last executing test programs: 9m4.750229312s ago: executing program 2 (id=1874): syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f"], 0x0) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffa000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x3000)=nil, 0x4000) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) r4 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x0) r5 = dup(r4) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8776a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3ce6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156190975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d6172dedfa4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a8600", 0x2000, 0x0) syz_clone3(&(0x7f00000045c0)={0x129000, &(0x7f0000003440), &(0x7f0000003480)=0x0, &(0x7f00000034c0), {0x20}, 0x0, 0x0, &(0x7f0000003580)=""/4096, &(0x7f0000004580)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r9 = getpgrp(0x0) getresuid(&(0x7f0000005ac0), &(0x7f0000005b00)=0x0, &(0x7f0000005b40)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005ec0)={&(0x7f00000020c0), 0xc, &(0x7f0000005e00)=[{&(0x7f00000081c0)=ANY=[@ANYBLOB="1c110000160000022abd7000fddbdf25f2003480dc2851a180213d668e6a11991fece9be94e33760e3f4e6ef9335bb99224c018b026da2142fbfbc9cc3814efd7a2d141822f65013302c74fb9226b94e4ebc63f711c82f4f260cce21daeb0d7e7e3a7c026bf36b4050d503e29d12733925a5a5c47658d2d4d0c09d50bc88523bda339ca47a64307deb867ba76991d4cf650f124d78d9e7508986e0e9fbb98e369dd6ef0079af21f3ef2091b8ee4e963e5c56fff2284754cb138490048b23aa14a253ac370e33b38fc04c9ff6c79f445132a37b3bcb799a14bd86cd9c88b332a0e4faf651cceec8dbda61136af8b913502bf3a5ce918e3f2f361ab5b142e853d357d9000014001a00fe8000000000000000000000000000aa0410e9802fa16fdcd505ce8230cc86c16090b34133f5131e0a689f59ecc31a76f1182e18a6177ae1b2e545592393698007163b1f51a437fd713d5e5ef7feee90bc3b707fa917f0dd70f1e1072c558dbb90351ec8ba06718f7000d4f62ba239fa2f291e5cbdbdcec96ac9ba8e2cd6251db519fd6d442d38abb6ad9be86f5f66112edd3821c3a71f8d06950071ad5d814b8b63a7d39029ad61d4847ed3db9a9513f010061f92bb11dae0874b2c70403de916ade3062f9abcacc02c16e0f8c0624843efc8650d5f119e321f00a9d17913c606061045dcab00213288a382f6e3a46f797b9174803bb49826849005939099442081f1adf75f2b739a5bdd88e043b2f0484d2ae3d809dd6eaeae755bfc8d59bf750c6c6b5834844328d441dee5cc2774e2e1c5e62d6fde5a1ef4d9a47708bfbd4e024fd90609ca146134928431eec0ebc41d02c24ac5ce13d2a67792feeb560fa1d14e3521aa50406e5fcd0a59cdd5aff8f6c389da53255d782e94b72e8c862de01fbd531757df1acaf6cc28304105e4d951dd7fbc42a765c0ced09238829092852a6f5fda11f5dbf1fea7c9a1fd838e19ac3d93e00ea7e7ddd7ef723e1bea6a17d2ae1893cce0b67fa5fea4fe4511fd86676a6c586a74ef4964a77a1076abe8c4eb59593addc421b08098da9021039aa7f002c9d41348d610320253a4ead2c400316ae00abe970a9718acd85a5ea41ed5250d14580b027e20d26a103c7003fe903e15ca282a3c80e9e97aeff5104bdf8c11941f9df8197f3979a130a6c0a688874dda7ffa7d9bd1ffec8568e4a73fda720044382dda60a4e107792199d8f97636207f842588099c13b263676f1108137cf4337ed7918626453ce1fed6df8e353fac38f67eed712fc61888807b480377460f38636b923892001050efbc9ac20dfb14702f23f33f18a31f2dc89126134ccdf6a91976caee66ccd305d31e2eb814c33875f799529d18e8b1cd1b1477151a94352f6cd661954b7f3a332a7b2362c61784d4ae9991152a9de44c17d97687dac5fd0c1d01596bcbb7b1f14537126d8efd4fc392f281741d5a8f05dded39fec3d50750fd9b1b997791e2441d189747bacbb92b3caf14b8c2ab36b263d09eb946ee59a3232a3ac86fa0e9924c6809d751e69d5771cb9d1a4b08dcfc98134a2f1f0419c15bbaae15c25590f218f87eeb5f5b63ae3c97594dfb00be8f5a654bc941c46104578e03f7b84a880e60f5c8d07e1fe8608bb35bd4affa861bc6cafe537117059365665c479024a0bd00893a06517a96e83e6d35a69ac6939482dd7c86862afdd7bbf4f20611bf1ab12bb4e836b51e1c2bcbc3c70a5dc59add5ea1f3ddb00a86c14f4abfb016477c69fba79aa5f63a518947c3b67c60424b62646c80083c17f40391f041f6d6f96e77859a69080d05355ce62ef6345dc95e7a9343baa1873b3ae2a3a09a6951f44a0144f9d8a415968320e3c97cd1181d8f8643632995cd22362684a72304012753b0c2d97c877e3148b2dd00ee5b79ef39c3236d6ca37e41e8662b8414732a7e0a30a182e60f30516efacb1a52b8adda02684c779d9cc1846978064899d76ecd6acfcccb694a597fd92c2c81ca84e0a2c577047040a75d90b408fd84ccda0d299cb6c2877186dabef2848de2012d477caa08a1a7c8157852bfce1618cdda87a140b52e5ad6f3bca7a982fd44fe8e1ac32281203cbcfbb2aa519a025c4aed509aa799b43e30291d5d437c3f3cbcef772fd0fde444aa11ec0572b4f4d9fc487c71923a1efe2e8e0451882326852f5a9af5263608acadb6d604ae4ed3b11d5d0030cf3199c1fbce64bfb0327bf53eb35103c26515bc0ff2384bc5f0f6455fc8515250ba0167c6f0ac51f7e4c015bc4ea2e6746b8a3861574c7b3e65b4366cb9122ae07ffb36dbfaa0ce057a59adf831cdba83e81ddb80a9e538a16c95e6b3ca4a8f1f1f81e4be57687aafa5271b005b83a47fcea06a85af39b222fc5667493925c93511e00d48928dfae725d49a9f17e2ea2634ca0db7918bf47f4d3f3bf8c483d76fc30120932770dc00fb656f66c8da46309a1a7a2318b71eab0111003bb6d9a2d18277e80d3b1b9b0add4d5d30fae8d6b66e63b291a24123f0a9e29b844c1317ecd0861f4afc8c82eeb1212a7f960f100614189a84b4b90129dec547bc4317188c4019b4a751eaf0e362d4f32f79129abc7b229a0d2ed38c9facd9eb80ff7d3ba655facd6cbd0caf61052c8ad40cb3adc2c00a9db4b42782700208a05488d4020c9247105df905f4416f5c81d82593ab6bc98370a574c2b5d76235dbb0a81bf416492618bbc7e2f57f953f6958853512b7cbe7d9166383ab798c7a9ea0344c4b200183d75541a71df203e1816500fd44c2c2295e8d597f4cb1c7d3766012aae80dc995ed1ac7b7b01de7e2faee4b6791f4a59f8540bb3a9ebc54acda540744ff47d4954516fd6583c47d97904ad882db851b589e1ad5f3b7906acbcfa307621a383e23848d78f5d5396c6033a77e8ce4c9cbc9be1f8e774f34c34e4b5005c9ef0407374fc5346eef8e415b6384268715a7a6043c36c78ea7eb950c268d32d55c880c15ca33c26c03b6bd091d67bf3c392a1d85cacb5102b7c14d0b9f3fc9e5b0f53f319cd8d3b35511745490c47b0d045ca6886d4765a5b3ab18730bcfabd7b1086bfa52a23e35bd843c21e50e2c9e5aa7684de87dd084f1e8b8e105594fcb94da091e379418cb499c25de718261490999c2e7f742e07a09753e7f20e61a3769fed5ed0add888f5a475295d8f0babfa21adb8319d538a2375a0220846684311a5b3e35bea5c2a0f9f624cf5c807c22445bcb791513b768eb33fe30ba8da03fcc15aae58eaffae33c491e64b2f577a101311a284ab95886ac66c461e080e6b984a84da3388121ae0a77a59f4f46b67530b8df4e68e9dfaf9207456007649527c3cc8048d6bfadb09be206311604db90065771e300389774fea5f7e0fac64a5bc0863d34719b51704db34dcff95061f36546044f37b1f06e380aca767dd4db949944765a2fbf32558916800ba385e246932c2a06088175cbd5695d27a1e58b6744afa235b9a68a80e5f71542b5110cfc8d55e5a6d3ecbb9b3b4ba4c633f95763559ce0d344f148d5bc78d1c057457ac5a2338245927e9f3e67bd7c2d45810caed6ec40f33fe1b82d22cd9a6b780a9b96e9e642174c22286e198670c37090ccc74346dea2ce56bbd45aee157f96ba8ae5028f3f0873e72e4794031d94c5c5a060afcbc70842117008a39448be4f2be878ad2a47d2e3f4bcbf6b5f237ff4568ab5bd044e2565664f63740f9fd5aae0e771acde241e63acb3654105add6d41e67f6c8447bf671442e6cad6b062a8878522e258c4ffc540012a0a510029820fe1a51f86d7e53146c1fe0fc7a662efaa35cf13b3f49b391f74dda411e23a799d55a3ecea042f53acaee798192727b8f6121c59161346c010aa841413302b4827ff7bdf2cc86817ea79f10adb0a0348aae075bc0fb244e1baa97fb80d4ecdd90021c2bcd0e2dd5e8d1b35cc3a4de623b722066563e3929711065a916daae9fc4c7d53071f2057aac65ed710a3f64e245d1dad661062dd6e5afd1c449986d3566b0f2f4e4d77c49e5fc77898ee699f6857f84427a8a4fe1dd7ab4a863a5b4cd24d35d03d3eb5f0678a594b6b58f2e80ff7079cf10887d63391cce3a97724059634b1fb38756c4b3cd5e8fefae606a60cb4cbf6928e36cc5afc9cadad372cce7ab6f32d7d7722f877d75ae1d174aaf51dfd7734a09d8bce73df41bb2e741da6e9290cb1fbdbc8820733fa8e9bc48503aab756561963f840e2dd13fec1f79726d41d9bde24bcf96a607527bf5f58f03fb04e3725d03f61cbe326f15d81b78261d086643a1a03656540e4d00201200df8f627248b058f81436565e9c89c620cb8047c7d96515f874f3cffb904ba02b1d64b1d1c463855699d967670029bdae0697dc9d34307342d972c72d848d3d1b59c47be1759428661d0fc7853ade460b14de77912e5a2fbb7e8ec395a8d676fd112dd7bf6a46e91603ac28a113ae3c26539e10cc38bc15ef2b4cbaf4f02829acf2d614ee312242c65f379afca524f3ccf530256cac6e34efebafd620d26e6f1c301c1394e7df011f45137b3a34197c3bcaa4a76a8c304e58fd214d8c5890c28617854e7a0277fde2daebcc26a4e9ef6a1e2558126b2da51135f5535b3eed5725a4fae59408e26e9bcbeaa61af32006f72723fa1f346bcb824a302b524f115282a621c164577fe0eaeae84b5c27413f35a77864bdb117519aed4f0044d71e1b399c5be1698d6bc74a6575fe783dd27ea3df9fe3a98eb6300cd80c800778add95de29046e3f9f42b9890f51c5f29046129f9e9c6980d42a3553c05e07be1fd83246d505197f7849969e5ef9e283fbeb1249cd6f5acf0dc39ef91b01116121eeda008986feba399c343c510fc8cb93ac196e1588606e216f9be0f45331185340b8cc27ab0aaae27f984d1c92a8bc9351323e955f07097bbcb6125bdb90ff0eaa9abbbca1421399db9ccbc363d1bc7ef0202e07ad16e2d89cec295a84a5c15534a59cbea71187b931112d6e5bf1e36125f240d4f69176be0559e22495f55380b6bb54907fa6e693e4387698825470437532df039b18c84153b690a5d28f345e4898f6f53edca1e4757d5a81a203f31f6978ea6dd349f4cd93a5df06dc8796e3261819ee483560792ad4cca0b8795df9325ff7bebf78984992a82ec9f421c7f3b0541b95b5b0f48653ab88c92637d04a71e4fa5b5182afd0d7c0d5cb5eb2f73e0e9cf894ea7b9107533d2c8f817123fd0ccf438e436a31b16db9db58d3e8019f7561a5b5d39fc9b0a7c17ced6ca6ef0cc3f206b390cde05dee37812945fd2613f322551c0155ab780d1cf0e4e5ecdbe2c11fc49cc964cde4f8ce419772b2e44f09bf4d8f469029070502df92fa5ef8009203f8af0561e86b083fcc2ad06918ca52e904020e351f76dff9bb19e83946fb5463659f171879eb79741a9b7157dd7c6be6ab23eb3b30381f81655d683cddd344fa7b4c86658f8c4588dcbfb765f2c881c3b898b713d82bb7405489787bb9a742a89a59903b8c1d215f87df55ed7a73115cc203c504f096584156b38fb6a5ebe70adb91e180c2799ff28078cd73b9b20e1bbaa871fa596c457e1835b2d2801f283c96f6cf7367040810bea48ff8fc0192eaf847ec82f9747ae6c92d2ec67857b204f0422f5463f3f60b81cae52ac6c73f0ad70bcd104629e47c867b1bd9e911364cffb466d0537f070637f1f6571ebabcd1a95b9b73ae6a19251f51503e46906877d4d5ffb4c188a2f5f732d412b248c95e2ba3a9a0546803454c5ec38cfc7a0c917e530917a0cc3cf25586aae747f196002006e12ab2458845377e7d3dc6cd9c99ee583ace03dd2448dbf9f329921278e1a9226e0e2ec09d72e738a19ac718cad298af3a3dd1dd759974ea8ecc0c7062a7390a0076cf6055a7f80a23c620efa5f0605d2c9d46445cf8e72932b414ee74ee000a7e837547e6fa84228cc083232ae8798de266b7ed022484e4bd59c5b637322aef2c3fec91e8d4c1772dedf23e619aa9b7b084dc9c2c99b0bd5ee6ba28bbcd9aa5f313eac7af7ec4b802c56548bc2966388e7cf11deaca47e52e0307e7be3ed1da3ff7d7b6ac3385b9731a542b79f06fecb5dd250c13e48de33951ddbc020e2da865b975695a1fd363e9c31f764ac001cc6189fe329f847e924bf9a0ffac51ad7fb8b49fbde92dd74b7376ca19015aacf97bbf0fbb1"], 0x111c}, {&(0x7f0000003240)=ANY=[@ANYBLOB="a00100002b0002002cbd7000fedbdf25760046000b35d23c5b750d3c84650127a5248d46033695201329cc651144b885cd565c5b2465f66009769e8f03a86700e1fcac0c3aa4b988f991f2788e800a1ca826f3d66ae0d6076f1186ec19bbb1aa85d1df160a427549861139b239e6ebca12b24dd735d3073f945d1d7276f8c36c59d7aba2fe7900000f0193800400910008000e00ac1414bb2ed01acb9a1b99fc0f2404d0cd9ad6b74ebeac88ea08a4e8111dbdeecb7a3e2bf260f8a6c250ad73c9c0604500c23a6c4112fdda2923186eaaab6486d1a1918d0332b3cf877f1e54861b018e9b9fc880ec736bfe8fb44037232153a5ed8be7c7c4cb851449e4461bb7021edce9515d1a43cb76e446bc74d6103df277ad4cfda9e1beeb0a728dedf26b4b95f198c29f9aea1bc4988f823004b822298849ecead3db7fc5be65f9853e78f82bb5e83a80808a2512cc96ce763bfa7cbac21ea18a2b5e97ad7ed85780703fb70cafc02f5782dc4ac9ff488e3479f3391ee0fbc0d74654e427452aeef925bcdf4b43edad4db5b20e7ad548d7459624f3451d13a38e0008009000", @ANYRES32=r2, @ANYBLOB], 0x1a0}, {&(0x7f0000004640)={0x328, 0x3e, 0x400, 0x70bd27, 0x25dfdbfc, "", [@generic="c37c2dfda59da92f7f6cdab875a977c1592263d0d5e16648ec63403e3661a25d25f235697d23b207308718ec3840e86b45d1b5e00eadef44ae58de0b358ffda925e52ff0f8b783ae50e74c8a80dfd4ae68a8fd3a47ac6101223f95bb94fe9a1b", @typed={0x4, 0x4b}, @generic="dc5cf06db7f8e264b79aa12cc3666f503357f38bc0f74f280cdcb3bf5f7ee168432fd12f952ccd920124e681846f917c168cb3a641402908be2cc47c9ba01ec1f76de481f89eaf3fbc3d675dcfea67ec14a0231f92e48145595d31b0dfa4f0a2e582a5568b0369e64b848a1202ed6ba0c6128f186f41e4566150deccce7ef08fe525b7cc1ebdfa9f5575dbd29bf7d4215046181ad01c2ebcf94410e3bafd3dd18279a4ab26f8d0213edd41ddfa7072b6732291a0f0ad016486604f633b3170f7fca9842729ab9c10d46f290af52eb3e683fda7410753b2955ccba8cc96d5fd6c5f517102f592add16856f736e566a6", @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@remote}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@local}, @generic="b87169f8f9d7a320bbf3cb41c6abd251a34a9f50c1ad4e9abf02a43e0b9de2ecf0b2d62b2e66ec10901a9f9f5a80f48f32167608541cb176ce6bd9d0ac39c3e5e6a524ea0bacca486346b703a8c4fab55f8885d2a16c952a48325f7b4fbb9557ad6aa2c3922d10e13c030adbc167bbc4411eb2ae9bf748eedae16f8a738bda4318ebaf79b1672c7a9cf364e8e9997a31ba1edfe5816f06f92794a565060190680329d811e15fcec332cc87321bf916f9437d8884376e56bdcb45f9e33e0adc370ae8713fea0cca4e1e66028bdca43aed9eb099ec8f3f6ecd18f4e12af461ed2c9030f7987a9a5d", @nested={0xbf, 0xba, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0x8, 0x4e, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xfa, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x72}, @typed={0x8, 0x77, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x114, 0x0, 0x0, @pid=r8}, @generic="839abb58349a741847d2e1212a866629156a914bd93fc8a3ca29953efa0b146466d660a013e93728775616a55883798f85532a005d2be646fd", @generic="54af9253980952e4d1df5ae61b472c8ba1f6067a2836d10ce99c8386573078054337a70b2976fc9aed1e5a4dd0fdc4eddb5c3c9ce078573794671455b1dfa055ba9531cecee7dbe6eedc8a7f7990aaabe130d83941187462c886"]}]}, 0x328}, {&(0x7f0000004980)={0x1110, 0x2d, 0x300, 0x70bd27, 0x25dfdbfd, "", [@generic="57e290430297d247cdf3088aa9256497963c48cdfad90a72dbd74fb56a7b9fa883ffbc14b1a0732a80f299f8ef8ec71104517f68a8be5477137f8cf46140a93a094861312a70441b42a8b2f983dd02b27c7b28c02ed4ce9a5a0b17bc665aa9779d72398828eac326b2ffb090adc45c0d745f93db4b8ca9ff0f437bb59505360554f91fe47a57d3d250164fe896925008a403dc4f7e757336715988921d6929889bb8ce070211633dd40799d048b9d44361d2371c865319a7b2468e0645126196fe82e7889aee55e2bb09c03123ba7ce9ea3c8767c1182803881be6d1a516c81525b9af3b9dc91126517c1d1cac8c6a32c7bbfd071fb4b5301e5c8b867a5597e99d83ec5b9eb1091944a47ae7c57e692b2917af1340ce857f2e595cd092100f0be4db2b58bbcad9b593145c2bcbc3fd4668839282f3030894429ab13ac819fca6b7c6e2dbe733d73a0c290d760811be143d83c0e518e32574dd9d44dab519c1be6b39b04c4fc90fcdbf4ad7884b0917027f40d76f4e38ef4da9ee1f17c1ca1d8e84f8257e0302e37b751d7a270535989fff18b58a50cccf30fafdc75c68860440f804a8c68901102e8fa5f3fdaa653b0aa9c53e3530177bf589ad46617412e269825bdd4c80ed297947c52fc52fbc68773b570561171f417fe21934a67720c27e443eec1aba5a227ae85afa41b8c05ef4a1c6b0b6b6c600e3333b18a0a303bce3380bf3a513482ab1ca0b7ae5d44a525bd678df29f87f296151d90c8f3d765d0a80e3ace1e10eb660651c36e64f0ba1bab7c60b0492fde34e185c9bed00a77de3f627b6ab4602a592bec687243caa95bc4c73c655f3ad14bc33aa46fde87c1215f6cdc6c27ceb2bf368e628ed001ab157fbb406ab25593beba40eff4104ebb19a013c558910c2636f4042e70ea589db22e00360cd3c5879f6fa0212db67ae70a1e7614ae0fa94e812d8adf64a3a6a3880bb20c5d79a589b6a3aa6625a5754dcd87ce24e671ff33e2df43a3ef425d01f56c9153729d829ec39bdc37bc4ca66c1bc705b3c7fb8ebf292953102ca39c8296781208e6a8f2e9093d470ec18aae148f9ac70cdb2c71904d4eacd0b605978461eb570277af82cf0ddf85812c0f835e151ddbe017a174e61e56a110a2f49b9604747084b6efa0a123e7b4ceddbfd1721c6746702a9cea32434ca357847796bda459ff32fd55ffb32c3ee4a4d0179d393323f38cf6506fcc65961ae920c7c52a83b2da6e00691016a594cc4b6bafe10269533260cc276fe0fceff0139cb0501311a1d94bf488c1856a60af27caf28a12f93e8c2de48011492862007781bed26c2ad25a84662c32009c6b01d88ac63fb29a4ba6c6c14a0aa255bb4112fad636e565c1854529d9f0e41e71c135100be435ea44eee943b2bbca5625737ea81fa6305c1d526e68c4c881bed905d8d6a503d08216b2ae7176ca05d2039c76d977de5ebf1beeba5fec9430f8d82312e80733ce1c87992bca86821a637a3281e427d60ad1ca9e21f199a59cd44fe9eb782500c38a486332205c81c85fa98768da59b5b0cc28d241db870ce875770e3d51c4a364e13509299421e8aadfccf6930214bcc2e6aab1f61c7e42f5d17336d3dcf83d95d281fda87c2154762d07582ab06c69fcadd5b3f2b9fbf594c272a9bee3a7282e52742d340054a32ab146c9116b85abd5d7b06af17d1f516d0c63066056198ff3cb97aeb6ac34eee1372acd80b88c714532458c018926edb95c96ab3523398150958996ddd625f027e822a0322f78a9a653ea8afbcd193a5b39f646912522f6a05ed221f06e121349bf49a86a7c7d589bec4423001816f070a97c69b21c5ec5abe68d40d52c5f1087003c7c12654509393abdeb0bb95d2545a64fb1eede8a83e1d1d78e562d8048deb63750169f14a7a73b9c5149eb23459b0596b858e3786e354b9335ad7e5d274a371247c432f9491540384780d916f0f67a555e22928562c1e0b29ac9978154615c7283e9d8788e321a4316a4981cd2785de1c625da81ee7653e455de8f943e48e175ca3e268a54dc7841b71a99f007df6995eba92908ceef09db4d5141dcebb6f3275c27381b4403a6a605bf2fbc5b848603662930998edaa864a65838e907eaa95caa47e5835c93026ed58b6697bb6a98874a7b34a98b92e4e0087f7bde5262bd3a7dc85ff79f2182a956982ca012bfa4b1122330bc3fe2e7931ae45a12c9463bea8f648853443b7d7bc27aaf2d333ef8d1619c1e597af37e19a72ebe75277b6b29ce59fe84bad00f2445e71ae611f7a7cc0036cba2f539bdfe4ac2c0a52917ae921d81c0c1d72d513a5d859a128e10125a353fcb76c7659ce95402075b315460acd7325a7880349c7ee48c534d2e38b1366e0c0ee93c088a8d85370129e52211e54aa08f9042aaaf263631658c7ca3bfefa32bf2d9ef3601817b4b4c82aad7ac5038fdbde5cba589bbc169df94d2bd3a39fb292f65b11695945e71e08432788bde3e2695aa863cb05c5760443e7dda5d530b9def1da1af172fa2d5d019c26cb16198a600d08f63534fd1859ecd4b6ec5c3aad3e1dffb5ac9316002dd0b9159da6241dabfa201622863a4940b47cc15ecd72fb29e19a3d9b50459a890af552b51a9139104b7ffdeee09156437f8c05171b1baf38cf52509b23124a4093e2fc13150268cb4144ee17dd10e52e9b115d294085439e0967dcdbaa20f79d4aa999e4c9e6c9a74d4aff21387f51d6f2ca0e7a4229ba5ccde6a621c2ac5021c9c1bd470015d0d20b68077a4dbc7606a46c4eac8ca3e3e28fdc58e4dd4d3b48e8cd6b3c607a3e6253bef3f6e490254623d79153cfa82db7310b7ac68148558eb34062f3fbe13d3a1ad97db59ac38f69eb2fc905a520418a87420da21063ae6f482775f502781321833ea29f0ce4a4cc5d7e92c02ad0ac1aecfbf993e90a123527a843e8611fad2ff25e39200cee09fcf2890175d309b72643e8ca9c6debbdd7d13227562972f1535fabcb6489a8fb0304c19eda29c14484a905ae4bef67881429a5b8d8bef8a1afb1c26b7b308d951441bedc48253836738e3f7267488c56865a30751cd137cec8d24c1eb398d1cbea717e9927fbe3a8ae3ffc82e1bbab6b38286a81c01627c9a2a87be69865211eff82e93c390804818b015e04e75efae8805936e638cd65c0f00002b26c89b6a6dc70cace90dfb476f5cec918c18c25b19bf9391e9c2143cdd43f355442b5ca0d896097cb765adca12bcedb62258eee33a1073d51e75a50283a8fb1ec000674790637126374f0353740bf779fbbb6c1986df60bf858c3b9ab8b77a754955000a80b83537ce78814b1a38b03c79265f40c113f1a12be58b67212cfa7b4cf62e3f000bfafd8fc87e250e22e7a9c3e5fb606fca02b8cb4f4b421528c9f3ae34807c175e8df9115126c36beae676efe9130ba65cd575b836c42e33193a461f9a192cd0a031c8f428ecd61af6310e86ef8325bd6dfc333b3b834f3f42e3cea627212eeeac52d819cdcc56099f5f9160aabb061b2e17ffd513c70cfc3cfef76e1f743298492b65f27be1104c957dcdd5d8d8154f1860aaf9877a95bc440cdeb5041ddfba46507b360c6db9f9bbae55617ee06ebd74b1edecc8b2baeac94d555b0e204f4d80e56eade8b3d33b817e796ca4d41bc62d3a24fc4ee2e978bffb36d834bdb07bc45885ec800f070dd96f26dd6dda68e5b4ce54777c8c54ecc7d08b96156f45df7400820b8df9a40f954dc49c5331052382835a5db749a03d421d119a9220483647b32ebb684a0ce0e4e863324ed5a3de81e2cc7f334bf9b281ce7887bec9a2cadefcecc2f8c246927195d41cfe45e699f3d2a73b8b48021c05b2f747117f43660977d9d5c74fcb89df9dc87d9cafb27188f7d0540957d74125b6174479740c4a370bec7228a73e35d024256be6e4dca84b507d2315e8cdad716768f762e586bc56f1f31aa7b20589bc0c2aea7fcac16230ee7c7c988907e4817a17ebc380d056ec08758e7d00db6af0a98bdb4aaca854e0ef48eb7444c2e33bac9532080f41d2d2ca2332e78652466551775faa8fd7600f564257f0bcec5b012eb3423a1eb30eff3175ba25469f11ca7df2e48508996643592f07a0807d4d0ab40dd4f39ac178a4b8ba99510acdac34bc08cd06abb71796f738aaf6f2f2b46b5a21b83249666c03c9a134f08e663262ce37aed6ff9ab6cc8018d25e5ff3638cece2da3b2d55f294f1627fa9a0563503bf86dd3271df1d68b23319210964f453d34bfd0e18b7010f7219218accb3b2279ca5f057852a692facc4234656da47602643bf8503b58cea0444a61ffbf3c3de7fee587a8892f4a89a3d2e9df6f1487d8ab2521b9ea97db508f84a38fe92974412eab2a6c99bfe7eebdd995579fd0859f807ab4f8d34f18056e1b4cc94816860f9827e1a1d5e5a437db3baad8d42965334068b6d8a4a1dc08a8c5eb5bab6a7f96690223298dc27b0ed1e3e7cd021685f2fd8f104d4561a4ba1f707cb83bc0ecb7410b2a90f50eeb2d9a4f97c4a838d976b844d8ac7178b702ce3b8ba0e00dc2382379f929b3f1b2a68412dc1556b2e02fe645d0e2ccf0ec75e8b96cbf26f98a15179360b4050e875ef4f19b959ed9852155a190d7aa826c0977dab632dfa49dcc7059ad2a1e748f3dbf15c7d747f4580a01454b9fa5009661c6fbcf59ce95bed443332056badb95f914fdffe22080976d5b6ffc7cdee9c7c8270047e6980c0e645f85ef1ce102265956cf192003fb84d6b575426b313d30a6b5e063083afdd3c8f63fe802c257041fd89f7ad8a31f2cfc9e0e55390d9a55c36986b7ca306fea27e2e76463eec8afc4cf724e7bdaf3812014263a302ffb830267b9b4f583b2211db0b13adbd293709949d7b4c8e76e7bb50b618c1eae233b8e60c9c8fde90e8df1ebb3edd523726d1b284e475a659020ad6c461be459a3e5c90226664607735abf5d2e955a7931267e6563c27494f6a4cbf267cd0dcb905a13078a014870612445ae260b4c4924f1df94264ae55e255940e7f47e4390dfb029510f1dad3a6e213c84efb5454b11c897efece1ce9006638c01e7e6f5b6e32aab200f97044570bb8fda2f971a6db575eafab911dd35de49422430677b8df1fa48eb6e7ce45c26744f35bbee9512c437fce8ea45d1adb1003703ee90235a90f8496a3a9e3a15e1062ae126b7df695824f895536627dfb747954d03a14ffaca183e48730137a54f35afcc3f93d4f017e940dbfc1054c60951a29764a90e2aea98deb496a0fdde6d7d13ddec036104525b17c90aa29c264e41ce5aa28b9176007a15e013a9f2c4e52689af8f70a8a6d4b2b6adeaf3695c8c66574f6d7bdabc1eec45eee21cfe3480aee6d61df8c21bb7bdf5639e4ea9814ad7dd8a86d27dc40027c01b1fc62af3215e7db9e01e31354386343c2d2474601b9d078155d282353786b1515cac08c71b1c7b20629bec043e421e9dbca436decb9211316a07419dd9beecc5b0ecf082d3aaba9cd15a85ef1c2fb95eb346c4d9b4307694815b9395a826fef8b74314666c85436b23454bfef0890c46691cbfbaac4e6299dea296c930204bf8dd39fe33ed1ca71b3c20825221236f0e619405322a25ea250faac41120bd9f213f054b5199d148e280676c662f0a707e2f6f431c0a691c22322610fc5a16c49d80d5d30c107624b6bf057a5926c44a882e8f84e646063bb0eac0a0a429d7197061df771b7eaa160989494e6e2db7361ca3ab036caf36ba48633ca6e657451dbe2b9c37b80f3bc390775cf6", @typed={0xa, 0x1d, 0x0, 0x0, @str='netem\x00'}, @generic="d51a0c885ba3732be8badafa3617b04cb35bb5ec1513d040fe6ce60ee3ed6f677c5e5149a89f041497021040373cb650668eb952120f964b16db1391ae1a15eb65a04680c87b608032faf1b5664ac6a6a45d3f15ead986d41bcaf9872b5219fc2f299caa1bde6e6230763c289231f90f4b3f1b1a0509ba", @generic="3040d782b7ad744c6a0fde8a46f12ba6795ba613a4bc89481ca58a6710b3fc52d1d53672a4c1fd5e7975aa1d69842523354b42d91290682052ab1703a7b48b54a6c328570e004472650cbe8a6634d31bf6d27a43beb1b78e6ab31680b5a6816d20427bb3977439060b6cccbda08970eac313a64cc440f9416e0f2861c8"]}, 0x1110}, {&(0x7f0000005b80)={0x24c, 0x3f, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x13b, 0x0, 0x0, @pid=r9}, @typed={0x7e, 0xde, 0x0, 0x0, @binary="518d4ed472d939896c7459cd72cc4c4b2eebd583adedf0c09cd002720b38ccfcde2b0f907197e14eef374619e9c73f1d3a71483966c0144d2dc2876d93997296e90a2be0caf1fa3c428638cc113208a6c9a306c8c2244e1fa65c1d0edc01a63964af47155dce7b761f82953cf87cbea3b2876bc0dec6dc233173"}, @generic="c0896c4b885101dba2a7fbc2ff48da612167e2736e528f985ff9061be12408d0d1752e8bf21ccc073f53b502c2e21ffea444778a9b3b01bd94da06e546cd5cc09a0f060c90fd34d4d3fc1e94556b9663f9bab4cf2cf23c3b85171b4d681bd5219524a1411b52c7284e63651bb4b100609921d6be487a357eb5f7679b20688296e2645712e0842f01949a32711223ffaaac6ddd5c37ec05f39c3a3f1da2374421653b7430262119d87b76ca388abb847f58941824a442d7e0bad6462907582fbc7c8cbaf0d86bd4ac503e03beaa49e9d925a25c3ef0603c11185518e7", @generic="6e461024cf4423a5811a97118358a2a84b97a4c531eee3a2974118", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0x8, 0x73, 0x0, 0x0, @uid=r10}, @generic="2f85e09118ee1ab8f202cfc8591028ec7567a41c5c1db921a705bf26e1ca2549bf595dc5e1edbb1e0f38b2bf287abf46eb646bdbd65ec77259922710567be9959027cc8caf00d7b8c2d1f848966ea6e0cf4c263a66a58da27be904a668790a0ee7e5a87cd850737f73a947b5fb7231988d1cf6f614f36b40148c2c17d439b89a511fa391a937f5e67f33f1d2268da133eb7c28ee20f939e756b548988d0e947204b8e34df6cf41a3e821f033"]}, 0x24c}], 0x5, &(0x7f0000005e80)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}], 0x20, 0x80d4}, 0x4000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 9m0.990988463s ago: executing program 2 (id=1887): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7) iopl(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffe], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x26, 0x1e, 0xc, 0x0, 0x5, 0x3}}, {0x4}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0x10, 0x3, 0x0) set_mempolicy(0x8003, &(0x7f0000000300), 0x80000001) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r7) 8m58.717407379s ago: executing program 2 (id=1898): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r5, 0x9}}, 0x48) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000600000000060a0b0400000000000000000200000018001f8014000180090001006d61737100000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be", 0xda}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed", 0x76}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)}, {&(0x7f0000000500)}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {0x0}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0xd9f, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2400c841, &(0x7f0000000400)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 8m56.954446304s ago: executing program 2 (id=1903): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xd, 0x5, 0xfffffffe, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, 0x0, 0x8010) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="0000951d8ecccc0534a16315cdbc68796639c44eaaa8b82c6ac5d50cca270dbe3a602e06e048d26bc9d9ddf582d05d6a82c266504358346be0a3cbb4b6cf785621ada21072ef1fd2bc77195a0d0c3a04118dcdead32ba6370e3e6b7878951d1c5af0d1101b1597a2b8574e7c6426afdca01366e02399f706b86bd5b6b80ad9a3"]) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 8m55.731242958s ago: executing program 2 (id=1906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x28, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}}, 0x0) 8m54.608455546s ago: executing program 2 (id=1914): syz_emit_ethernet(0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xe) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x20}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x68) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_usb_disconnect(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newnexthop={0x5c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x1, 0x0, 0x11}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_OIF={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 8m53.72779357s ago: executing program 32 (id=1914): syz_emit_ethernet(0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xe) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x20}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x68) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_usb_disconnect(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newnexthop={0x5c, 0x68, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x1, 0x0, 0x11}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_FDB={0x4}, @NHA_GROUP_TYPE={0x6}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x1}, @NHA_OIF={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 44.654644028s ago: executing program 5 (id=3465): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r5, 0x9}}, 0x48) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be", 0xda}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed", 0x76}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3c", 0xf8}, {&(0x7f0000000800)}, {&(0x7f0000000500)}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {0x0}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0xd9f, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2400c841, &(0x7f0000000400)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 43.987875635s ago: executing program 5 (id=3467): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x41}}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) memfd_create(&(0x7f0000000200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xfd\x00\x00#\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\xaa\x0f\x00\x00\x00\x00\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xbe\x8ex\xde\xe7\xdc]\xca\x8c#\xf0Z\x0eg\xaa\x02McB\xac9x5q\xdc-by\xf4\x0f\xb3\xb6\x99\xdd\xfa\xcbU\x030e\xea\x99MN6\xf7g\xad\xf8\xb0b\x00\x95\x83\xa0\xac\xe4\xce\xaf\x1d\xd1\x93\xe0\x17\xear\xf4j\xfa\xff\xdf\xda\xc4\xc5\x97\xc3\xb3\x197\xbd=m\xd3\r\x82\xe2\'\xd1\xf3\xc4m\xb3\x054 \x9eG\x16z\xcb\xf5\xc2\xc6\xceR\xc6\xdd\xb4B)\xb3\"8O\x17JPa\x80\x87\xd1B\xb7p\xc4I\x80\v\xef\xa8\xeas\xdf\xcb\xee\x1al\x84(i\x8d\x1a\x8f:\x9d\x9f\xbfci\xc9\xb0sh\x88\xca\xd3\xa0\xca\xb5\x95\xf2\x9cV\x03,\x0e\x82\xa1j<\xd5a\x9f-@w\x856I\xe1J;\x9fsgc\xf1\xdd\xf5U\xf1E\xac\x8c\xd9 \xcb\xd9d\xa00\x1e\x80\xb4\x80\x18\xd19\xc0\xe3\xfc)\x1f\x93\xbc\xe62\xff\x93\xc8\xfa\r\x95j\a\t\x014~j\x9c\x8c\x1f\xa9+K\xce\xcf\x9f\x95\x95\xcd\xe5\xb6\f\x93\t?\xe2\x97\xf0\x15$N\xe8\xcb\xaa', 0x0) listen(0xffffffffffffffff, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000080)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa10908, 0xfffffff9, '\x00', @value=0x7}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002440)=@newlink={0x80, 0x10, 0x503, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8315, 0x12}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_MAP={0x24, 0xe, {0x3ff, 0xffffffff, 0x4d, 0x49c5, 0xff, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24044880}, 0x0) 43.357384048s ago: executing program 5 (id=3470): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, 0xffffffffffffffff, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, 0xffffffffffffffff, 0x9}}, 0x48) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000600000000060a0b0400000000000000000200000018001f8014000180090001006d61737100000000040002800900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be", 0xda}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed", 0x76}, {&(0x7f0000000700)="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", 0xff}, {&(0x7f0000000800)}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d51", 0x42}, {0x0}], 0x8, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socket(0x10, 0x803, 0x0) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0xd9f, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x2400c841, &(0x7f0000000400)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 42.720765872s ago: executing program 5 (id=3471): socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}], 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000340), 0xfffffffffffffffd, 0x50040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x25, &(0x7f0000000040), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0xfffffffd}, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1b8, 0x2e8, 0x2e8, 0x1b8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @mcast2, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x7, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffe14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x4a4e81, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 41.892033787s ago: executing program 5 (id=3472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rpc\x00') getdents64(r1, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_exit\x00', r4}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) close(r6) ioctl$IOMMU_GET_HW_INFO(r2, 0x3b8a, &(0x7f0000000040)={0x28, 0x0, r5, 0xc4, &(0x7f0000000380)=""/196}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0100000000000a0000002e00000008000300", @ANYRES32=r8, @ANYBLOB="2ed8ba6b237de1e59d72c4231f0feb88076702ae08e9631d66e3ca128031f206e65b054ba78f7a2aabeb15375e300200ff64c61d4e7cdf16a5e3a9893720a724331d101947b745ea82d015afa18288d561eade00e236f428942f9009286dc26356decda3e00e5fedd0e370c2c8a2a6466601664ea4850dc7b1565b5d529d1bbf8c4596fd65a2a5128c8b028df90ccea0a806362ea26fc542b7e8268c47019671a5772ca5d9a472a42954366208d2119a2f1e2ca7f8385d2e96391c082dcf46c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)='pstore\x00', 0x1000000, &(0x7f0000000300)='usrquota') 41.202810245s ago: executing program 5 (id=3473): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x8c, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [{@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%.\x80'}}], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x8800000, 0x7, 0x4) 25.058506653s ago: executing program 33 (id=3473): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x8c, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [{@appraise}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '%.\x80'}}], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x8800000, 0x7, 0x4) 20.502655153s ago: executing program 1 (id=3528): syz_emit_ethernet(0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x4, 0xe) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"f9bef8d1aaeadafa287efdb9450ae3e2d260489591c42ab93a0c7bca18e9a19fa8e6cd61e9f62f91123f1311f81f85b4044554cb6e3ca1b6d1fc011bd71bdda82f37ccfa5b87dd5dcd311dbbb67f240dc02c53b7eabf3651660ce801e3878538da8bb24e1dbc480dae36207bf6b7b946c7a8ec08468f9a75ec797b8c11807655272833a7c70ccfc9a8259e7a148eca4d16b6ff519973a20b65f91a7261cdd2440a5a0566d843fa334b0280f0aacc3b417322b9b56098dd842c44139da4bd1e2212a40ba043bd72b995b172b26b71d434e9f3bf74b4ed480b264e0e9d6f628732534db36bfb92ee6419fb244db44abf0cd9357755ce9c4c9a584e5eb89ffd10c8a6c3c6115265f25f798570751917cd7cfc2ca71729e268c3b30c05b3dfdb18cbbfd3036a889f5fefb0f9d56bf970bdbf2524f8e435b721c809e73a5fdafbf1594088ad1974908bf5fc752d564c1a4989a7d1e59564567d9b437442c5c1cfec93526395d18b1ecb18dedd713ced403a00a2cd27b2dc857808287ea88157b3c19075eb33f7cc60a6161a88ad37fb04d0ce0fda24176406391a5ac521299143bdf59a474a17272105e55e9870cec2942a6705993e821e54441c877a64450e739b1321ad17e1ed552e65654bbfcc8ebd1d64fc4e888609a90410f780fe5031c27737f2de05a7ddf00129eb746a2e990438d9bf6a3211779707d615d79111b3fe71c26433482306ce7563c11cdf6f8da283ae147311465af80ba5350e6d65438cd5a20ec155d78227e5336d504f8f1145f4b942180f7ba6e5c9a070d4e31289d4845229780e53713090e782a75b32729c10da28c1f2702dad57a37416fc138040064347a0a290803f51a619402d88d0a4b2bef39bf92696b6d7052459a78a258edfe2e66f2e10a80b168b483c90a1a1dd67c6d6c9b7a2336d1678131ca38552d9acff05dcd57f9f4164064b7781d8a8b5507e21edfe35d65d726bf24799535648cd04f3b7e85c3f6762f353a8f65afdc7ba63bc0eb65d7188cb1adee1d8d14c0413458d2ff65093d972ac3696fa12defc0f8dedf2309e1b80fc672205e6ccfc6b494233c4d00b5471cb52d896c73cddee40e5e51ee8a9bbe453a1a7d5b9832cacc5965220145504ccb2a157a7c1d9d718c0bf96cd350ac5ca330c827bedbff299774707f5840a0d954ae39c9421975d48e05d87a1ceddefbecae936e15ffb308364b69eefd345d6200cd128e48c162a4ebd026fefb7cc73e80204b21ff30d63e8707292f60682c6f6a587fff9c5a0fae24e0406df5363c7c9d31f72829b6a9d9237a84e83e22c33bf6313ee4072f09f9c6254d0eb7239d51cdda77b8e3d42a89449a3e1b6be8953a27651486383879490486fd11b6ac4e1b86f8a71fc294e0ebf572f4ef00582be189ee5a38c18d4d51cd3221fb1475a56cdf3cc7258bf8c559bf1a9"}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x20400, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {0x8}, {0x20}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x7ffc, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x68) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_usb_disconnect(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 15.389092535s ago: executing program 1 (id=3538): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) 15.030108133s ago: executing program 1 (id=3542): syz_emit_ethernet(0x0, 0x0, 0x0) pipe(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x99, 0x7a, 0xa9, 0x10, 0x25c6, 0x9002, 0x62ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x40, 0x9f, 0xe1}}]}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x20400, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) syz_usb_disconnect(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a000100"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 10.343467354s ago: executing program 0 (id=3552): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 10.077882507s ago: executing program 0 (id=3553): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000040}}], 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 9.259066808s ago: executing program 4 (id=3554): mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x8000000003, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @loopback, 0x1}, {0xa, 0x4e20, 0x5a807add, @remote, 0x5}, r5, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r5}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xb5, @loopback, 0x8}, {0xa, 0x4e22, 0x5, @loopback, 0x8001}, r5, 0x9}}, 0x48) r6 = socket$kcm(0x2, 0x3, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000200)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b041e7dff102c6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a0120d1b4e671487a7b018d9908183ab2085a781e531f1bed4ac9c245ec19be", 0xda}, {&(0x7f0000000100)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a90500b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d980ddfa9098d327d9559e82fceb2b1b1ca4b45c9e22b2de", 0xe3}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed", 0x76}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda47", 0xff}, {&(0x7f0000000800)}, {&(0x7f0000000500)}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c1785d5129", 0x43}, {0x0}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x80) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x77359400}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x2, 0xd9f, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfff}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x2400c841, &(0x7f0000000400)={0xa, 0x2, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 8.851270549s ago: executing program 0 (id=3555): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$dupfd(r0, 0x406, r0) shutdown(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006cc0)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getrlimit(0x8dff, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf251100000008000300", @ANYRES32=0x0, @ANYBLOB="8f1192885a79d18d466c26c5a29932e8d9bd05c1b382f174f3298bc09ec1"], 0x1c}}, 0xc804) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fedbdf25170000000c00060001000000010000004c00308024000300474893439dd375293290797e92f502e8061de8cc7c5b0aff1d6620d693b5a4922400030014aa89f44d6b16ec69ea27d12e89bde02127959f8fbf019fab12d7f61ad7800d08000300", @ANYRES32=0x0, @ANYBLOB="180065daa45107d029d805eada3080aa8af2634f0f90bff563b252"], 0x8c}}, 0x4000085) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x24000020}, 0x4000001) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4138ae84, &(0x7f0000000c40)=@arm64={0x24, 0xf, 0x7, '\x00', 0x81}) 8.805275768s ago: executing program 1 (id=3556): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() sched_setscheduler(r2, 0x7, &(0x7f0000000040)=0xa5ea) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000ae9000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x36e2b000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRES32=r3], 0x0) 6.827464652s ago: executing program 4 (id=3557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80003, 0xff) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) writev(r5, 0x0, 0x0) getrlimit(0x3, &(0x7f00000000c0)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) 6.710790315s ago: executing program 3 (id=3559): socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r0, &(0x7f0000000000)=""/53, 0x35) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4e0000001000020400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000002c001280110001006272696467655f736c617665000000001400058005001d00000000000800030000000000"], 0x4c}}, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000140)={'gretap0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x8, 0x700, 0x7, 0x10, {{0x33, 0x4, 0x0, 0x5, 0xcc, 0x68, 0x0, 0x7, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x4, [{@loopback, 0x3}, {@private=0xa010101, 0xa54}, {@multicast2, 0x3ff}, {@empty, 0x10}]}, @cipso={0x86, 0x25, 0x1, [{0x5, 0x5, "3891b6"}, {0x0, 0xb, "3aa6308175c402268c"}, {0x5, 0xf, "a940f1cb5e3efae39c0065985f"}]}, @generic={0x88, 0x5, "037c0e"}, @rr={0x7, 0x13, 0x77, [@rand_addr=0x64010101, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}]}, @generic={0x7, 0xd, "f4a2ea1134a811f4000543"}, @timestamp_addr={0x44, 0x24, 0xec, 0x1, 0xb, [{@private=0xa010102, 0xc}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@local, 0x9}]}, @timestamp_prespec={0x44, 0x24, 0xd6, 0x3, 0xc, [{@loopback, 0x8}, {@loopback, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast1, 0xfffffffb}]}]}}}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10) munlockall() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, 0x0, 0x0, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socket$inet(0x2, 0xa, 0x7fffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/18, @ANYRES32], 0x48) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0x4018aee2, &(0x7f0000000040)=""/75) socket$tipc(0x1e, 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x40001000, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) setresuid(0x0, 0xee00, 0xee00) socket$inet_tcp(0x2, 0x1, 0x0) 6.71035185s ago: executing program 6 (id=3515): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r0, &(0x7f0000001000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000040}}], 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.867805958s ago: executing program 0 (id=3560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getaffinity(r0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0x0, 0x0) 5.685295277s ago: executing program 4 (id=3561): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/75, 0x4b}, 0x2100) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000700)={0x2, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000001180)=""/4096, 0x1000}], &(0x7f00000004c0)=[0x2, 0x43, 0x401], 0x4}, 0x20) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003180)='/sys/power/sync_on_suspend', 0x242, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000740)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0080000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r1, @ANYBLOB="9b2eaa511807b9e2a90835db0434211085dac78ad7349da8a4c74aadc95244af11c4b3544a82eef8f384b589c30721009c2a4a2a4bb9406a1be8ce262ab5c364ea32a84df3a177c6475203d8d8d8f896219db3f5c5f3ae3fe9928e4f5af864df02b560a1504547eed2286926c16d65dcd055d319cd7fac7e82e39175eeba8715da89d534b0c4a6940aafcb2f2b5cef652cb129e3237690e8dbf3eb6ea318c518907f44e9569f4f73c4cb4d963edd737ea6"], 0x48}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) readlink(0x0, &(0x7f0000000500)=""/219, 0xdb) 5.684789513s ago: executing program 3 (id=3562): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 5.043134236s ago: executing program 6 (id=3563): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0xf800}, &(0x7f0000000140)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0xd360, 0x1}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x79a, 0x0, 0x0, 0x0, 0x8f5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x37, &(0x7f0000000380)=""/55, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x10}], 0x10, 0x8, @void, @value}, 0x94) r6 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r6, &(0x7f0000ffe000/0x2000)=nil, 0x0) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000580)=0x1c) lseek(r5, 0x0, 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x0, 0x1f0, 0x300, 0x300, 0x300, 0x4, &(0x7f00000005c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x200, 'syz0\x00', {0xffffffffe0000000}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @rand_addr=0x64010101, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000a40)="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") r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) rt_sigreturn() ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000bc0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000c00)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0x0, 0xffffffffffffffff, 0x6, 0xfff, 0x7, 0x7, 0x7, 0x9, 0x8, 0x1000, 0x4, 0x7, 0x10000, 0x7, 0x3]}, &(0x7f0000000d00)=0x100) r9 = fsmount(0xffffffffffffffff, 0x1, 0xf3) rt_sigreturn() getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000002480)={'nat\x00', 0x0, [0x7fff, 0x816, 0x8, 0x2, 0x3]}, &(0x7f0000002500)=0x54) 4.942798695s ago: executing program 1 (id=3564): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0602000000000000020000000000000500f504049a6de3ec"], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x1b0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x482842, 0x0) listen(r3, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x8}, 0x6, 0x4, 0x101, 0x751268ea, 0x0, 0x0, 0x101}) shmctl$IPC_RMID(r4, 0x0) close(0xffffffffffffffff) r5 = accept4(r3, 0x0, 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) 4.840923557s ago: executing program 3 (id=3565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0xf, 0x400, 0x2, 0x5, 0x2, 0x16, 0x20, "0ef003cdb500e5ae131674636cc82b0c5700", "ef0981ec4bda9676d71bc6d5808a2cff16d4b146"}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, 0x0, 0x0, 0x2c000011) sendto(r5, 0x0, 0x0, 0x8000, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3d, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4, 0x68}, @nested={0x14, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000d3f000/0x1000)=nil, 0x1000, 0x0) 4.768725343s ago: executing program 0 (id=3566): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf, 0x1b, 0x42, 0x20, 0xc26, 0x20, 0x1951, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x97, 0x2, 0x0, 0x2a, 0x71, 0xc1}}]}}]}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100)=0xc, 0xc06620, 0x4) 3.965221803s ago: executing program 4 (id=3567): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100), &(0x7f00000004c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000200)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x85, 0x7ff, 0x8, 0xfffffff9, 0x1, 0x9, "8160882d9f9cd7fa9b3a21425c97866cd562cdcca72a949ad60d30b27b357e298150712f5051a8b1a4cb6c41468ca0a15d80564e521fd122eb27e06871221ef70b651667c9c36125b9d4aa78fe1e7b23f0dbd6ab0e14e1770e2eba3939c3d00125aa648243d2bd51f2d4dd330a2194ec871ed97542ba52956f8a9523e280bde48e2d82f9e9"}}, 0x19d) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f0000000540)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x6, 0x5, 0x9}, @ldst={0x0, 0x3, 0x2, 0x5, 0x7, 0xfffffffffffffffe, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35}}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.742594016s ago: executing program 3 (id=3568): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0x0, &(0x7f00000011c0)='net/protocols\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000003900)=""/4104, 0x1008}], 0x1, 0x5, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0602000000000000020000000000000500f504049a6de3ec"], 0x18) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x1b0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x482842, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmctl$IPC_SET(r5, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x8}, 0x6, 0x4, 0x101, 0x751268ea, 0x0, 0x0, 0x101}) shmctl$IPC_RMID(r5, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$nfc_llcp_NFC_LLCP_RW(r6, 0x118, 0x0, 0x0, 0x0) 2.553744311s ago: executing program 3 (id=3569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000400)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x6000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7472616e7c3d71642c7266646e6f3de64c151f7083c14be01e42f53a8ddad6a83484edd2a334a927653f22aaac6a890b91d62e1cef7387b29102f218951b9efe85016377f7b8f61d2593e8598527b0f1ec88a72f2676bb0e34fda4382add555b76c6a053a75c9bf48575bfdca704d73355169e71c8aae39b11b6dc684200760900000000000000e226e4c6ebfe3ce17d00000000", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000540)="02", 0x1}], 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'macsec0\x00', &(0x7f00000014c0)=@ethtool_rxnfc={0x2e, 0x0, 0x0, {0x0, @ah_ip4_spec={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, @usr_ip6_spec={@mcast1, @local}, {0x0, @broadcast}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000002200)=0xc0100100) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x1) getrlimit(0xf, &(0x7f0000000040)) fanotify_init(0x8, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.144629142s ago: executing program 3 (id=3570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0xf800}, &(0x7f0000000140)=0x8) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x80000001}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r2, 0xd360, 0x1}, &(0x7f0000000240)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x11, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x79a, 0x0, 0x0, 0x0, 0x8f5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x37, &(0x7f0000000380)=""/55, 0x40f00, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x10}], 0x10, 0x8, @void, @value}, 0x94) r6 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) shmat(r6, &(0x7f0000ffe000/0x2000)=nil, 0x0) getpeername$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000580)=0x1c) lseek(r5, 0x0, 0x2) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x3e8, 0x108, 0x0, 0x1f0, 0x300, 0x300, 0x300, 0x4, &(0x7f00000005c0), {[{{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x200, 'syz0\x00', {0xffffffffe0000000}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @rand_addr=0x64010100, @rand_addr=0x64010101, 0x1, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000a40)="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") r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000b40), &(0x7f0000000b80)=0x4) rt_sigreturn() ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000bc0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r8, 0x84, 0x70, &(0x7f0000000c00)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0x0, 0xffffffffffffffff, 0x6, 0xfff, 0x7, 0x7, 0x7, 0x9, 0x8, 0x1000, 0x4, 0x7, 0x10000, 0x7, 0x3]}, &(0x7f0000000d00)=0x100) recvmsg$can_bcm(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000d40)=""/231, 0xe7}, {&(0x7f0000000e40)=""/4096, 0x1000}], 0x2, &(0x7f0000001e80)=""/197, 0xc5}, 0x120) r9 = fsmount(0xffffffffffffffff, 0x1, 0xf3) rt_sigreturn() getsockopt$IP6T_SO_GET_INFO(r9, 0x29, 0x40, &(0x7f0000002480)={'nat\x00', 0x0, [0x7fff, 0x816, 0x8, 0x2, 0x3]}, &(0x7f0000002500)=0x54) 1.351802452s ago: executing program 6 (id=3571): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x21101f, 0x1000, 0x0, 0x3e}, 0x20) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001080)=0x8) signalfd4(r1, &(0x7f0000000000)={[0x757]}, 0x8, 0x80000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'dummy0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/75, 0x4b}, 0x2100) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'}) syz_open_dev$tty20(0xc, 0x4, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000003180)='/sys/power/sync_on_suspend', 0x242, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="09840000000000003c0012800b00010062726964676500002c000280060027000300000006000600fcff000008001d0000000000050026000000000005002500746c9c92c6b95c780000000008000d00000000005fe2a76e7e251829639877726b6016d135e2c353874ead96a9ce7003e4bd4363f0bdad47b245fe36eeb75141d621f8374db38d91fa7e7621dd1355241aef877c2bf3ae2bc17ba85b6e9f71a993922425c16c2875d593f0c67b76067f32b6"], 0x64}}, 0x0) 1.330443211s ago: executing program 4 (id=3572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000180), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x80003, 0xff) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close(0x3) writev(r4, 0x0, 0x0) getrlimit(0x3, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) write(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) 1.077880129s ago: executing program 1 (id=3573): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r2, &(0x7f00000024c0)=""/65, 0x41) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001200010200"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000429000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00001d1000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d7000/0x3000)=nil, &(0x7f0000b36000/0x1000)=nil, &(0x7f00009a4000/0x4000)=nil, &(0x7f000090b000/0xd000)=nil, &(0x7f00008a0000/0x2000)=nil, &(0x7f0000953000/0x2000)=nil, &(0x7f0000000000), 0x0, r7}, 0x68) close_range(r7, 0xffffffffffffffff, 0x0) 45.75703ms ago: executing program 4 (id=3574): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() sched_setscheduler(r2, 0x7, &(0x7f0000000040)=0xa5ea) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000021b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000ae9000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x36e2b000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001f000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000014010000033800001d13f8ff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xa3) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRES32=r3], 0x0) 0s ago: executing program 0 (id=3575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): dit(1739590378.645:924): avc: denied { ioctl } for pid=17264 comm="syz.1.3146" path="socket:[53132]" dev="sockfs" ino=53132 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1017.603123][T15991] Bluetooth: Wrong link type (-71) [ 1017.709363][T17273] autofs: Unknown parameter '0x0000000000000000' [ 1017.886266][T17279] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1017.926407][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1017.961365][T15991] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1017.971986][T15991] CPU: 1 UID: 0 PID: 15991 Comm: kworker/u9:3 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1017.972014][T15991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1017.972028][T15991] Workqueue: hci1 hci_rx_work [ 1017.972058][T15991] Call Trace: [ 1017.972065][T15991] [ 1017.972074][T15991] dump_stack_lvl+0x16c/0x1f0 [ 1017.972100][T15991] sysfs_warn_dup+0x7f/0xa0 [ 1017.972131][T15991] sysfs_create_dir_ns+0x24d/0x2b0 [ 1017.972161][T15991] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1017.972192][T15991] ? preempt_schedule_thunk+0x1a/0x30 [ 1017.972226][T15991] kobject_add_internal+0x2c8/0x990 [ 1017.972257][T15991] kobject_add+0x16f/0x240 [ 1017.972281][T15991] ? __pfx_kobject_add+0x10/0x10 [ 1017.972310][T15991] ? kobject_put+0xab/0x5a0 [ 1017.972342][T15991] device_add+0x289/0x1a70 [ 1017.972367][T15991] ? __pfx_dev_set_name+0x10/0x10 [ 1017.972394][T15991] ? __pfx_device_add+0x10/0x10 [ 1017.972429][T15991] hci_conn_add_sysfs+0x17e/0x230 [ 1017.972459][T15991] ? le_conn_complete_evt+0xec9/0x1da0 [ 1017.972486][T15991] le_conn_complete_evt+0x107f/0x1da0 [ 1017.972519][T15991] ? __pfx_lock_release+0x10/0x10 [ 1017.972545][T15991] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1017.972586][T15991] ? mark_held_locks+0x9f/0xe0 [ 1017.972618][T15991] hci_le_conn_complete_evt+0x23c/0x370 [ 1017.972653][T15991] hci_le_meta_evt+0x2e2/0x5d0 [ 1017.972681][T15991] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1017.972713][T15991] hci_event_packet+0x666/0x1180 [ 1017.972740][T15991] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1017.972766][T15991] ? __pfx_hci_event_packet+0x10/0x10 [ 1017.972804][T15991] hci_rx_work+0x2c5/0x16b0 [ 1017.972829][T15991] ? process_one_work+0x921/0x1ba0 [ 1017.972860][T15991] process_one_work+0x9c5/0x1ba0 [ 1017.972896][T15991] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1017.972923][T15991] ? __pfx_process_one_work+0x10/0x10 [ 1017.972958][T15991] ? assign_work+0x1a0/0x250 [ 1017.972986][T15991] worker_thread+0x6c8/0xf00 [ 1017.973020][T15991] ? __kthread_parkme+0x148/0x220 [ 1017.973042][T15991] ? __pfx_worker_thread+0x10/0x10 [ 1017.973069][T15991] kthread+0x3af/0x750 [ 1017.973094][T15991] ? __pfx_kthread+0x10/0x10 [ 1017.973116][T15991] ? lock_acquire+0x2f/0xb0 [ 1017.973146][T15991] ? __pfx_kthread+0x10/0x10 [ 1017.973170][T15991] ret_from_fork+0x45/0x80 [ 1017.973193][T15991] ? __pfx_kthread+0x10/0x10 [ 1017.973218][T15991] ret_from_fork_asm+0x1a/0x30 [ 1017.973255][T15991] [ 1018.210754][T15991] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1018.225422][T15991] Bluetooth: hci1: failed to register connection device [ 1018.897675][T17292] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1018.912319][ T54] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1019.156959][T17293] syz_tun: entered allmulticast mode [ 1019.762437][ T5895] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1019.790598][T17300] xt_CT: No such helper "snmp" [ 1020.085435][ T29] audit: type=1400 audit(1739590381.021:925): avc: denied { ioctl } for pid=17297 comm="syz.0.3159" path="net:[4026534354]" dev="nsfs" ino=4026534354 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1020.858353][ T54] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1020.876263][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 1020.888443][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.918870][ T5895] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1020.932087][ T5895] usb 6-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1020.941187][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.953804][ T5895] usb 6-1: config 0 descriptor?? [ 1020.963745][ T5895] usb 6-1: bad CDC descriptors [ 1021.392259][T17315] ceph: No mds server is up or the cluster is laggy [ 1021.419238][T15030] libceph: connect (1)[c::]:6789 error -101 [ 1021.490658][ T46] usb 6-1: USB disconnect, device number 31 [ 1021.495397][T15030] libceph: mon0 (1)[c::]:6789 connect error [ 1021.497552][T17291] syz_tun: left allmulticast mode [ 1021.988548][T15030] libceph: connect (1)[c::]:6789 error -101 [ 1021.995165][T15030] libceph: mon0 (1)[c::]:6789 connect error [ 1022.781629][T15030] libceph: connect (1)[c::]:6789 error -101 [ 1022.787697][T15030] libceph: mon0 (1)[c::]:6789 connect error [ 1022.796457][T15030] libceph: connect (1)[c::]:6789 error -101 [ 1022.802898][T15030] libceph: mon0 (1)[c::]:6789 connect error [ 1022.809269][T17326] ceph: No mds server is up or the cluster is laggy [ 1023.277224][T17336] ceph: No mds server is up or the cluster is laggy [ 1023.284365][ T5895] libceph: connect (1)[c::]:6789 error -101 [ 1023.290433][ T5895] libceph: mon0 (1)[c::]:6789 connect error [ 1025.451819][T15991] Bluetooth: hci1: command 0x0406 tx timeout [ 1025.858617][T17362] 9pnet_fd: Insufficient options for proto=fd [ 1026.371141][T15030] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1026.641234][T15030] usb 1-1: Using ep0 maxpacket: 8 [ 1026.819069][T15030] usb 1-1: config 9 has an invalid interface number: 13 but max is 0 [ 1026.845149][T15030] usb 1-1: config 9 has no interface number 0 [ 1026.865609][T15030] usb 1-1: config 9 interface 13 has no altsetting 0 [ 1026.885129][T15030] usb 1-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.08 [ 1026.915935][T15030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.941309][T15030] usb 1-1: Product: syz [ 1026.974268][T15030] usb 1-1: Manufacturer: syz [ 1027.063161][T15030] usb 1-1: SerialNumber: syz [ 1027.280788][ T2143] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1027.337408][T15030] hub 1-1:9.13: bad descriptor, ignoring hub [ 1027.345835][T15030] hub 1-1:9.13: probe with driver hub failed with error -5 [ 1027.353576][T15030] ums-datafab 1-1:9.13: USB Mass Storage device detected [ 1027.440023][ T5863] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1027.472140][ T2143] usb 4-1: Using ep0 maxpacket: 16 [ 1027.481486][ T2143] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1027.495754][ T2143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.509650][ T2143] usb 4-1: Product: syz [ 1027.516264][ T2143] usb 4-1: Manufacturer: syz [ 1027.524384][ T2143] usb 4-1: SerialNumber: syz [ 1027.540565][ T2143] usb 4-1: config 0 descriptor?? [ 1027.600413][ T5863] usb 2-1: device descriptor read/64, error -71 [ 1027.610472][ T54] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1027.878621][ T5863] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1027.880278][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1027.903464][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1027.979778][T17377] dlm: no local IP address has been set [ 1027.985597][T17377] dlm: cannot start dlm midcomms -107 [ 1027.998730][ T2143] usb 4-1: can't set first interface for hiFace device. [ 1028.231073][ T5863] usb 2-1: device descriptor read/64, error -71 [ 1028.239538][T17377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1028.257051][T17377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3178'. [ 1028.257206][ T2143] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1028.328186][T17395] ceph: No mds server is up or the cluster is laggy [ 1028.354833][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1028.358559][ T2143] usb 4-1: USB disconnect, device number 82 [ 1028.395446][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1028.402593][ T5863] usb usb2-port1: attempt power cycle [ 1028.819188][ T5863] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1029.178772][T15030] usb 1-1: USB disconnect, device number 79 [ 1029.212364][ T5863] usb 2-1: device descriptor read/8, error -71 [ 1029.341075][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3183'. [ 1029.493057][ T5863] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1029.515798][ T5863] usb 2-1: device descriptor read/8, error -71 [ 1029.643881][ T5863] usb usb2-port1: unable to enumerate USB device [ 1029.845639][ T54] Bluetooth: hci3: unexpected subevent 0x19 length: 11 < 28 [ 1029.857222][T17412] program syz.5.3185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1029.866619][T17412] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1029.963002][ T5867] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1030.828947][ T5867] usb 5-1: Using ep0 maxpacket: 16 [ 1031.300336][ T5867] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1031.324704][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.363275][ T5867] usb 5-1: Product: syz [ 1031.385138][ T5867] usb 5-1: Manufacturer: syz [ 1031.398245][ T5867] usb 5-1: SerialNumber: syz [ 1031.414457][ T5867] usb 5-1: config 0 descriptor?? [ 1031.663742][ T46] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1031.705882][ T5867] usb 5-1: can't set first interface for hiFace device. [ 1031.919526][T17408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1031.928604][T17408] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1031.941955][ T54] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1031.952075][ T54] Bluetooth: hci5: Injecting HCI hardware error event [ 1031.962682][T15991] Bluetooth: hci5: hardware error 0x00 [ 1032.034063][ T5867] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1032.066989][ T5867] usb 5-1: USB disconnect, device number 30 [ 1032.079945][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 1032.086443][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.096604][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1032.109577][ T46] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 1032.118829][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.129979][ T46] usb 2-1: config 0 descriptor?? [ 1032.191596][ T46] usb 2-1: bad CDC descriptors [ 1033.001292][ T2143] usb 2-1: USB disconnect, device number 91 [ 1033.396200][T17448] ceph: No mds server is up or the cluster is laggy [ 1034.241980][T15991] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1034.846390][T15991] Bluetooth: hci3: unexpected subevent 0x19 length: 11 < 28 [ 1035.305339][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1035.312552][T17475] mac80211_hwsim hwsim14 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1035.329722][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1035.481886][T17465] ceph: No mds server is up or the cluster is laggy [ 1038.684978][T17505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1039.503266][T15991] Bluetooth: hci0: unexpected subevent 0x19 length: 11 < 28 [ 1040.309628][T17527] ceph: No mds server is up or the cluster is laggy [ 1041.323595][ T5863] IPVS: starting estimator thread 0... [ 1041.329410][T17535] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1041.399754][ T29] audit: type=1400 audit(1739590400.927:926): avc: denied { accept } for pid=17537 comm="syz.4.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1041.466361][T17543] IPVS: using max 30 ests per chain, 72000 per kthread [ 1041.752125][T17546] ceph: No mds server is up or the cluster is laggy [ 1041.827175][ T29] audit: type=1400 audit(1739590401.357:927): avc: denied { read } for pid=17550 comm="syz.0.3219" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1041.883697][T17553] FAULT_INJECTION: forcing a failure. [ 1041.883697][T17553] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.925903][T17553] CPU: 1 UID: 0 PID: 17553 Comm: syz.4.3220 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1041.925932][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1041.925942][T17553] Call Trace: [ 1041.925948][T17553] [ 1041.925956][T17553] dump_stack_lvl+0x16c/0x1f0 [ 1041.925982][T17553] should_fail_ex+0x50a/0x650 [ 1041.926013][T17553] ? fs_reclaim_acquire+0xae/0x150 [ 1041.926041][T17553] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1041.926068][T17553] should_failslab+0xc2/0x120 [ 1041.926089][T17553] __kmalloc_noprof+0xcb/0x510 [ 1041.926108][T17553] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1041.926137][T17553] tomoyo_realpath_from_path+0xb9/0x720 [ 1041.926160][T17553] ? tomoyo_path_number_perm+0x235/0x590 [ 1041.926183][T17553] ? tomoyo_path_number_perm+0x235/0x590 [ 1041.926208][T17553] tomoyo_path_number_perm+0x248/0x590 [ 1041.926229][T17553] ? tomoyo_path_number_perm+0x235/0x590 [ 1041.926252][T17553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1041.926294][T17553] ? __pfx_lock_release+0x10/0x10 [ 1041.926316][T17553] ? trace_lock_acquire+0x14e/0x1f0 [ 1041.926339][T17553] ? lock_acquire+0x2f/0xb0 [ 1041.926360][T17553] ? __fget_files+0x40/0x3a0 [ 1041.926381][T17553] ? __fget_files+0x206/0x3a0 [ 1041.926401][T17553] security_file_ioctl+0x9b/0x240 [ 1041.926424][T17553] __x64_sys_ioctl+0xb7/0x200 [ 1041.926447][T17553] do_syscall_64+0xcd/0x250 [ 1041.926467][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.926491][T17553] RIP: 0033:0x7f868618cde9 [ 1041.926505][T17553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.926522][T17553] RSP: 002b:00007f8686f68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1041.926541][T17553] RAX: ffffffffffffffda RBX: 00007f86863a5fa0 RCX: 00007f868618cde9 [ 1041.926553][T17553] RDX: 0000400000000000 RSI: 0000000080045518 RDI: 0000000000000003 [ 1041.926563][T17553] RBP: 00007f8686f68090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.926573][T17553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.926584][T17553] R13: 0000000000000000 R14: 00007f86863a5fa0 R15: 00007ffd346eedb8 [ 1041.926609][T17553] [ 1041.926641][T17553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1042.107774][ T29] audit: type=1400 audit(1739590401.385:928): avc: denied { setopt } for pid=17550 comm="syz.0.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1042.351233][T17565] FAULT_INJECTION: forcing a failure. [ 1042.351233][T17565] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.368573][T17565] CPU: 0 UID: 0 PID: 17565 Comm: syz.1.3224 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1042.368601][T17565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1042.368612][T17565] Call Trace: [ 1042.368618][T17565] [ 1042.368625][T17565] dump_stack_lvl+0x16c/0x1f0 [ 1042.368651][T17565] should_fail_ex+0x50a/0x650 [ 1042.368676][T17565] ? fs_reclaim_acquire+0xae/0x150 [ 1042.368703][T17565] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1042.368727][T17565] should_failslab+0xc2/0x120 [ 1042.368748][T17565] __kmalloc_noprof+0xcb/0x510 [ 1042.368767][T17565] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1042.368796][T17565] tomoyo_realpath_from_path+0xb9/0x720 [ 1042.368819][T17565] ? tomoyo_path_number_perm+0x235/0x590 [ 1042.368843][T17565] ? tomoyo_path_number_perm+0x235/0x590 [ 1042.368868][T17565] tomoyo_path_number_perm+0x248/0x590 [ 1042.368889][T17565] ? tomoyo_path_number_perm+0x235/0x590 [ 1042.368913][T17565] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1042.368961][T17565] ? __pfx_lock_release+0x10/0x10 [ 1042.368985][T17565] ? trace_lock_acquire+0x14e/0x1f0 [ 1042.369008][T17565] ? lock_acquire+0x2f/0xb0 [ 1042.369030][T17565] ? __fget_files+0x40/0x3a0 [ 1042.369059][T17565] ? __fget_files+0x206/0x3a0 [ 1042.369081][T17565] security_file_ioctl+0x9b/0x240 [ 1042.369107][T17565] __x64_sys_ioctl+0xb7/0x200 [ 1042.369132][T17565] do_syscall_64+0xcd/0x250 [ 1042.369159][T17565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.369184][T17565] RIP: 0033:0x7fa70998cde9 [ 1042.369199][T17565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.369216][T17565] RSP: 002b:00007fa70a7cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1042.369234][T17565] RAX: ffffffffffffffda RBX: 00007fa709ba5fa0 RCX: 00007fa70998cde9 [ 1042.369246][T17565] RDX: 0000400000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1042.369258][T17565] RBP: 00007fa70a7cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1042.369269][T17565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.369280][T17565] R13: 0000000000000000 R14: 00007fa709ba5fa0 R15: 00007ffe3e3855c8 [ 1042.369306][T17565] [ 1042.370117][T17565] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1043.923683][T17577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1043.934821][T15030] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1044.171934][T15030] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1044.189049][T15991] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1044.205417][T15030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.215958][T15030] usb 1-1: Product: syz [ 1044.220174][T15030] usb 1-1: Manufacturer: syz [ 1044.230358][T17579] x_tables: duplicate underflow at hook 1 [ 1044.248382][T15030] usb 1-1: SerialNumber: syz [ 1044.274319][T15030] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1044.301385][ T5865] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1045.071421][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1045.316713][ T5863] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1045.516084][ T29] audit: type=1400 audit(1739590404.809:929): avc: denied { setopt } for pid=17595 comm="syz.3.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1045.561991][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 1045.579356][ T5863] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1045.597207][ T5865] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1045.604592][ T5863] usb 5-1: config 179 has no interface number 0 [ 1045.624337][ T5863] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1045.646905][T17599] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1045.663191][ T5863] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1045.689242][ T5865] ath9k_htc: Failed to initialize the device [ 1045.732572][ T5865] usb 1-1: ath9k_htc: USB layer deinitialized [ 1045.757273][ T5863] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1045.771180][ T2143] usb 1-1: USB disconnect, device number 80 [ 1045.828487][ T5863] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1045.881240][ T5863] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1045.906093][ T5863] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1045.935995][ T5863] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1045.978273][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.995992][ T5863] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19 [ 1046.035538][ T5832] bridge0: port 3(syz_tun) entered disabled state [ 1046.051909][T15991] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1046.085515][T15991] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1046.099780][T15991] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1046.109949][T15991] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1046.119413][T15991] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1046.129331][T15991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1046.137909][ T2143] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 1046.158052][ T5832] syz_tun (unregistering): left allmulticast mode [ 1046.165681][ T5832] syz_tun (unregistering): left promiscuous mode [ 1046.178997][ T5832] bridge0: port 3(syz_tun) entered disabled state [ 1046.248405][T17581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1046.266357][T17581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.281648][ T5867] usb 5-1: USB disconnect, device number 31 [ 1046.283750][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1046.296193][ T5867] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1046.321991][ T2143] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1046.338688][T17603] wg2 speed is unknown, defaulting to 1000 [ 1046.352355][ T2143] usb 1-1: can't read configurations, error -71 [ 1046.958390][T17603] lo speed is unknown, defaulting to 1000 [ 1047.481131][T17603] lo speed is unknown, defaulting to 1000 [ 1047.590965][ T54] Bluetooth: hci1: unexpected subevent 0x19 length: 11 < 28 [ 1047.685026][ T5867] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1047.694112][T17626] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1048.469951][ T54] Bluetooth: hci2: command tx timeout [ 1048.797360][T17633] ceph: No mds server is up or the cluster is laggy [ 1048.965024][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 1049.020576][ T5867] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1049.068199][ T5867] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1049.227063][T17603] chnl_net:caif_netlink_parms(): no params data found [ 1049.602448][ T5867] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1049.611498][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.626748][T17639] veth1_macvtap: left promiscuous mode [ 1049.632239][T17639] macsec0: entered promiscuous mode [ 1049.681234][ T5867] usb 4-1: Product: syz [ 1049.708638][ T5867] usb 4-1: Manufacturer: syz [ 1049.713282][ T5867] usb 4-1: SerialNumber: syz [ 1049.742468][ T5867] usb 4-1: config 0 descriptor?? [ 1049.762843][ T5867] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1049.777692][ T5867] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1049.882686][T17603] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.904078][T17603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.064099][T17603] bridge_slave_0: entered allmulticast mode [ 1050.071059][T17603] bridge_slave_0: entered promiscuous mode [ 1050.078898][T17603] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.086073][T17603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.093305][T17603] bridge_slave_1: entered allmulticast mode [ 1050.100395][T17603] bridge_slave_1: entered promiscuous mode [ 1050.200453][ T2143] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1050.724269][ T54] Bluetooth: hci2: command tx timeout [ 1050.942625][T17603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.977897][T17603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.995450][ T5867] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1051.024985][ T5867] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1051.059417][ T5867] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1051.073096][ T5867] em28xx 4-1:0.0: No AC97 audio processor [ 1051.119129][T17603] team0: Port device team_slave_0 added [ 1051.147188][T17603] team0: Port device team_slave_1 added [ 1051.152939][ T2143] usb 1-1: Using ep0 maxpacket: 8 [ 1051.164127][ T2143] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1051.172639][ T2143] usb 1-1: config 179 has no interface number 0 [ 1051.209814][ T2143] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1051.221857][T17662] ubi31: attaching mtd0 [ 1051.225204][ T2143] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1051.235068][T17662] ubi31: scanning is finished [ 1051.237728][ T2143] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1051.247470][ T5867] usb 4-1: USB disconnect, device number 83 [ 1051.261328][T17662] ubi31: empty MTD device detected [ 1051.261999][ T2143] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1051.274072][ T5867] em28xx 4-1:0.0: Disconnecting em28xx [ 1051.276874][ T2143] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1051.302845][T17603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.310416][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.337001][T17603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.341503][ T5867] em28xx 4-1:0.0: Freeing device [ 1051.347765][ T2143] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1051.367101][ T2143] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1051.380981][T17603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.388191][T17603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.428400][T17662] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1051.435227][ T2143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.440529][T17662] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1051.456372][T17662] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1051.468713][T17662] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1051.469826][ T2143] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20 [ 1051.494623][T17603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.511036][T17662] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1051.546353][T17662] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1051.557641][T17662] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3661518041 [ 1051.584892][T17662] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1051.600302][T17663] ubi31: background thread "ubi_bgt31d" started, PID 17663 [ 1051.706999][ T54] Bluetooth: hci0: unexpected subevent 0x19 length: 11 < 28 [ 1051.723611][T17650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.751964][T17650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1051.775232][T17603] hsr_slave_0: entered promiscuous mode [ 1051.790682][T17603] hsr_slave_1: entered promiscuous mode [ 1051.804599][T17603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1051.819220][T17603] Cannot create hsr debugfs directory [ 1051.821120][ T5867] usb 1-1: USB disconnect, device number 83 [ 1051.824721][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1051.838950][ T5867] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1051.904835][T17672] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1051.917494][ T54] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1052.770797][T17677] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1052.841989][ T54] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1052.948447][T15991] Bluetooth: hci2: command tx timeout [ 1053.479640][T17603] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.574985][T17603] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.615881][ T29] audit: type=1400 audit(1739590412.385:930): avc: denied { shutdown } for pid=17680 comm="syz.3.3258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1053.765290][T17603] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.915741][T17603] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.031434][T17603] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1055.085495][T17603] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1055.098226][T17603] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1055.115183][T17603] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1055.173939][T15991] Bluetooth: hci2: command tx timeout [ 1055.909362][T17603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.992689][T17603] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.737311][T16105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.744499][T16105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.763495][ T5863] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1056.864151][T16105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.871402][T16105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.069033][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.075512][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 1057.080757][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.092948][ T5863] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1057.102532][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.782167][T17603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.817434][T17603] veth0_vlan: entered promiscuous mode [ 1057.834830][T17603] veth1_vlan: entered promiscuous mode [ 1057.854944][ T5863] usb 5-1: Product: syz [ 1057.859150][ T5863] usb 5-1: Manufacturer: syz [ 1057.863748][ T5863] usb 5-1: SerialNumber: syz [ 1057.900759][ T5863] usb 5-1: config 0 descriptor?? [ 1057.941524][T17603] veth0_macvtap: entered promiscuous mode [ 1057.996721][T17603] veth1_macvtap: entered promiscuous mode [ 1058.067986][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.078719][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.088643][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.101686][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.111754][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.169158][T15991] Bluetooth: hci1: unexpected subevent 0x19 length: 11 < 28 [ 1058.187919][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.470668][T17723] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3263'. [ 1058.528158][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1058.634972][ T5863] usb 5-1: can't set first interface for hiFace device. [ 1058.663770][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.663828][ T5863] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1058.684584][ T5863] usb 5-1: USB disconnect, device number 32 [ 1058.689936][T17603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1058.970263][T17731] hugetlbfs: Bad value ' ' for mount option 'nr_inodes' [ 1058.970263][T17731] [ 1058.991301][ T29] audit: type=1400 audit(1739590417.399:931): avc: denied { remount } for pid=17722 comm="syz.3.3268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1059.336645][T17730] veth0_vlan: entered allmulticast mode [ 1059.378372][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.389756][T17733] ubi: mtd0 is already attached to ubi31 [ 1059.410494][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.436768][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.458380][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.482162][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.548528][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.738081][T17603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1059.886845][T17603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1059.912856][T17603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.935012][T17603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.051004][T17756] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1060.132659][T17603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.657587][T15991] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1060.698282][T17603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.732628][T17603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.141367][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1061.158736][ T29] audit: type=1400 audit(1739590419.335:932): avc: denied { write } for pid=17760 comm="syz.5.3274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1061.203879][T17761] ceph: No mds server is up or the cluster is laggy [ 1061.234428][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1061.835734][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1061.856952][ T29] audit: type=1400 audit(1739590419.681:933): avc: denied { create } for pid=17760 comm="syz.5.3274" name="#33" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1061.877454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.904827][ T29] audit: type=1400 audit(1739590419.700:934): avc: denied { link } for pid=17760 comm="syz.5.3274" name="#33" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1062.120721][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1062.126823][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1062.255159][ T29] audit: type=1400 audit(1739590419.700:935): avc: denied { rename } for pid=17760 comm="syz.5.3274" name="#34" dev="tmpfs" ino=1505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1062.364152][T17772] ceph: No mds server is up or the cluster is laggy [ 1062.396174][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1062.441286][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1062.451811][T17753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.486790][T17753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.658059][T17780] ceph: No mds server is up or the cluster is laggy [ 1063.041168][T17786] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1063.622207][T15991] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1063.754824][T16120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1063.771173][T16120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.483156][T17813] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 1066.011590][T17822] autofs: Bad value for 'fd' [ 1066.161417][ T2143] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1066.279178][ T5895] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1066.396561][ T2143] usb 5-1: Using ep0 maxpacket: 16 [ 1066.443717][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.049313][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.070230][ T2143] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1067.080728][ T2143] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.088744][ T2143] usb 5-1: Product: syz [ 1067.102272][ T5895] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1067.139981][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.148687][ T2143] usb 5-1: Manufacturer: syz [ 1067.153443][ T2143] usb 5-1: SerialNumber: syz [ 1067.182931][ T5895] usb 6-1: config 0 descriptor?? [ 1067.256909][ T2143] usb 5-1: config 0 descriptor?? [ 1067.409949][T17833] No control pipe specified [ 1067.545768][ T2143] usb 5-1: can't set first interface for hiFace device. [ 1067.761932][T17836] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3286'. [ 1067.816845][ T2143] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1067.912004][ T5895] isku 0003:1E7D:319C.0011: item fetching failed at offset 6/7 [ 1067.932661][ T5895] isku 0003:1E7D:319C.0011: parse failed [ 1067.945776][ T2143] usb 5-1: USB disconnect, device number 33 [ 1067.955951][ T5895] isku 0003:1E7D:319C.0011: probe with driver isku failed with error -22 [ 1068.289737][T17837] ceph: No mds server is up or the cluster is laggy [ 1068.304099][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1068.333962][ T54] Bluetooth: hci1: unexpected subevent 0x19 length: 11 < 28 [ 1068.342736][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1068.800869][T17846] ceph: No mds server is up or the cluster is laggy [ 1068.812388][ T5863] libceph: connect (1)[c::]:6789 error -101 [ 1068.826331][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.829658][ T5863] libceph: mon0 (1)[c::]:6789 connect error [ 1069.662189][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.691396][T15991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1069.700565][T15991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1069.708745][T15991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1069.721606][T15991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1069.729575][T15991] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1069.737525][T15991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1069.901525][ T2143] usb 6-1: USB disconnect, device number 32 [ 1069.943358][T17853] wg2 speed is unknown, defaulting to 1000 [ 1070.232393][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.547070][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.052111][T17853] lo speed is unknown, defaulting to 1000 [ 1071.137918][ T11] bridge_slave_1: left allmulticast mode [ 1071.152060][ T11] bridge_slave_1: left promiscuous mode [ 1071.170709][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.196106][ T11] bridge_slave_0: left allmulticast mode [ 1071.201957][ T11] bridge_slave_0: left promiscuous mode [ 1071.215145][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.317839][ T54] Bluetooth: hci2: unexpected subevent 0x19 length: 11 < 28 [ 1071.422812][T15030] SELinux: failure in sel_netif_sid_slow(), invalid network interface (96) [ 1071.635350][ T5934] SELinux: failure in sel_netif_sid_slow(), invalid network interface (88) [ 1071.732524][T15030] SELinux: failure in sel_netif_sid_slow(), invalid network interface (100) [ 1072.405417][ T54] Bluetooth: hci0: command tx timeout [ 1072.518491][T15030] SELinux: failure in sel_netif_sid_slow(), invalid network interface (98) [ 1072.527486][ T5826] SELinux: failure in sel_netif_sid_slow(), invalid network interface (99) [ 1072.540801][T15030] SELinux: failure in sel_netif_sid_slow(), invalid network interface (91) [ 1072.771489][T17887] Mount JFS Failure: -22 [ 1072.778873][T17887] jfs_mount failed w/return code = -22 [ 1073.070122][T17895] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3307'. [ 1073.092349][ T5895] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1073.334805][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 1073.343739][ T5895] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1073.355492][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.366939][ T5895] usb 2-1: Product: syz [ 1073.385290][ T5895] usb 2-1: Manufacturer: syz [ 1073.391091][ T5895] usb 2-1: SerialNumber: syz [ 1073.408186][ T5895] usb 2-1: config 0 descriptor?? [ 1073.711639][ T5895] usb 2-1: can't set first interface for hiFace device. [ 1073.928532][T17896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3306'. [ 1073.990905][ T5895] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1074.016570][ T5895] usb 2-1: USB disconnect, device number 92 [ 1074.198323][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.216466][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.229067][ T11] bond0 (unregistering): Released all slaves [ 1074.242449][T17874] wg2 speed is unknown, defaulting to 1000 [ 1074.264826][T17853] lo speed is unknown, defaulting to 1000 [ 1074.372409][T17898] loop7: detected capacity change from 0 to 127 [ 1074.408193][T17899] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 1074.588141][ T54] Bluetooth: hci0: command tx timeout [ 1074.668757][T17874] lo speed is unknown, defaulting to 1000 [ 1074.792718][T17853] chnl_net:caif_netlink_parms(): no params data found [ 1075.108115][T17914] ceph: No mds server is up or the cluster is laggy [ 1075.142150][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1075.149129][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1075.431935][T17874] lo speed is unknown, defaulting to 1000 [ 1075.576610][ T11] hsr_slave_0: left promiscuous mode [ 1075.588261][ T11] hsr_slave_1: left promiscuous mode [ 1075.594308][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.602051][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.610043][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.618249][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.647780][ T11] veth1_macvtap: left promiscuous mode [ 1075.653401][ T11] veth0_macvtap: left promiscuous mode [ 1075.659545][ T11] veth1_vlan: left promiscuous mode [ 1075.686839][ T5867] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1075.708402][ T5895] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1075.847105][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1075.872935][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1075.891237][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.902251][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1075.904069][ T5867] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1075.923624][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.936942][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.949468][ T5895] usb 5-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1075.958725][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.965163][ T5867] usb 2-1: Product: syz [ 1075.970907][ T5867] usb 2-1: Manufacturer: syz [ 1075.982841][ T5895] usb 5-1: config 0 descriptor?? [ 1075.986265][ T5867] usb 2-1: SerialNumber: syz [ 1075.998221][ T5867] usb 2-1: config 0 descriptor?? [ 1076.017819][ T5867] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1076.042769][ T5867] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1076.530189][ T5895] hid-rmi 0003:0461:4E72.0012: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.4-1/input0 [ 1076.820015][ T54] Bluetooth: hci0: command tx timeout [ 1077.033463][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1077.216351][ T29] audit: type=1400 audit(1739590434.451:936): avc: denied { listen } for pid=17926 comm="syz.4.3314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1077.296392][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1077.729274][ T5867] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1077.749738][ T5867] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1078.342488][ T5867] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1078.350145][ T5867] em28xx 2-1:0.0: No AC97 audio processor [ 1078.444723][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.474675][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.491350][T17853] bridge_slave_0: entered allmulticast mode [ 1078.508571][T17853] bridge_slave_0: entered promiscuous mode [ 1078.524509][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.540074][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.554228][T17853] bridge_slave_1: entered allmulticast mode [ 1078.567058][T17853] bridge_slave_1: entered promiscuous mode [ 1078.587034][T17928] mkiss: ax0: crc mode is auto. [ 1078.685031][ T5867] usb 2-1: USB disconnect, device number 93 [ 1078.692292][ T5867] em28xx 2-1:0.0: Disconnecting em28xx [ 1078.707913][ T5867] em28xx 2-1:0.0: Freeing device [ 1078.716731][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.746651][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.829081][ T5895] usb 5-1: USB disconnect, device number 34 [ 1078.973575][T17853] team0: Port device team_slave_0 added [ 1079.001719][T17853] team0: Port device team_slave_1 added [ 1079.033361][ T54] Bluetooth: hci0: command tx timeout [ 1079.067757][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.074730][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.129058][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.147316][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.154962][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.180848][ C0] vkms_vblank_simulate: vblank timer overrun [ 1079.192826][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.257737][T17853] hsr_slave_0: entered promiscuous mode [ 1079.263931][T17853] hsr_slave_1: entered promiscuous mode [ 1080.235234][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3320'. [ 1080.489091][T17956] ceph: No mds server is up or the cluster is laggy [ 1080.505284][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1080.518937][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1080.799599][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1080.813635][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1080.848411][T17962] random: crng reseeded on system resumption [ 1080.858986][ T29] audit: type=1400 audit(1739590437.856:937): avc: denied { append } for pid=17961 comm="syz.4.3323" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1080.931055][T17853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1080.941554][T17853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1080.960228][T17853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1080.978696][T17853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1081.049941][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.059493][ T5863] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1081.091167][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1081.115464][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.122626][ T8081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.209996][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.217138][ T8081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.256928][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 1081.269556][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.379612][T17853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1081.401569][T17853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1081.462316][ T5863] usb 1-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1081.477282][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1081.488746][ T5863] usb 1-1: SerialNumber: syz [ 1081.498111][ T5863] usb 1-1: config 0 descriptor?? [ 1081.760786][ T5863] usb 1-1: Found UVC 0.00 device (05ac:8501) [ 1081.774361][ T5863] usb 1-1: No valid video chain found. [ 1082.066692][ T5863] usb 1-1: USB disconnect, device number 84 [ 1082.175614][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.439007][T17978] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3326'. [ 1082.747081][T17853] veth0_vlan: entered promiscuous mode [ 1083.540862][T17853] veth1_vlan: entered promiscuous mode [ 1083.582903][T17853] veth0_macvtap: entered promiscuous mode [ 1083.591813][T17853] veth1_macvtap: entered promiscuous mode [ 1083.627098][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.653843][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.671936][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1083.854465][ T5863] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1083.907774][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.015322][ T5863] usb 5-1: device descriptor read/64, error -71 [ 1084.057051][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.092836][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.120382][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.141910][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.155376][T17995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3330'. [ 1084.164553][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.224161][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.252123][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.271284][ T5863] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1084.279347][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.314083][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.323922][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.356260][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.378371][T17853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.400887][T17853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.421853][ T5863] usb 5-1: device descriptor read/64, error -71 [ 1084.430748][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.455644][T17853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.481568][T17853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.499632][T17853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.509572][T17853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.539531][ T5863] usb usb5-port1: attempt power cycle [ 1084.601249][T18002] netem: change failed [ 1084.634990][ T8081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.656110][ T8081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.704433][T18002] wg2 speed is unknown, defaulting to 1000 [ 1084.723666][ T1215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.764399][ T1215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.912802][ T5863] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1084.991279][T18002] lo speed is unknown, defaulting to 1000 [ 1085.000336][ T5863] usb 5-1: device descriptor read/8, error -71 [ 1085.088834][T18008] ceph: No mds server is up or the cluster is laggy [ 1085.099061][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1085.107824][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1085.297742][ T5863] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1085.414205][ T5863] usb 5-1: device descriptor read/8, error -71 [ 1085.512298][T18015] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1086.258673][ T5863] usb usb5-port1: unable to enumerate USB device [ 1087.795626][T18002] lo speed is unknown, defaulting to 1000 [ 1088.569128][T18033] sp0: Synchronizing with TNC [ 1089.062117][T18028] [U] è` [ 1089.462574][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1089.510247][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1089.531082][T18034] ceph: No mds server is up or the cluster is laggy [ 1089.542249][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 1089.548292][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 1090.350320][T18050] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1090.981352][T18054] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1091.620127][T18057] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1091.637151][T18057] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 1091.757155][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1091.788653][T18062] ceph: No mds server is up or the cluster is laggy [ 1091.804161][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1092.160409][T18041] FAULT_INJECTION: forcing a failure. [ 1092.160409][T18041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.197388][T18041] CPU: 0 UID: 0 PID: 18041 Comm: syz.5.3341 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1092.197414][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1092.197424][T18041] Call Trace: [ 1092.197429][T18041] [ 1092.197436][T18041] dump_stack_lvl+0x16c/0x1f0 [ 1092.197462][T18041] should_fail_ex+0x50a/0x650 [ 1092.197487][T18041] _copy_to_user+0x32/0xd0 [ 1092.197504][T18041] simple_read_from_buffer+0xd0/0x160 [ 1092.197530][T18041] proc_fail_nth_read+0x198/0x270 [ 1092.197555][T18041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.197579][T18041] ? rw_verify_area+0xcf/0x680 [ 1092.197600][T18041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1092.197623][T18041] vfs_read+0x1df/0xbf0 [ 1092.197647][T18041] ? __fget_files+0x1fc/0x3a0 [ 1092.197663][T18041] ? __pfx___mutex_lock+0x10/0x10 [ 1092.197681][T18041] ? __pfx_vfs_read+0x10/0x10 [ 1092.197711][T18041] ? __fget_files+0x206/0x3a0 [ 1092.197734][T18041] ksys_read+0x12b/0x250 [ 1092.197757][T18041] ? __pfx_ksys_read+0x10/0x10 [ 1092.197787][T18041] do_syscall_64+0xcd/0x250 [ 1092.197808][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.197831][T18041] RIP: 0033:0x7f885d58b7fc [ 1092.197846][T18041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1092.197862][T18041] RSP: 002b:00007f885e40e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1092.197879][T18041] RAX: ffffffffffffffda RBX: 00007f885d7a5fa0 RCX: 00007f885d58b7fc [ 1092.197891][T18041] RDX: 000000000000000f RSI: 00007f885e40e0a0 RDI: 0000000000000004 [ 1092.197903][T18041] RBP: 00007f885e40e090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.197913][T18041] R10: 0000400000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1092.197924][T18041] R13: 0000000000000000 R14: 00007f885d7a5fa0 R15: 00007ffcf3943628 [ 1092.197949][T18041] [ 1092.387993][ C0] vkms_vblank_simulate: vblank timer overrun [ 1092.407982][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3349'. [ 1092.543733][T18078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1093.191947][T18081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3351'. [ 1094.483798][T18095] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1094.527831][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1094.537755][ T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1094.537785][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1094.537799][ T54] Workqueue: hci2 hci_rx_work [ 1094.537828][ T54] Call Trace: [ 1094.537835][ T54] [ 1094.537845][ T54] dump_stack_lvl+0x16c/0x1f0 [ 1094.537889][ T54] sysfs_warn_dup+0x7f/0xa0 [ 1094.537918][ T54] sysfs_create_dir_ns+0x24d/0x2b0 [ 1094.537947][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1094.537977][ T54] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1094.537999][ T54] ? kobject_add_internal+0x12d/0x990 [ 1094.538032][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 1094.538055][ T54] kobject_add_internal+0x2c8/0x990 [ 1094.538086][ T54] kobject_add+0x16f/0x240 [ 1094.538111][ T54] ? __pfx_kobject_add+0x10/0x10 [ 1094.538136][ T54] ? class_to_subsys+0x3e/0x160 [ 1094.538163][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 1094.538183][ T54] ? kobject_put+0xab/0x5a0 [ 1094.538215][ T54] device_add+0x289/0x1a70 [ 1094.538239][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 1094.538266][ T54] ? __pfx_device_add+0x10/0x10 [ 1094.538291][ T54] ? mgmt_send_event_skb+0x2f2/0x460 [ 1094.538323][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 1094.538351][ T54] le_conn_complete_evt+0x107f/0x1da0 [ 1094.538382][ T54] ? __pfx_lock_release+0x10/0x10 [ 1094.538408][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1094.538435][ T54] ? __mutex_lock+0x1cc/0xb10 [ 1094.538467][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 1094.538499][ T54] hci_le_meta_evt+0x2e2/0x5d0 [ 1094.538524][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1094.538555][ T54] hci_event_packet+0x666/0x1180 [ 1094.538580][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1094.538606][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 1094.538636][ T54] ? kcov_remote_start+0x3df/0x6e0 [ 1094.538671][ T54] hci_rx_work+0x2c5/0x16b0 [ 1094.538697][ T54] ? process_one_work+0x921/0x1ba0 [ 1094.538731][ T54] process_one_work+0x9c5/0x1ba0 [ 1094.538768][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1094.538797][ T54] ? __pfx_process_one_work+0x10/0x10 [ 1094.538834][ T54] ? assign_work+0x1a0/0x250 [ 1094.538862][ T54] worker_thread+0x6c8/0xf00 [ 1094.538899][ T54] ? __pfx_worker_thread+0x10/0x10 [ 1094.538925][ T54] kthread+0x3af/0x750 [ 1094.538949][ T54] ? __pfx_kthread+0x10/0x10 [ 1094.538972][ T54] ? lock_acquire+0x2f/0xb0 [ 1094.539006][ T54] ? __pfx_kthread+0x10/0x10 [ 1094.539032][ T54] ret_from_fork+0x45/0x80 [ 1094.539059][ T54] ? __pfx_kthread+0x10/0x10 [ 1094.539084][ T54] ret_from_fork_asm+0x1a/0x30 [ 1094.539121][ T54] [ 1094.539306][ T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1094.931715][ T54] Bluetooth: hci2: failed to register connection device [ 1095.021411][ T29] audit: type=1400 audit(1739590451.120:938): avc: denied { shutdown } for pid=18099 comm="syz.5.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1095.099344][T18104] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3358'. [ 1095.176012][T18104] netlink: 'syz.4.3358': attribute type 1 has an invalid length. [ 1095.186049][T15991] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1096.046726][ T54] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 1096.366727][ T29] audit: type=1326 audit(1739590452.364:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.057638][ T29] audit: type=1326 audit(1739590452.374:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.186728][ T29] audit: type=1326 audit(1739590452.383:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.217220][ T29] audit: type=1326 audit(1739590452.383:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.259609][ T29] audit: type=1326 audit(1739590452.383:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.259677][T18122] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3365'. [ 1097.282970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1097.335614][ T29] audit: type=1326 audit(1739590452.383:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.408535][ T29] audit: type=1326 audit(1739590452.383:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.433906][ T29] audit: type=1326 audit(1739590452.383:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.457625][ T29] audit: type=1326 audit(1739590452.383:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18117 comm="syz.4.3362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1097.703442][T18134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1098.321376][ T5826] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 1098.802686][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.847889][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1098.905234][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1099.057075][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1099.240248][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1099.270279][ T5826] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1099.300599][ T5826] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1099.317299][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.348197][ T54] Bluetooth: hci2: unexpected subevent 0x19 length: 11 < 28 [ 1099.379359][ T5826] usb 5-1: Product: syz [ 1099.384288][ T5826] usb 5-1: Manufacturer: syz [ 1099.388994][ T5826] usb 5-1: SerialNumber: syz [ 1099.399399][ T5826] usb 5-1: config 0 descriptor?? [ 1099.405495][T18138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1099.416466][ T5826] ati_remote 5-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1099.896273][T18166] ceph: No mds server is up or the cluster is laggy [ 1099.925193][ T46] usb 5-1: USB disconnect, device number 39 [ 1100.136205][ T5826] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1100.264561][ T5934] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1100.307493][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 1100.345855][ T5826] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1100.371064][ T5826] usb 1-1: config 179 has no interface number 0 [ 1100.391560][ T5826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1100.436197][ T5826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1100.484693][ T5934] usb 6-1: config 0 has an invalid interface number: 239 but max is 0 [ 1100.513090][ T5826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1100.523019][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1100.523033][ T29] audit: type=1400 audit(1739590456.256:955): avc: denied { ioctl } for pid=18177 comm="syz.3.3378" path="socket:[56900]" dev="sockfs" ino=56900 ioctlcmd=0xaea6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1100.528690][ T5934] usb 6-1: config 0 has no interface number 0 [ 1100.583446][ T5826] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1100.625249][ T5826] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1100.638830][ T5826] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1100.648271][ T5826] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1100.662586][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.671876][ T5934] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1100.682601][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.699195][ T5934] usb 6-1: Product: syz [ 1100.705972][ T5826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 1100.724357][ T5934] usb 6-1: Manufacturer: syz [ 1100.729475][ T5934] usb 6-1: SerialNumber: syz [ 1100.749369][ T5934] usb 6-1: config 0 descriptor?? [ 1100.959092][ T29] audit: type=1400 audit(1739590456.667:956): avc: denied { listen } for pid=18182 comm="syz.3.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1101.742827][ T29] audit: type=1400 audit(1739590456.667:957): avc: denied { ioctl } for pid=18182 comm="syz.3.3380" path="socket:[56913]" dev="sockfs" ino=56913 ioctlcmd=0xaea0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1101.800468][T18169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.811410][T18169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1101.886829][ T5894] usb 1-1: USB disconnect, device number 85 [ 1101.886885][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1101.901084][ T5894] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1101.986096][T18196] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1101.995702][T18197] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1102.905407][ T5934] asix 6-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1102.935470][ T5934] asix 6-1:0.239: probe with driver asix failed with error -71 [ 1102.964954][ T5934] usb 6-1: USB disconnect, device number 33 [ 1104.168793][T17831] libceph: connect (1)[c::]:6789 error -101 [ 1104.263113][T17831] libceph: mon0 (1)[c::]:6789 connect error [ 1104.307200][T18212] ceph: No mds server is up or the cluster is laggy [ 1104.314233][T17831] libceph: connect (1)[c::]:6789 error -101 [ 1104.321747][T17831] libceph: mon0 (1)[c::]:6789 connect error [ 1105.134424][T18229] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1105.468818][T17831] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1105.965175][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064bdb800: rx timeout, send abort [ 1106.018161][T17831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.047767][T17831] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1106.086487][T17831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1106.108362][T17831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1106.155665][T17831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1106.178477][T17831] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1106.213806][T17831] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1106.223272][ T2143] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1106.234810][T17831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.243476][T17831] usb 1-1: Product: syz [ 1106.249131][T17831] usb 1-1: Manufacturer: syz [ 1106.254897][T17831] usb 1-1: SerialNumber: syz [ 1106.270592][T17831] usb 1-1: config 0 descriptor?? [ 1106.279704][T18222] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1106.317490][T18243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3395'. [ 1106.326884][T17831] ati_remote 1-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1106.414591][ T2143] usb 4-1: Using ep0 maxpacket: 16 [ 1106.442333][ T2143] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1106.473461][ T2143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1106.508007][ C0] vcan0: j1939_tp_rxtimer: 0xffff888064bdb800: abort rx timeout. Force session deactivation [ 1106.673750][ T2143] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1107.298860][ T2143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.305352][ T5826] usb 1-1: USB disconnect, device number 86 [ 1107.313034][ T2143] usb 4-1: Product: syz [ 1107.317308][ T2143] usb 4-1: Manufacturer: syz [ 1107.324202][ T2143] usb 4-1: SerialNumber: syz [ 1107.433520][ T2143] usb 4-1: config 0 descriptor?? [ 1107.456729][ T2143] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1107.466352][ T2143] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1107.803143][T18260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3399'. [ 1107.834713][T18258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.854805][ T5934] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1108.107407][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 1108.115033][T18268] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1108.668230][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1108.700609][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1108.758177][ T5826] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1108.847159][ T5934] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1108.878305][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.921408][ T5934] usb 6-1: Product: syz [ 1108.938584][ T5934] usb 6-1: Manufacturer: syz [ 1108.953936][ T29] audit: type=1400 audit(1739590464.132:958): avc: denied { setopt } for pid=18269 comm="syz.4.3403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1108.988134][ T5934] usb 6-1: SerialNumber: syz [ 1108.994226][ T5826] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 1109.016241][ T5934] usb 6-1: config 0 descriptor?? [ 1109.022516][ T5826] usb 1-1: config 8 has no interface number 0 [ 1109.044413][ T5826] usb 1-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1109.061576][ T5934] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1109.079640][ T5826] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1109.090564][ T5934] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1109.098397][ T5826] usb 1-1: config 8 interface 177 altsetting 9 bulk endpoint 0x87 has invalid maxpacket 0 [ 1109.108646][ T5826] usb 1-1: config 8 interface 177 has no altsetting 0 [ 1109.115957][ T5826] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 1109.127260][ T2143] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1109.136287][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.144163][ T2143] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1109.155045][ T2143] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1109.162897][ T2143] em28xx 4-1:0.0: No AC97 audio processor [ 1109.277471][T18266] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1109.620487][T18266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.644833][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1109.650987][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1109.667757][T18277] ceph: No mds server is up or the cluster is laggy [ 1109.697491][T18266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.755958][ T5826] usb 1-1: string descriptor 0 read error: -71 [ 1109.763945][ T5826] ir_toy 1-1:8.177: required endpoints not found [ 1109.843911][ T5826] usb 1-1: USB disconnect, device number 87 [ 1110.259665][ T46] usb 4-1: USB disconnect, device number 84 [ 1110.275703][ T46] em28xx 4-1:0.0: Disconnecting em28xx [ 1110.371905][ T46] em28xx 4-1:0.0: Freeing device [ 1110.637986][T18289] ceph: No mds server is up or the cluster is laggy [ 1110.720354][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1110.726492][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1110.885578][T18295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1111.431223][ T5934] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1112.266389][ T5934] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1112.287981][ T5934] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1112.300336][ T5934] em28xx 6-1:0.0: No AC97 audio processor [ 1112.318964][ T5934] usb 6-1: USB disconnect, device number 34 [ 1112.334657][ T5934] em28xx 6-1:0.0: Disconnecting em28xx [ 1112.364422][ T5934] em28xx 6-1:0.0: Freeing device [ 1112.577332][T18319] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1112.606985][ T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1112.617522][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1112.617550][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1112.617565][ T54] Workqueue: hci0 hci_rx_work [ 1112.617596][ T54] Call Trace: [ 1112.617603][ T54] [ 1112.617612][ T54] dump_stack_lvl+0x16c/0x1f0 [ 1112.617638][ T54] sysfs_warn_dup+0x7f/0xa0 [ 1112.617667][ T54] sysfs_create_dir_ns+0x24d/0x2b0 [ 1112.617694][ T54] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1112.617722][ T54] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1112.617746][ T54] ? kobject_add_internal+0x12d/0x990 [ 1112.617775][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 1112.617798][ T54] kobject_add_internal+0x2c8/0x990 [ 1112.617829][ T54] kobject_add+0x16f/0x240 [ 1112.617852][ T54] ? __pfx_kobject_add+0x10/0x10 [ 1112.617873][ T54] ? class_to_subsys+0x3e/0x160 [ 1112.617900][ T54] ? do_raw_spin_unlock+0x172/0x230 [ 1112.617921][ T54] ? kobject_put+0xab/0x5a0 [ 1112.617960][ T54] device_add+0x289/0x1a70 [ 1112.617986][ T54] ? __pfx_dev_set_name+0x10/0x10 [ 1112.618015][ T54] ? __pfx_device_add+0x10/0x10 [ 1112.618043][ T54] ? mgmt_send_event_skb+0x2f2/0x460 [ 1112.618078][ T54] hci_conn_add_sysfs+0x17e/0x230 [ 1112.618107][ T54] le_conn_complete_evt+0x107f/0x1da0 [ 1112.618141][ T54] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1112.618165][ T54] ? mark_held_locks+0x9f/0xe0 [ 1112.618192][ T54] ? irqentry_exit+0x3b/0x90 [ 1112.618213][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 1112.618241][ T54] hci_le_conn_complete_evt+0x23c/0x370 [ 1112.618274][ T54] hci_le_meta_evt+0x2e2/0x5d0 [ 1112.618299][ T54] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1112.618329][ T54] hci_event_packet+0x666/0x1180 [ 1112.618355][ T54] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1112.618383][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 1112.618407][ T54] ? mark_held_locks+0x9f/0xe0 [ 1112.618435][ T54] ? kcov_remote_start+0x3cf/0x6e0 [ 1112.618463][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 1112.618490][ T54] hci_rx_work+0x2c5/0x16b0 [ 1112.618517][ T54] ? process_one_work+0x921/0x1ba0 [ 1112.618547][ T54] process_one_work+0x9c5/0x1ba0 [ 1112.618578][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1112.618607][ T54] ? __pfx_process_one_work+0x10/0x10 [ 1112.618645][ T54] ? assign_work+0x1a0/0x250 [ 1112.618674][ T54] worker_thread+0x6c8/0xf00 [ 1112.618712][ T54] ? __pfx_worker_thread+0x10/0x10 [ 1112.618745][ T54] kthread+0x3af/0x750 [ 1112.618771][ T54] ? __pfx_kthread+0x10/0x10 [ 1112.618796][ T54] ? lock_acquire+0x2f/0xb0 [ 1112.618826][ T54] ? __pfx_kthread+0x10/0x10 [ 1112.618850][ T54] ret_from_fork+0x45/0x80 [ 1112.618874][ T54] ? __pfx_kthread+0x10/0x10 [ 1112.618898][ T54] ret_from_fork_asm+0x1a/0x30 [ 1112.618941][ T54] [ 1112.885588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1112.895947][ T54] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1112.910326][ T54] Bluetooth: hci0: failed to register connection device [ 1113.115503][ T5934] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1113.391546][T18311] Bluetooth: MGMT ver 1.23 [ 1113.632681][ T5934] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.643123][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1113.690431][ T5826] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1113.742514][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1113.794681][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1113.908110][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 1113.919705][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1113.929965][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 1113.935597][ T5934] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1113.936897][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1113.952487][ T5934] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1113.965478][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.965770][ T5826] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 1113.983200][ T5934] usb 6-1: Product: syz [ 1113.988505][ T5934] usb 6-1: Manufacturer: syz [ 1113.993237][ T5934] usb 6-1: SerialNumber: syz [ 1113.997888][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.008617][ T5934] usb 6-1: config 0 descriptor?? [ 1114.014033][ T5826] usb 2-1: Product: syz [ 1114.019398][T18318] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1114.026653][ T5826] usb 2-1: Manufacturer: syz [ 1114.037935][T18329] ceph: No mds server is up or the cluster is laggy [ 1114.048469][ T5934] ati_remote 6-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 1114.049278][ T5826] usb 2-1: SerialNumber: syz [ 1114.077930][ T5826] usb 2-1: config 0 descriptor?? [ 1114.092001][ T5826] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 1114.348833][ T46] usb 6-1: USB disconnect, device number 35 [ 1114.376561][ T5826] pwc: Warning: more than 1 configuration available. [ 1114.387020][ T5826] pwc: Failed to set LED on/off time (-71) [ 1114.399892][ T5826] pwc: send_video_command error -71 [ 1114.405226][ T5826] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1114.412857][ T5826] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1114.423898][ T5826] usb 2-1: USB disconnect, device number 94 [ 1115.616905][T15991] Bluetooth: hci0: command tx timeout [ 1115.900468][ T5826] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1116.034557][T18355] trusted_key: encrypted_key: insufficient parameters specified [ 1116.215580][ T5826] usb 2-1: Using ep0 maxpacket: 16 [ 1116.228616][ T5826] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1116.244828][ T5826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1116.702201][ T5826] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1116.828179][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.843869][ T29] audit: type=1326 audit(1739590471.531:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1116.883051][ T5826] usb 2-1: Product: syz [ 1116.887770][ T5826] usb 2-1: Manufacturer: syz [ 1116.903408][ T5826] usb 2-1: SerialNumber: syz [ 1116.914209][ T29] audit: type=1326 audit(1739590471.531:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1116.964512][ T5826] usb 2-1: config 0 descriptor?? [ 1116.969234][ T29] audit: type=1326 audit(1739590471.531:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.003055][ T5826] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1117.034073][ T29] audit: type=1326 audit(1739590471.531:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.044910][ T5826] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1117.110526][ T29] audit: type=1326 audit(1739590471.531:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.187656][ T29] audit: type=1326 audit(1739590471.531:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.270972][T18374] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1117.363653][T15991] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1117.378004][ T29] audit: type=1326 audit(1739590471.531:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.641540][ T29] audit: type=1326 audit(1739590471.531:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.896917][ T29] audit: type=1326 audit(1739590471.634:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1117.920748][ T29] audit: type=1326 audit(1739590471.634:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18365 comm="syz.5.3425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f885d58cde9 code=0x7ffc0000 [ 1118.461579][ T5826] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1118.501306][ T5826] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1118.642079][ T5826] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1118.649291][ T5826] em28xx 2-1:0.0: No AC97 audio processor [ 1118.706606][ T5826] usb 2-1: USB disconnect, device number 95 [ 1118.713228][ T5826] em28xx 2-1:0.0: Disconnecting em28xx [ 1118.742597][ T5826] em28xx 2-1:0.0: Freeing device [ 1118.915626][T18385] Unsupported ieee802154 address type: 0 [ 1118.931747][T18385] netlink: 'syz.4.3431': attribute type 4 has an invalid length. [ 1120.014530][T18390] veth0_vlan: entered allmulticast mode [ 1120.165965][T18398] veth0_vlan: entered allmulticast mode [ 1120.314613][ T5826] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1120.704926][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 1120.733289][ T5826] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1120.771210][ T5826] usb 5-1: config 179 has no interface number 0 [ 1120.777524][ T5826] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1120.822994][ T5826] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1120.847277][ T5826] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1121.045618][ T5826] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1121.056294][ T5826] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1121.069799][ T5826] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1121.076685][ T5826] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1121.412637][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.430596][ T5826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 1121.669635][T18388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.678830][T18388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.708767][ T5826] usb 5-1: USB disconnect, device number 40 [ 1121.714874][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1121.725796][ T5826] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1122.738001][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.744453][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.768253][ T5826] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1122.919864][ T5826] usb 2-1: device descriptor read/64, error -71 [ 1123.177464][ T5826] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1123.328543][ T5826] usb 2-1: device descriptor read/64, error -71 [ 1123.459491][ T5826] usb usb2-port1: attempt power cycle [ 1123.827961][ T5826] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1123.858247][ T5826] usb 2-1: device descriptor read/8, error -71 [ 1125.107565][ T5826] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1125.174506][ T5826] usb 2-1: device descriptor read/8, error -71 [ 1125.739733][ T5826] usb usb2-port1: unable to enumerate USB device [ 1125.902419][T18451] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1125.914918][ T54] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1126.593295][T18453] sctp: [Deprecated]: syz.5.3449 (pid 18453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1126.593295][T18453] Use struct sctp_sack_info instead [ 1127.967159][T18473] wg2 speed is unknown, defaulting to 1000 [ 1128.855229][T18473] lo speed is unknown, defaulting to 1000 [ 1129.233496][T15991] Bluetooth: Wrong link type (-71) [ 1129.329899][T18473] lo speed is unknown, defaulting to 1000 [ 1129.335815][ T5894] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1129.503224][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 1129.521177][ T5894] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1129.546147][ T5894] usb 5-1: config 179 has no interface number 0 [ 1129.552466][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1129.609023][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1129.648618][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.648754][T18473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1129.715136][ T5894] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1129.799405][ T5894] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1129.818958][ T5894] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1129.860246][ T5894] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1129.899785][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.939405][ T5894] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23 [ 1130.608282][T18480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.626117][T18480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.926233][ T5934] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1130.954236][ T5826] usb 5-1: USB disconnect, device number 41 [ 1130.954386][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1130.968529][ T5826] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1131.123411][T18494] overlayfs: missing 'lowerdir' [ 1131.673588][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1131.983563][ T5934] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1132.165780][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1132.294323][ T5934] usb usb4-port1: attempt power cycle [ 1132.586841][T15991] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 1132.679851][ T5934] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1133.037652][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1133.146249][T18509] ceph: No mds server is up or the cluster is laggy [ 1133.416667][ T5934] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1133.442154][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1133.442171][ T29] audit: type=1400 audit(1739590487.040:975): avc: denied { bind } for pid=18496 comm="syz.1.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1133.718889][ T5934] usb 4-1: device not accepting address 88, error -71 [ 1133.727030][ T5934] usb usb4-port1: unable to enumerate USB device [ 1134.342059][ T46] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1134.371456][T18528] ceph: No mds server is up or the cluster is laggy [ 1134.688445][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 1134.712435][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1134.729287][ T46] usb 1-1: config 179 has no interface number 0 [ 1134.786327][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1134.883028][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1134.930348][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3471'. [ 1134.965211][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1135.075351][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1135.314726][ T46] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1135.360459][ T46] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1135.382040][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1135.435555][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.449580][ T46] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input24 [ 1135.581937][T18539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1135.616253][T18539] [U]  [ 1135.975782][T18525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.992753][T18525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.156899][T18543] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1136.183128][T15991] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1136.747817][T18547] wg2 speed is unknown, defaulting to 1000 [ 1137.564394][ T5934] usb 1-1: USB disconnect, device number 88 [ 1137.564539][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1137.578661][ T5934] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1137.756641][ T5867] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1137.777222][T18547] lo speed is unknown, defaulting to 1000 [ 1137.991296][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 1137.997296][ T5867] usb 5-1: device descriptor read/64, error -71 [ 1138.004230][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 1138.073849][T18561] ceph: No mds server is up or the cluster is laggy [ 1138.288614][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 1138.358778][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 1138.408789][ T5867] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1138.635247][ T5867] usb 5-1: device descriptor read/64, error -71 [ 1138.772826][ T5867] usb usb5-port1: attempt power cycle [ 1138.830940][T18547] lo speed is unknown, defaulting to 1000 [ 1138.856409][T18549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3474'. [ 1139.046592][T18572] FAULT_INJECTION: forcing a failure. [ 1139.046592][T18572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1139.094965][T18572] CPU: 0 UID: 0 PID: 18572 Comm: syz.0.3480 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1139.094992][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1139.095001][T18572] Call Trace: [ 1139.095006][T18572] [ 1139.095011][T18572] dump_stack_lvl+0x16c/0x1f0 [ 1139.095030][T18572] should_fail_ex+0x50a/0x650 [ 1139.095047][T18572] _copy_from_user+0x2e/0xd0 [ 1139.095058][T18572] move_addr_to_kernel+0x68/0x160 [ 1139.095070][T18572] __copy_msghdr+0x386/0x470 [ 1139.095084][T18572] copy_msghdr_from_user+0xc2/0x160 [ 1139.095097][T18572] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1139.095110][T18572] ? __lock_acquire+0xcc5/0x3c40 [ 1139.095131][T18572] ___sys_sendmsg+0xff/0x1e0 [ 1139.095145][T18572] ? __pfx____sys_sendmsg+0x10/0x10 [ 1139.095164][T18572] ? trace_lock_acquire+0x14e/0x1f0 [ 1139.095186][T18572] __sys_sendmmsg+0x201/0x420 [ 1139.095201][T18572] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1139.095219][T18572] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1139.095237][T18572] ? fput+0x67/0x440 [ 1139.095250][T18572] ? ksys_write+0x1ba/0x250 [ 1139.095264][T18572] ? __pfx_ksys_write+0x10/0x10 [ 1139.095282][T18572] __x64_sys_sendmmsg+0x9c/0x100 [ 1139.095295][T18572] ? lockdep_hardirqs_on+0x7c/0x110 [ 1139.095306][T18572] do_syscall_64+0xcd/0x250 [ 1139.095319][T18572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1139.095333][T18572] RIP: 0033:0x7fe24cd8cde9 [ 1139.095343][T18572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1139.095353][T18572] RSP: 002b:00007fe24dc7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1139.095364][T18572] RAX: ffffffffffffffda RBX: 00007fe24cfa6080 RCX: 00007fe24cd8cde9 [ 1139.095371][T18572] RDX: 0000000000068000 RSI: 0000400000000f40 RDI: 0000000000000006 [ 1139.095377][T18572] RBP: 00007fe24dc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1139.095383][T18572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1139.095389][T18572] R13: 0000000000000000 R14: 00007fe24cfa6080 R15: 00007ffddddf7628 [ 1139.095403][T18572] [ 1139.308857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1139.410747][ T5867] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1139.454656][ T5867] usb 5-1: device descriptor read/8, error -71 [ 1139.713059][ T5867] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1139.734750][ T5867] usb 5-1: device descriptor read/8, error -71 [ 1139.865742][ T5867] usb usb5-port1: unable to enumerate USB device [ 1140.336769][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 1140.342799][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 1140.360098][T18579] ceph: No mds server is up or the cluster is laggy [ 1140.971185][T18588] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1140.988316][T15991] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1141.492287][T15971] Bluetooth: hci1: command 0x0406 tx timeout [ 1142.913325][ T29] audit: type=1400 audit(1739590495.917:976): avc: denied { map } for pid=18603 comm="syz.1.3487" path="/proc/sys/net/ipv4/tcp_congestion_control" dev="proc" ino=58500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 1143.648908][ T46] libceph: connect (1)[c::]:6789 error -101 [ 1143.659699][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 1143.671450][T18610] ceph: No mds server is up or the cluster is laggy [ 1144.151921][T18616] ceph: No mds server is up or the cluster is laggy [ 1144.160951][ T5826] libceph: connect (1)[c::]:6789 error -101 [ 1144.166987][ T5826] libceph: mon0 (1)[c::]:6789 connect error [ 1144.631920][T18629] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1146.055428][T18642] nbd: illegal input index 1717991472 [ 1146.405513][ T5934] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1146.572412][T18651] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3499'. [ 1146.822357][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 1146.829408][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1146.841100][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1146.856425][ T5934] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1146.865688][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.874492][ T5934] usb 4-1: Product: syz [ 1146.899601][ T5934] usb 4-1: Manufacturer: syz [ 1146.950125][ T5934] usb 4-1: SerialNumber: syz [ 1146.960077][ T5934] usb 4-1: config 0 descriptor?? [ 1146.970931][ T5934] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1146.985092][ T5934] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1147.028854][T18655] wg2 speed is unknown, defaulting to 1000 [ 1147.281942][ T5867] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1147.508405][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 1147.715963][T18660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3502'. [ 1147.834719][T18655] lo speed is unknown, defaulting to 1000 [ 1147.838558][ T5867] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1147.850276][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.858306][ T5867] usb 2-1: Product: syz [ 1147.865037][ T5867] usb 2-1: Manufacturer: syz [ 1147.870179][ T5867] usb 2-1: SerialNumber: syz [ 1147.887630][ T5867] usb 2-1: config 0 descriptor?? [ 1147.910007][ T5867] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1147.929521][ T5867] usb 2-1: Detected FT-X [ 1148.127115][ T5867] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1148.229928][T18655] lo speed is unknown, defaulting to 1000 [ 1148.273479][T18666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1148.306827][T18657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3501'. [ 1148.640995][ T5867] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1148.692673][ T5934] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1148.705106][T18671] trusted_key: encrypted_key: insufficient parameters specified [ 1148.736211][ T5934] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1148.744318][ T5934] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1148.776021][ T5934] em28xx 4-1:0.0: No AC97 audio processor [ 1148.827110][ T5934] usb 4-1: USB disconnect, device number 89 [ 1148.836155][ T46] usb 2-1: USB disconnect, device number 100 [ 1148.861401][ T5934] em28xx 4-1:0.0: Disconnecting em28xx [ 1148.906226][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1148.916985][ T5934] em28xx 4-1:0.0: Freeing device [ 1148.945337][ T46] ftdi_sio 2-1:0.0: device disconnected [ 1150.394748][ T29] audit: type=1400 audit(1739590502.913:977): avc: denied { audit_read } for pid=18684 comm="syz.1.3508" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1150.777780][ T29] audit: type=1326 audit(1739590503.269:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18689 comm="syz.0.3510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe24cd8cde9 code=0x0 [ 1151.994387][T18703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3511'. [ 1152.105806][T18708] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1152.105806][T18708] The task syz.1.3508 (18708) triggered the difference, watch for misbehavior. [ 1152.167237][T18713] bond0: entered promiscuous mode [ 1152.252974][T18713] bond_slave_0: entered promiscuous mode [ 1152.274455][T18713] bond_slave_1: entered promiscuous mode [ 1152.627041][T10575] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1152.645678][ T29] audit: type=1400 audit(1739590505.018:979): avc: denied { read } for pid=18725 comm="syz.1.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1152.731650][T15971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1152.741664][T15971] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1152.750466][T15971] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1152.758242][T15971] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1152.765767][T15971] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1152.774232][T15971] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1152.851744][T10575] usb 5-1: Using ep0 maxpacket: 8 [ 1152.852933][T18728] wg2 speed is unknown, defaulting to 1000 [ 1152.877172][T10575] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1152.885797][T10575] usb 5-1: config 179 has no interface number 0 [ 1152.892168][T10575] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1152.903915][T10575] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1152.915562][T10575] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1152.927073][T10575] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1152.937342][T10575] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1152.950892][T10575] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1152.957895][T10575] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1152.967843][T10575] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.988571][T10575] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input25 [ 1153.108529][ T2143] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1153.239870][T18728] lo speed is unknown, defaulting to 1000 [ 1153.280426][T18721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.299837][T18721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.337000][ T46] usb 5-1: USB disconnect, device number 46 [ 1153.342984][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1153.353687][ T46] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1153.375612][ T2143] usb 2-1: Using ep0 maxpacket: 16 [ 1153.383931][ T2143] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1153.395216][ T2143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.418151][ T2143] usb 2-1: Product: syz [ 1153.422337][ T2143] usb 2-1: Manufacturer: syz [ 1153.437749][ T2143] usb 2-1: SerialNumber: syz [ 1153.462965][ T2143] usb 2-1: config 0 descriptor?? [ 1153.874188][T18728] lo speed is unknown, defaulting to 1000 [ 1154.183847][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 1154.192999][T18737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3519'. [ 1154.216198][ T2143] usb 2-1: can't set first interface for hiFace device. [ 1154.250600][ T2143] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1154.308811][ T2143] usb 2-1: USB disconnect, device number 101 [ 1154.462434][T18743] x_tables: duplicate underflow at hook 1 [ 1154.471181][T18728] chnl_net:caif_netlink_parms(): no params data found [ 1154.664685][T18728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.696378][T18728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.723167][T18728] bridge_slave_0: entered allmulticast mode [ 1154.862750][T18728] bridge_slave_0: entered promiscuous mode [ 1154.870419][T18728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.910524][T18728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.918205][T18728] bridge_slave_1: entered allmulticast mode [ 1154.925253][T18728] bridge_slave_1: entered promiscuous mode [ 1155.119654][T15971] Bluetooth: hci4: command tx timeout [ 1156.012922][T18728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.661393][T18728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.739989][T18728] team0: Port device team_slave_0 added [ 1156.777390][T18728] team0: Port device team_slave_1 added [ 1156.874383][T18728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1156.889521][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.915402][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.928058][T18728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1156.942640][T18728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1156.973633][T18728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1156.999567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1157.012828][T18728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.301564][T15971] Bluetooth: hci4: command tx timeout [ 1157.928876][T18777] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1158.335861][ T2143] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1158.354996][T18728] hsr_slave_0: entered promiscuous mode [ 1158.386687][T18728] hsr_slave_1: entered promiscuous mode [ 1158.408645][T18785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1158.409874][T18728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.587039][T18728] Cannot create hsr debugfs directory [ 1158.763577][ T2143] usb 2-1: Using ep0 maxpacket: 16 [ 1158.787208][ T2143] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1158.978234][ T2143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.986325][ T2143] usb 2-1: Product: syz [ 1158.990555][ T2143] usb 2-1: Manufacturer: syz [ 1158.995158][ T2143] usb 2-1: SerialNumber: syz [ 1159.001495][ T2143] usb 2-1: config 0 descriptor?? [ 1159.340954][T18773] dlm: no local IP address has been set [ 1159.346608][T18773] dlm: cannot start dlm midcomms -107 [ 1159.527371][T15971] Bluetooth: hci4: command tx timeout [ 1159.549496][ T2143] usb 2-1: can't set first interface for hiFace device. [ 1159.619828][ T2143] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1159.632158][T18769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1159.641055][T18769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1159.652835][ T2143] usb 2-1: USB disconnect, device number 102 [ 1160.502163][T18728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1160.681337][T18728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1161.316586][T18728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1161.488907][T18728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1161.779882][T15971] Bluetooth: hci4: command tx timeout [ 1162.054502][T18728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.087548][T18728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.133362][T18818] Cannot find add_set index 0 as target [ 1162.184411][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.191532][T10315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.224833][T10307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.231989][T10307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1162.448028][T18830] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1163.099595][T15971] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1163.685241][T18728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.692681][ T5934] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1164.545795][T18852] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20001 [ 1164.632359][ T5934] usb 2-1: Using ep0 maxpacket: 16 [ 1164.647623][ T5934] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1164.675374][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.683408][ T5934] usb 2-1: Product: syz [ 1164.696761][ T5934] usb 2-1: Manufacturer: syz [ 1164.701385][ T5934] usb 2-1: SerialNumber: syz [ 1164.707733][ T5934] usb 2-1: config 0 descriptor?? [ 1165.593258][T18728] veth0_vlan: entered promiscuous mode [ 1165.854884][ T5934] usb 2-1: can't set first interface for hiFace device. [ 1165.951422][T18728] veth1_vlan: entered promiscuous mode [ 1165.970377][ T5934] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1166.003064][ T5934] usb 2-1: USB disconnect, device number 103 [ 1166.136666][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1166.145556][T18827] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3542'. [ 1166.185418][T18728] veth0_macvtap: entered promiscuous mode [ 1166.279486][ T2143] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1166.717189][T18728] veth1_macvtap: entered promiscuous mode [ 1166.740207][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.755734][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.765950][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.777060][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.787651][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.798257][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.809308][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.820160][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.830772][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.973285][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.993835][ T2143] usb 4-1: Using ep0 maxpacket: 16 [ 1166.997811][T18728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.009353][ T2143] usb 4-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 1167.026185][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.043607][ T2143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.054793][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.063588][ T2143] usb 4-1: Product: syz [ 1167.065985][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.068727][ T2143] usb 4-1: Manufacturer: syz [ 1167.068748][ T2143] usb 4-1: SerialNumber: syz [ 1167.079674][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.100489][ T2143] usb 4-1: config 0 descriptor?? [ 1167.108344][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.119272][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.130064][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.141721][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.151768][T18728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1167.162922][T18728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.174176][T18728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.195771][T18728] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.210368][T18728] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.219136][T18728] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.229363][T18728] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.034245][T18868] dlm: no local IP address has been set [ 1168.039984][T18868] dlm: cannot start dlm midcomms -107 [ 1168.365776][ T2143] usb 4-1: can't set first interface for hiFace device. [ 1168.372762][ T2143] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 1168.436745][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1168.445640][T18861] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3548'. [ 1168.504114][ T2143] usb 4-1: USB disconnect, device number 90 [ 1168.766298][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 1168.795156][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 1168.814332][T17751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.853315][T17751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.931262][T18888] ceph: No mds server is up or the cluster is laggy [ 1169.748252][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 1169.765257][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 1169.831507][T18792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.843247][T18792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.249791][ T2143] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1170.716496][ T2143] usb 2-1: device descriptor read/64, error -71 [ 1171.667222][ T2143] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1172.453871][T18927] x_tables: duplicate underflow at hook 1 [ 1172.814397][ T29] audit: type=1326 audit(1739590523.866:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1173.184700][T18935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1173.526148][ T29] audit: type=1326 audit(1739590523.866:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1173.549819][ T29] audit: type=1326 audit(1739590523.866:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1173.625537][ T29] audit: type=1326 audit(1739590523.866:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1173.650135][ T5934] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1173.741670][ T29] audit: type=1326 audit(1739590523.876:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1173.765072][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.858720][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 1173.863964][ T29] audit: type=1326 audit(1739590523.876:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1174.762018][ T5934] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1174.792108][ T5934] usb 1-1: config 179 has no interface number 0 [ 1174.833767][ T5934] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1174.868206][ T29] audit: type=1326 audit(1739590523.876:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1174.891582][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.920321][ T5934] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1174.985179][ T5934] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1175.056270][ T5934] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1175.066533][ T29] audit: type=1326 audit(1739590523.876:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1175.127951][ T5934] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1175.460140][T18951] x_tables: duplicate underflow at hook 1 [ 1175.469186][ T5934] usb 1-1: config 179 interface 65 has no altsetting 0 [ 1175.476758][ T29] audit: type=1326 audit(1739590523.876:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1175.500250][ T5934] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1175.510301][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.518508][ T29] audit: type=1326 audit(1739590523.885:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz.4.3561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868618cde9 code=0x7ffc0000 [ 1175.582401][ T5934] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input26 [ 1175.843819][T18934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1175.875992][T18934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1175.917658][ T5934] usb 1-1: USB disconnect, device number 89 [ 1175.924391][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1175.946574][ T5934] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1177.643578][T18958] page: refcount:3 mapcount:1 mapping:ffff8880355d9738 index:0x9f pfn:0x11f82 [ 1177.653965][T18958] memcg:ffff8880258a8000 [ 1177.658212][T18958] aops:shmem_aops ino:197 [ 1177.662545][T18958] flags: 0xfff6800002002d(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 1177.673335][T18958] raw: 00fff6800002002d ffffea000047b6c8 ffffea000047e0c8 ffff8880355d9738 [ 1177.681921][T18958] raw: 000000000000009f 0000000000000000 0000000300000000 ffff8880258a8000 [ 1177.690492][T18958] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1177.697772][T18958] page_owner tracks the page as allocated [ 1177.704679][T18958] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 18956, tgid 18955 (syz.1.3573), ts 1176325578560, free_ts 1175964821519 [ 1177.722732][T18958] post_alloc_hook+0x181/0x1b0 [ 1177.727489][T18958] get_page_from_freelist+0xfce/0x2f80 [ 1177.732934][T18958] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1177.738809][T18958] alloc_pages_mpol+0x1fc/0x540 [ 1177.743643][T18958] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1177.749001][T18958] shmem_alloc_folio+0x135/0x160 [ 1177.753924][T18958] shmem_alloc_and_add_folio+0x48e/0xc10 [ 1177.759543][T18958] shmem_get_folio_gfp+0x689/0x1530 [ 1177.764727][T18958] shmem_fault+0x200/0xae0 [ 1177.769130][T18958] __do_fault+0x10a/0x490 [ 1177.773444][T18958] do_pte_missing+0xecf/0x3e10 [ 1177.778190][T18958] __handle_mm_fault+0x1166/0x2c60 [ 1177.783283][T18958] handle_mm_fault+0x3fa/0xaa0 [ 1177.788031][T18958] __get_user_pages+0x773/0x36f0 [ 1177.792957][T18958] populate_vma_page_range+0x27f/0x3a0 [ 1177.798396][T18958] __mm_populate+0x1d6/0x380 [ 1177.802968][T18958] page last free pid 18728 tgid 18728 stack trace: [ 1177.809447][T18958] free_unref_folios+0xa7b/0x1500 [ 1177.814454][T18958] folios_put_refs+0x587/0x7b0 [ 1177.819210][T18958] shmem_undo_range+0x586/0x1170 [ 1177.824151][T18958] shmem_evict_inode+0x3a3/0xba0 [ 1177.829075][T18958] evict+0x409/0x960 [ 1177.832954][T18958] iput+0x52a/0x890 [ 1177.836749][T18958] do_unlinkat+0x5c3/0x760 [ 1177.841148][T18958] __x64_sys_unlink+0xc5/0x110 [ 1177.845892][T18958] do_syscall_64+0xcd/0x250 [ 1177.850381][T18958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.856375][T18958] ------------[ cut here ]------------ [ 1177.861810][T18958] kernel BUG at mm/filemap.c:154! [ 1177.866826][T18958] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1177.873918][T18958] CPU: 0 UID: 0 PID: 18958 Comm: syz.1.3573 Not tainted 6.14.0-rc2-syzkaller-00039-g09fbf3d50205 #0 [ 1177.884655][T18958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1177.894693][T18958] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 1177.900833][T18958] Code: f7 35 ca ff 4c 8d 6b 30 31 ff 89 ee e8 ea 30 ca ff 85 ed 7e 17 e8 e1 35 ca ff 48 c7 c6 80 8c 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 ca 35 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 1177.920421][T18958] RSP: 0018:ffffc9000e8f73b0 EFLAGS: 00010093 [ 1177.926466][T18958] RAX: 0000000000000000 RBX: ffffea000047e080 RCX: ffffc9000e8f7258 [ 1177.934417][T18958] RDX: ffff88801cf90000 RSI: ffffffff81ef9e0e RDI: ffff88801cf90444 [ 1177.942368][T18958] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c4722 [ 1177.950318][T18958] R10: ffffffff90623917 R11: 0000000000012050 R12: ffff8880355d9738 [ 1177.958268][T18958] R13: ffffea000047e0b0 R14: 0000000000000000 R15: ffffc9000e8f7638 [ 1177.966221][T18958] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1177.975132][T18958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1177.981702][T18958] CR2: 00004000003cd000 CR3: 000000000df80000 CR4: 00000000003526f0 [ 1177.989654][T18958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1177.997602][T18958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1178.005550][T18958] Call Trace: [ 1178.008806][T18958] [ 1178.011716][T18958] ? die+0x31/0x80 [ 1178.015426][T18958] ? do_trap+0x232/0x430 [ 1178.019648][T18958] ? filemap_unaccount_folio+0xef/0x860 [ 1178.025177][T18958] ? filemap_unaccount_folio+0xef/0x860 [ 1178.030705][T18958] ? do_error_trap+0xf4/0x230 [ 1178.035364][T18958] ? filemap_unaccount_folio+0xef/0x860 [ 1178.040891][T18958] ? handle_invalid_op+0x34/0x40 [ 1178.045807][T18958] ? filemap_unaccount_folio+0xef/0x860 [ 1178.051333][T18958] ? exc_invalid_op+0x2e/0x50 [ 1178.055992][T18958] ? asm_exc_invalid_op+0x1a/0x20 [ 1178.061003][T18958] ? filemap_unaccount_folio+0xee/0x860 [ 1178.066529][T18958] ? filemap_unaccount_folio+0xef/0x860 [ 1178.072057][T18958] filemap_remove_folio+0xf1/0x250 [ 1178.077151][T18958] truncate_inode_folio+0x49/0x70 [ 1178.082155][T18958] shmem_undo_range+0x36e/0x1170 [ 1178.087102][T18958] ? __pfx_shmem_undo_range+0x10/0x10 [ 1178.092457][T18958] ? __lock_acquire+0xcc5/0x3c40 [ 1178.097382][T18958] ? mark_lock+0xb5/0xc60 [ 1178.101693][T18958] ? __pfx___lock_acquire+0x10/0x10 [ 1178.106874][T18958] ? hlock_class+0x4e/0x130 [ 1178.111356][T18958] ? mark_lock+0xb5/0xc60 [ 1178.115675][T18958] ? __pfx___lock_acquire+0x10/0x10 [ 1178.120855][T18958] ? hlock_class+0x4e/0x130 [ 1178.125335][T18958] ? percpu_counter_add_batch+0xb5/0x1e0 [ 1178.130954][T18958] shmem_evict_inode+0x3a3/0xba0 [ 1178.135873][T18958] ? find_held_lock+0x2d/0x110 [ 1178.140615][T18958] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1178.146053][T18958] ? evict+0x3c8/0x960 [ 1178.150107][T18958] ? __pfx_lock_release+0x10/0x10 [ 1178.155115][T18958] ? lock_acquire+0x2f/0xb0 [ 1178.159601][T18958] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1178.165041][T18958] evict+0x409/0x960 [ 1178.168917][T18958] ? __pfx_evict+0x10/0x10 [ 1178.173316][T18958] iput+0x52a/0x890 [ 1178.177108][T18958] ? __pfx_generic_delete_inode+0x10/0x10 [ 1178.182814][T18958] dentry_unlink_inode+0x29c/0x480 [ 1178.187907][T18958] __dentry_kill+0x1d0/0x600 [ 1178.192483][T18958] dput.part.0+0x4b1/0x9b0 [ 1178.196884][T18958] dput+0x1f/0x30 [ 1178.200502][T18958] __fput+0x51c/0xb70 [ 1178.204469][T18958] ? _raw_spin_unlock_irq+0x23/0x50 [ 1178.209654][T18958] task_work_run+0x14e/0x250 [ 1178.214230][T18958] ? __pfx_task_work_run+0x10/0x10 [ 1178.219324][T18958] ? do_raw_spin_unlock+0x172/0x230 [ 1178.224503][T18958] do_exit+0xad8/0x2d70 [ 1178.228638][T18958] ? get_signal+0x8f7/0x26c0 [ 1178.233225][T18958] ? __pfx_do_exit+0x10/0x10 [ 1178.237804][T18958] ? do_raw_spin_lock+0x12d/0x2c0 [ 1178.242815][T18958] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1178.248191][T18958] do_group_exit+0xd3/0x2a0 [ 1178.252685][T18958] get_signal+0x24ed/0x26c0 [ 1178.257181][T18958] ? __pfx_get_signal+0x10/0x10 [ 1178.262022][T18958] arch_do_signal_or_restart+0x90/0x7e0 [ 1178.267552][T18958] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1178.273687][T18958] ? __pfx___schedule+0x10/0x10 [ 1178.278535][T18958] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1178.284068][T18958] syscall_exit_to_user_mode+0x150/0x2a0 [ 1178.289698][T18958] do_syscall_64+0xda/0x250 [ 1178.294204][T18958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.300092][T18958] RIP: 0033:0x7f33dfb8cde9 [ 1178.304496][T18958] Code: Unable to access opcode bytes at 0x7f33dfb8cdbf. [ 1178.311497][T18958] RSP: 002b:00007f33e0aaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1178.319896][T18958] RAX: 000000000000f33d RBX: 00007f33dfda6080 RCX: 00007f33dfb8cde9 [ 1178.327850][T18958] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1178.335801][T18958] RBP: 00007f33dfc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1178.343754][T18958] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1178.351728][T18958] R13: 0000000000000001 R14: 00007f33dfda6080 R15: 00007ffd524a2cd8 [ 1178.359690][T18958] [ 1178.362688][T18958] Modules linked in: [ 1178.366572][T18958] ---[ end trace 0000000000000000 ]--- [ 1178.372003][T18958] RIP: 0010:filemap_unaccount_folio+0xef/0x860 [ 1178.378145][T18958] Code: f7 35 ca ff 4c 8d 6b 30 31 ff 89 ee e8 ea 30 ca ff 85 ed 7e 17 e8 e1 35 ca ff 48 c7 c6 80 8c 78 8b 48 89 df e8 42 94 11 00 90 <0f> 0b e8 ca 35 ca ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 1178.397747][T18958] RSP: 0018:ffffc9000e8f73b0 EFLAGS: 00010093 [ 1178.403806][T18958] RAX: 0000000000000000 RBX: ffffea000047e080 RCX: ffffc9000e8f7258 [ 1178.411761][T18958] RDX: ffff88801cf90000 RSI: ffffffff81ef9e0e RDI: ffff88801cf90444 [ 1178.419728][T18958] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20c4722 [ 1178.427690][T18958] R10: ffffffff90623917 R11: 0000000000012050 R12: ffff8880355d9738 [ 1178.435654][T18958] R13: ffffea000047e0b0 R14: 0000000000000000 R15: ffffc9000e8f7638 [ 1178.443623][T18958] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1178.452535][T18958] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1178.459102][T18958] CR2: 00004000003cd000 CR3: 000000000df80000 CR4: 00000000003526f0 [ 1178.467056][T18958] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1178.475007][T18958] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1178.482959][T18958] Kernel panic - not syncing: Fatal exception [ 1178.489188][T18958] Kernel Offset: disabled [ 1178.493494][T18958] Rebooting in 86400 seconds..