type 1 has an invalid length. [ 1782.224048][T25739] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1782.232077][T28307] Invalid ELF header type: 2 != 1 [ 1782.384583][T25739] usb 7-1: Using ep0 maxpacket: 16 [ 1782.665284][T25739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.750929][T25739] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.769767][T25739] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1782.791089][T25739] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1782.801402][T25739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.885588][T25739] usb 7-1: config 0 descriptor?? [ 1783.234953][T28324] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1783.241604][T28324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1783.296746][T28324] vhci_hcd vhci_hcd.0: Device attached [ 1783.338582][T28325] vhci_hcd: connection closed [ 1783.338807][ T12] vhci_hcd: stop threads [ 1783.351702][ T12] vhci_hcd: release socket [ 1783.363889][ T12] vhci_hcd: disconnect device [ 1783.390295][T25739] input: HID 0955:7214 Haptics as /devices/virtual/input/input80 [ 1783.408641][T25739] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 1783.437360][T25739] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1783.574987][T17928] Bluetooth: hci4: command 0x0406 tx timeout [ 1783.672034][T25739] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1783.672321][ T5873] usb 7-1: USB disconnect, device number 50 [ 1783.683294][T25739] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1783.683380][T25739] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1783.846683][T25739] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1786.722477][T28362] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1787.575355][ T5825] Bluetooth: hci6: command 0x0406 tx timeout [ 1788.271281][T28394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=28394 comm=syz.3.6268 [ 1788.442477][T28399] CIFS mount error: No usable UNC path provided in device string! [ 1788.442477][T28399] [ 1788.461069][T28399] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1788.550489][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1788.865008][T28412] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1789.514654][T28419] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1789.551357][T28419] bridge0: entered allmulticast mode [ 1791.177787][T17928] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 1791.596570][T28439] 9pnet_fd: Insufficient options for proto=fd [ 1792.092545][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.099272][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.052777][ T29] audit: type=1400 audit(2000000564.699:3032): avc: denied { map } for pid=28447 comm="syz.4.6283" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1793.753492][T28456] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1793.894988][T25464] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1794.054117][T25464] usb 5-1: Using ep0 maxpacket: 16 [ 1794.062527][T25464] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1795.021432][T25464] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1795.031700][T25464] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1795.041462][T25464] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1795.051328][T25464] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1795.062094][T25464] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1795.069650][T25464] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1795.173905][T28467] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1795.179213][T25464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.216843][T25464] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 1796.269431][T28477] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6287'. [ 1796.312381][T25464] scsi host1: usb-storage 5-1:1.0 [ 1797.654674][ T29] audit: type=1400 audit(2000000568.629:3033): avc: denied { write } for pid=28476 comm="syz.7.6287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1797.786880][T27981] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1797.788253][ T5868] usb 5-1: USB disconnect, device number 120 [ 1797.933000][T27981] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 1797.968860][ T8284] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1798.028199][ T8284] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1798.091523][ T8284] sd 1:0:0:0: [sdb] Sense not available. [ 1798.298740][ T8284] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1798.319368][ T8284] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1798.349265][ T8284] sd 1:0:0:0: [sdb] Write Protect is off [ 1798.370724][ T8284] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1798.384846][ T8284] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1798.504053][ T8284] [ 1798.506418][ T8284] ====================================================== [ 1798.513431][ T8284] WARNING: possible circular locking dependency detected [ 1798.520469][ T8284] 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 Not tainted [ 1798.527577][ T8284] ------------------------------------------------------ [ 1798.534589][ T8284] kworker/u8:14/8284 is trying to acquire lock: [ 1798.540821][ T8284] ffff888028f943c8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_mq_init_sched+0x42b/0x640 [ 1798.550423][ T8284] [ 1798.550423][ T8284] but task is already holding lock: [ 1798.557789][ T8284] ffff888028f93b90 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1798.568342][ T8284] [ 1798.568342][ T8284] which lock already depends on the new lock. [ 1798.568342][ T8284] [ 1798.578827][ T8284] [ 1798.578827][ T8284] the existing dependency chain (in reverse order) is: [ 1798.587842][ T8284] [ 1798.587842][ T8284] -> #5 (&q->q_usage_counter(queue)#52){++++}-{0:0}: [ 1798.596816][ T8284] blk_queue_enter+0x50f/0x640 [ 1798.602152][ T8284] blk_mq_alloc_request+0x59b/0x950 [ 1798.607893][ T8284] scsi_execute_cmd+0x1eb/0xf40 [ 1798.613373][ T8284] read_capacity_10+0x1d4/0x6d0 [ 1798.618764][ T8284] sd_revalidate_disk.isra.0+0x3145/0xa8d0 [ 1798.625115][ T8284] sd_probe+0x904/0x1000 [ 1798.629904][ T8284] really_probe+0x23e/0xa90 [ 1798.634933][ T8284] __driver_probe_device+0x1de/0x440 [ 1798.640756][ T8284] driver_probe_device+0x4c/0x1b0 [ 1798.646308][ T8284] __device_attach_driver+0x1df/0x310 [ 1798.652208][ T8284] bus_for_each_drv+0x157/0x1e0 [ 1798.657580][ T8284] __device_attach_async_helper+0x1d3/0x290 [ 1798.664005][ T8284] async_run_entry_fn+0x9c/0x530 [ 1798.669475][ T8284] process_one_work+0x9c5/0x1ba0 [ 1798.674939][ T8284] worker_thread+0x6c8/0xf00 [ 1798.680055][ T8284] kthread+0x2c1/0x3a0 [ 1798.684643][ T8284] ret_from_fork+0x45/0x80 [ 1798.689596][ T8284] ret_from_fork_asm+0x1a/0x30 [ 1798.694900][ T8284] [ 1798.694900][ T8284] -> #4 (&q->limits_lock){+.+.}-{4:4}: [ 1798.702726][ T8284] __mutex_lock+0x19b/0xa60 [ 1798.707766][ T8284] loop_reconfigure_limits+0x407/0x8c0 [ 1798.713843][ T8284] lo_ioctl+0x901/0x18b0 [ 1798.718795][ T8284] blkdev_ioctl+0x276/0x6d0 [ 1798.723837][ T8284] __x64_sys_ioctl+0x190/0x200 [ 1798.729144][ T8284] do_syscall_64+0xcd/0x250 [ 1798.734182][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.740609][ T8284] [ 1798.740609][ T8284] -> #3 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1798.749332][ T8284] blk_mq_submit_bio+0x1fb6/0x24c0 [ 1798.754975][ T8284] __submit_bio+0x384/0x540 [ 1798.760004][ T8284] submit_bio_noacct_nocheck+0x698/0xd70 [ 1798.766167][ T8284] submit_bio_noacct+0x93a/0x1e20 [ 1798.771719][ T8284] mpage_readahead+0x41d/0x590 [ 1798.777010][ T8284] read_pages+0x1a8/0xdc0 [ 1798.781870][ T8284] page_cache_ra_unbounded+0x3dc/0x750 [ 1798.787864][ T8284] force_page_cache_ra+0x24b/0x340 [ 1798.793519][ T8284] page_cache_sync_ra+0x110/0x9c0 [ 1798.799155][ T8284] filemap_get_pages+0xd7b/0x1be0 [ 1798.804705][ T8284] filemap_read+0x3ca/0xd70 [ 1798.809737][ T8284] blkdev_read_iter+0x187/0x480 [ 1798.815093][ T8284] vfs_read+0x87f/0xbe0 [ 1798.819746][ T8284] ksys_read+0x12b/0x250 [ 1798.824494][ T8284] do_syscall_64+0xcd/0x250 [ 1798.829695][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.836097][ T8284] [ 1798.836097][ T8284] -> #2 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 1798.844612][ T8284] down_read+0x9a/0x330 [ 1798.849306][ T8284] filemap_fault+0x2e0/0x2820 [ 1798.854516][ T8284] __do_fault+0x10a/0x490 [ 1798.859642][ T8284] do_pte_missing+0x1a8/0x3e00 [ 1798.864935][ T8284] __handle_mm_fault+0x103c/0x2a40 [ 1798.870583][ T8284] handle_mm_fault+0x3fa/0xaa0 [ 1798.875887][ T8284] __get_user_pages+0x8d9/0x3b50 [ 1798.881352][ T8284] faultin_page_range+0x24a/0x980 [ 1798.886905][ T8284] do_madvise+0x504/0x770 [ 1798.891846][ T8284] __x64_sys_madvise+0xa9/0x110 [ 1798.897307][ T8284] do_syscall_64+0xcd/0x250 [ 1798.902431][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.908874][ T8284] [ 1798.908874][ T8284] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 1798.916916][ T8284] __might_fault+0x11b/0x190 [ 1798.922032][ T8284] _copy_from_user+0x29/0xd0 [ 1798.927155][ T8284] __blk_trace_setup+0xa8/0x180 [ 1798.932535][ T8284] blk_trace_ioctl+0x163/0x290 [ 1798.937836][ T8284] blkdev_ioctl+0x109/0x6d0 [ 1798.942890][ T8284] __x64_sys_ioctl+0x190/0x200 [ 1798.948179][ T8284] do_syscall_64+0xcd/0x250 [ 1798.953206][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.959627][ T8284] [ 1798.959627][ T8284] -> #0 (&q->debugfs_mutex){+.+.}-{4:4}: [ 1798.967449][ T8284] __lock_acquire+0x249e/0x3c40 [ 1798.972819][ T8284] lock_acquire.part.0+0x11b/0x380 [ 1798.978468][ T8284] __mutex_lock+0x19b/0xa60 [ 1798.983490][ T8284] blk_mq_init_sched+0x42b/0x640 [ 1798.988965][ T8284] elevator_init_mq+0x2cd/0x420 [ 1798.994491][ T8284] add_disk_fwnode+0x113/0x1300 [ 1798.999872][ T8284] sd_probe+0xa86/0x1000 [ 1799.004649][ T8284] really_probe+0x23e/0xa90 [ 1799.009767][ T8284] __driver_probe_device+0x1de/0x440 [ 1799.015581][ T8284] driver_probe_device+0x4c/0x1b0 [ 1799.021125][ T8284] __device_attach_driver+0x1df/0x310 [ 1799.027018][ T8284] bus_for_each_drv+0x157/0x1e0 [ 1799.032388][ T8284] __device_attach_async_helper+0x1d3/0x290 [ 1799.038811][ T8284] async_run_entry_fn+0x9c/0x530 [ 1799.044377][ T8284] process_one_work+0x9c5/0x1ba0 [ 1799.049871][ T8284] worker_thread+0x6c8/0xf00 [ 1799.055096][ T8284] kthread+0x2c1/0x3a0 [ 1799.059700][ T8284] ret_from_fork+0x45/0x80 [ 1799.064738][ T8284] ret_from_fork_asm+0x1a/0x30 [ 1799.070050][ T8284] [ 1799.070050][ T8284] other info that might help us debug this: [ 1799.070050][ T8284] [ 1799.080284][ T8284] Chain exists of: [ 1799.080284][ T8284] &q->debugfs_mutex --> &q->limits_lock --> &q->q_usage_counter(queue)#52 [ 1799.080284][ T8284] [ 1799.094734][ T8284] Possible unsafe locking scenario: [ 1799.094734][ T8284] [ 1799.102181][ T8284] CPU0 CPU1 [ 1799.107546][ T8284] ---- ---- [ 1799.112907][ T8284] lock(&q->q_usage_counter(queue)#52); [ 1799.119240][ T8284] lock(&q->limits_lock); [ 1799.128453][ T8284] lock(&q->q_usage_counter(queue)#52); [ 1799.136627][ T8284] lock(&q->debugfs_mutex); [ 1799.141304][ T8284] [ 1799.141304][ T8284] *** DEADLOCK *** [ 1799.141304][ T8284] [ 1799.149439][ T8284] 4 locks held by kworker/u8:14/8284: [ 1799.154814][ T8284] #0: ffff88801beee948 ((wq_completion)async){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1799.165627][ T8284] #1: ffffc9000d42fd80 ((work_completion)(&entry->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1799.176865][ T8284] #2: ffff88804d1fa378 (&dev->mutex){....}-{4:4}, at: __device_attach_async_helper+0x84/0x290 [ 1799.187233][ T8284] #3: ffff888028f93b90 (&q->q_usage_counter(queue)#52){++++}-{0:0}, at: add_disk_fwnode+0x113/0x1300 [ 1799.198221][ T8284] [ 1799.198221][ T8284] stack backtrace: [ 1799.204101][ T8284] CPU: 1 UID: 0 PID: 8284 Comm: kworker/u8:14 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 1799.215110][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1799.225268][ T8284] Workqueue: async async_run_entry_fn [ 1799.230668][ T8284] Call Trace: [ 1799.233947][ T8284] [ 1799.236876][ T8284] dump_stack_lvl+0x116/0x1f0 [ 1799.241558][ T8284] print_circular_bug+0x419/0x5d0 [ 1799.246587][ T8284] check_noncircular+0x31a/0x400 [ 1799.251527][ T8284] ? __pfx_check_noncircular+0x10/0x10 [ 1799.256991][ T8284] ? lockdep_lock+0xc6/0x200 [ 1799.261595][ T8284] ? __pfx_lockdep_lock+0x10/0x10 [ 1799.266625][ T8284] ? __pfx_lock_release+0x10/0x10 [ 1799.271648][ T8284] __lock_acquire+0x249e/0x3c40 [ 1799.276507][ T8284] ? __pfx___lock_acquire+0x10/0x10 [ 1799.281701][ T8284] ? hlock_class+0x4e/0x130 [ 1799.286215][ T8284] ? mark_lock+0xb5/0xc60 [ 1799.290560][ T8284] lock_acquire.part.0+0x11b/0x380 [ 1799.295685][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.300804][ T8284] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1799.306445][ T8284] ? rcu_is_watching+0x12/0xc0 [ 1799.311408][ T8284] ? trace_lock_acquire+0x14e/0x1f0 [ 1799.316624][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.321758][ T8284] ? lock_acquire+0x2f/0xb0 [ 1799.326277][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.331401][ T8284] __mutex_lock+0x19b/0xa60 [ 1799.336176][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.341298][ T8284] ? irqentry_exit+0x3b/0x90 [ 1799.345908][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.351054][ T8284] ? __pfx___mutex_lock+0x10/0x10 [ 1799.356105][ T8284] ? blk_queue_flag_set+0x2e/0x40 [ 1799.361159][ T8284] ? blk_mq_init_sched+0x42b/0x640 [ 1799.366277][ T8284] blk_mq_init_sched+0x42b/0x640 [ 1799.371239][ T8284] ? __pfx_blk_mq_init_sched+0x10/0x10 [ 1799.376755][ T8284] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 1799.382740][ T8284] ? lock_acquire+0x2f/0xb0 [ 1799.387259][ T8284] ? add_disk_fwnode+0x113/0x1300 [ 1799.392289][ T8284] elevator_init_mq+0x2cd/0x420 [ 1799.397154][ T8284] ? add_disk_fwnode+0x113/0x1300 [ 1799.402187][ T8284] add_disk_fwnode+0x113/0x1300 [ 1799.407045][ T8284] ? _raw_spin_unlock_irq+0x23/0x50 [ 1799.412248][ T8284] sd_probe+0xa86/0x1000 [ 1799.416505][ T8284] ? __pfx_sd_probe+0x10/0x10 [ 1799.421201][ T8284] really_probe+0x23e/0xa90 [ 1799.425741][ T8284] __driver_probe_device+0x1de/0x440 [ 1799.431090][ T8284] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1799.436908][ T8284] driver_probe_device+0x4c/0x1b0 [ 1799.441950][ T8284] __device_attach_driver+0x1df/0x310 [ 1799.447407][ T8284] ? __pfx___device_attach_driver+0x10/0x10 [ 1799.453328][ T8284] bus_for_each_drv+0x157/0x1e0 [ 1799.458200][ T8284] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1799.463584][ T8284] ? lockdep_hardirqs_on+0x7c/0x110 [ 1799.468794][ T8284] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1799.474613][ T8284] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1799.481032][ T8284] __device_attach_async_helper+0x1d3/0x290 [ 1799.487029][ T8284] ? __pfx___device_attach_async_helper+0x10/0x10 [ 1799.493457][ T8284] ? ktime_get+0x206/0x300 [ 1799.497966][ T8284] ? read_tsc+0x9/0x20 [ 1799.502058][ T8284] ? ktime_get+0x1ac/0x300 [ 1799.506483][ T8284] async_run_entry_fn+0x9c/0x530 [ 1799.511440][ T8284] process_one_work+0x9c5/0x1ba0 [ 1799.516407][ T8284] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1799.521814][ T8284] ? __pfx_process_one_work+0x10/0x10 [ 1799.527197][ T8284] ? rcu_is_watching+0x12/0xc0 [ 1799.531979][ T8284] ? assign_work+0x1a0/0x250 [ 1799.536607][ T8284] worker_thread+0x6c8/0xf00 [ 1799.541234][ T8284] ? __pfx_worker_thread+0x10/0x10 [ 1799.546347][ T8284] kthread+0x2c1/0x3a0 [ 1799.551375][ T8284] ? _raw_spin_unlock_irq+0x23/0x50 [ 1799.556575][ T8284] ? __pfx_kthread+0x10/0x10 [ 1799.561178][ T8284] ret_from_fork+0x45/0x80 [ 1799.565596][ T8284] ? __pfx_kthread+0x10/0x10 [ 1799.570201][ T8284] ret_from_fork_asm+0x1a/0x30 [ 1799.574984][ T8284] [ 1799.817776][ T8284] sd 1:0:0:0: [sdb] Attached SCSI removable disk