last executing test programs: 9m36.281666975s ago: executing program 2 (id=519): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200000000000000, 0x0) 9m36.235971943s ago: executing program 2 (id=521): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 9m35.320956203s ago: executing program 2 (id=525): socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$key(0xf, 0x3, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="a97c69bab2f53adb4be70b19f2f8b31fed3a073fdd6427b16efc44c2ebb38efa3d0028b5780a3a3c663fbd7ccd45c229d4853e69ac647e3267d9b0a05516ec3926b04c", 0x43}], 0x1, 0x0, 0xc8}}], 0x1, 0x4000841) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 9m34.969149525s ago: executing program 2 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 9m34.865395895s ago: executing program 2 (id=527): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) setxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 9m34.529569555s ago: executing program 2 (id=528): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 9m19.39142756s ago: executing program 32 (id=528): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 8m58.853031696s ago: executing program 4 (id=658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) 8m57.346109407s ago: executing program 4 (id=664): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x275ab35e02788ca9}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x81, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000780)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) socket$inet(0x2, 0x4, 0x3) syz_fuse_handle_req(r4, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x28, 0x0, 0xfec9, {{0x400005, 0xe6dd, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x55, 0x91a, 0x1008, r9, 0x3bb, '\x00', r10, r3, 0x2, 0x1, 0x2, 0x7, @void, @value, @void, @value}, 0x50) fcntl$lock(r9, 0x5, &(0x7f0000000200)={0x1}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 8m54.797633425s ago: executing program 4 (id=674): r0 = syz_io_uring_setup(0x23be, &(0x7f0000000240)={0x0, 0x0, 0x10102, 0xfffbfffd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8m54.565529734s ago: executing program 4 (id=675): r0 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r0, 0x9, 0x0, &(0x7f0000000040)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) 8m54.158285439s ago: executing program 4 (id=676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0', [{0x20, ','}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1adW[\x0ew\x18\xd4\xf0W\x80\x9c\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe2b^\x8c\xaf\x11\xcc\x87\xbb\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bl\x83w\x81\x8a\xdb\f\xb3y_\x8f\x87y\x7f'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8m49.661515358s ago: executing program 5 (id=691): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSUUID(r3, 0x80111500, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 8m48.461883099s ago: executing program 5 (id=695): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioprio_set$uid(0x3, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = open$dir(0x0, 0x490002, 0x37d) r1 = open_tree(r0, 0x0, 0x1) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0e238a86b018e04", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2ebb203023d89132c1980796d3480bf302680bb6d94cc2ddc4b641c81144696a15b4d88e56d04ec393bf39b3774c70aa01f9aee0fc51897c613f9ed201e53a48b093ea3325ebab77c2d8afcdd9e30fec85fdb932aa067d0f6e891750cd952158d3288fc4cb3a551e6d8f828c6e02ef0e295cbf30390c4566dba8ff971c6d212f4b", 0x81}], 0x1}}], 0x2, 0x4008) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x6, 0x1}}, './file0\x00'}) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$HIDIOCGRAWPHYS(r3, 0x4004480d, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0xca, 0x4, 0x200, 0x7, 0x7ff, 0x47, "7487b7f6a1c3692a746ee78aae7110ae43b033d9c9dc5cfc415f849a6542718578eb9e537b99814bc52ef855e6a9685c329375c1bca2fcb28c535d69feba65a9567041a40fde6ad404561b9cecf6b9f6f01c48611f49a0865a33f57c86facfc24d8a0d237bc5af7047052842281389a97927be9a9d1ee33449b348cedf82eb0cfab7ae7742d91f64ea83cf3f98cffd161427037fe463da7109e46b5156ca4596924cca4707d85395bc8a492494557e8f384de6c75359dd09ee72c41f404d24fc76c0bea5aa9372848c10"}}, 0x1e2) socket$packet(0x11, 0x3, 0x300) read$char_usb(r3, 0x0, 0x0) 8m47.177573632s ago: executing program 5 (id=701): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x0, 0x0, 0x2) 8m47.09890512s ago: executing program 5 (id=702): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x11, 0x80001, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006080)=[{{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/123, 0x7b}], 0x7, &(0x7f00000008c0)=""/131, 0x83}, 0x8}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f0000000a80)=""/120, 0x78}, {&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000b00)=""/41, 0x29}, {&(0x7f0000000ec0)=""/161, 0xa1}, {&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000001040)=""/148, 0x94}, {&(0x7f0000001100)}], 0xa, &(0x7f00000024c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000001280)=""/154, 0x9a}, {&(0x7f0000001340)=""/196, 0xc4}, {&(0x7f00000034c0)=""/164, 0xa4}, {&(0x7f0000003580)=""/126, 0x7e}, {&(0x7f0000003600)=""/165, 0xa5}], 0x5}, 0x6}, {{&(0x7f0000003740)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000003900)=[{&(0x7f0000001440)=""/5, 0x5}, {&(0x7f00000037c0)=""/116, 0x74}, {&(0x7f0000003840)=""/180, 0xb4}], 0x3, &(0x7f0000003940)=""/164, 0xa4}, 0x113}, {{&(0x7f0000003a00), 0x80, &(0x7f0000003e00)=[{&(0x7f0000003a80)=""/71, 0x47}, {&(0x7f0000003b00)=""/183, 0xb7}, {&(0x7f0000003bc0)=""/149, 0x95}, {&(0x7f0000003c80)=""/239, 0xef}, {&(0x7f0000003d80)=""/125, 0x7d}], 0x5, &(0x7f0000003e80)=""/4096, 0x1000}}, {{&(0x7f0000004e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004f00)=""/23, 0x17}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x2, &(0x7f0000005f80)=""/196, 0xc4}, 0x2}], 0x6, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000ebff"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x28af, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x3) fallocate(r4, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 8m30.648246917s ago: executing program 34 (id=702): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket(0x11, 0x80001, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000006080)=[{{&(0x7f0000000400)=@un=@abs, 0x80, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f0000000540)=""/99, 0x63}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000007c0)=""/123, 0x7b}], 0x7, &(0x7f00000008c0)=""/131, 0x83}, 0x8}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000280)=""/16, 0x10}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/199, 0xc7}, {&(0x7f0000000a80)=""/120, 0x78}, {&(0x7f0000000e00)=""/155, 0x9b}, {&(0x7f0000000b00)=""/41, 0x29}, {&(0x7f0000000ec0)=""/161, 0xa1}, {&(0x7f0000000f80)=""/144, 0x90}, {&(0x7f0000001040)=""/148, 0x94}, {&(0x7f0000001100)}], 0xa, &(0x7f00000024c0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000001200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000001280)=""/154, 0x9a}, {&(0x7f0000001340)=""/196, 0xc4}, {&(0x7f00000034c0)=""/164, 0xa4}, {&(0x7f0000003580)=""/126, 0x7e}, {&(0x7f0000003600)=""/165, 0xa5}], 0x5}, 0x6}, {{&(0x7f0000003740)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000003900)=[{&(0x7f0000001440)=""/5, 0x5}, {&(0x7f00000037c0)=""/116, 0x74}, {&(0x7f0000003840)=""/180, 0xb4}], 0x3, &(0x7f0000003940)=""/164, 0xa4}, 0x113}, {{&(0x7f0000003a00), 0x80, &(0x7f0000003e00)=[{&(0x7f0000003a80)=""/71, 0x47}, {&(0x7f0000003b00)=""/183, 0xb7}, {&(0x7f0000003bc0)=""/149, 0x95}, {&(0x7f0000003c80)=""/239, 0xef}, {&(0x7f0000003d80)=""/125, 0x7d}], 0x5, &(0x7f0000003e80)=""/4096, 0x1000}}, {{&(0x7f0000004e80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000005f40)=[{&(0x7f0000004f00)=""/23, 0x17}, {&(0x7f0000004f40)=""/4096, 0x1000}], 0x2, &(0x7f0000005f80)=""/196, 0xc4}, 0x2}], 0x6, 0x2, 0x0) io_setup(0xa, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000ebff"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x28af, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x3) fallocate(r4, 0x0, 0x0, 0x400001) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000240)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xffffffffffffffff, 0xffffffffffffffff, 0xee00) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) 6m28.985492515s ago: executing program 7 (id=1181): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x11, 0x701, 0x70bd26, 0x0, {0xd}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x94b}]}, 0x20}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setpipe(r3, 0x408, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x5, 0x10, 0xf5d, 0x28, "c400523a6f2d960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) 6m26.665930797s ago: executing program 7 (id=1188): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="00060d0000000000000004d60000000000000005000000fa143ba285b61b26110cde4265ab52201830d9cde701bff21760c8755dc4b0a9eb2b0a69507dde016b80403f7cb290ff251a8821996400000000a6872fac6f5af44ee1c6e563b86836f34b01e44c42f0bced45f989daf0f356069951c8f64d05c4021a5e2fa5246cba949df79d4f1a080f025884ac01a9ebaa13b983fb27ec1a721a93d44939abb19f7f9878ef02ef34c4db965e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m22.05891858s ago: executing program 7 (id=1209): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124c2520cc172010bfb4010203010902120001000000000904"], 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000802, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5090108}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x200000) read$usbmon(r7, &(0x7f0000001a00)=""/4096, 0x1000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 6m16.745506288s ago: executing program 7 (id=1216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x11, 0x701, 0x70bd26, 0x0, {0xd}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x94b}]}, 0x20}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) fcntl$setpipe(r3, 0x408, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000180)={0x5, 0x10, 0xf5d, 0x28, "c400523a6f2d960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) 6m13.901489388s ago: executing program 7 (id=1227): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="530000000700004600ed3c6a717ac2501b4c07bf81f2f3d81817e1df3cd270971fb520d7231087fdbb76eb67da42b742a7cce35b52eaf0c49996ec89da65d676650a"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') 6m13.401597399s ago: executing program 7 (id=1230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 5m57.009713807s ago: executing program 35 (id=1230): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) write(r0, &(0x7f0000000040)="09000000010000", 0x7) 9.387065349s ago: executing program 6 (id=2416): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x24004884) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0x0, 0x5, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x3966, 0x6, 0x0, 0x0, r2, r3, 0xe, 0x30004}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x210060, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d3078303030303030303030303030346532342c73713d3078303030303030303030303030303030312c72713d3078303030303030303030303030303366662c72713d3078303030303030303030303030303030322c63616368657461673d002c73713d3078303030303030303030303030613434662c72713d3078666666666666666666666666623066392c74696d656f75743d3078303030303030303030303030396336302c74696d656f75743d3078303030303030303030303030303030382c6f626a5f757365723dffff2c657569643d", @ANYRESDEC=r2, @ANYBLOB=',uid=', @ANYRESDEC=r5, @ANYBLOB='N\x00']) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socket(0x10, 0x2, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000340)=0x11) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r10, &(0x7f0000000040), 0xc) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r11, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r10, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000010c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe7a27152fc354665ae1e33dffa150873b4f5d80eb4881a5b98cb9f225d602392fa16d0bdcc09b5063087117502d8c24f1fe9c34c4d4a6a3aa700"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000680)=[{0x6, 0xd, 0x1, 0x7fff0000}, {0x1, 0x9, 0x1, 0x7}, {0xb, 0x6, 0x8, 0x8}]}) 9.153411333s ago: executing program 0 (id=2417): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000600012800b00010067656e65766500005000028005000800010000000500090001000000050009000000000005000c"], 0x80}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x400}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$radio(&(0x7f0000000180), 0x1, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40802, &(0x7f00000001c0)={0x11, 0xf7, r8, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x14) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009974, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'bond0\x00', 0x1000}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000c00000000000c000180060006008e", @ANYRESDEC, @ANYRES16=r10, @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) dup(r1) 8.7894801s ago: executing program 6 (id=2420): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x2c}, 0x1, 0xe703000000000000}, 0x0) 8.582300221s ago: executing program 6 (id=2422): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500"], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.80213186s ago: executing program 0 (id=2424): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124c2520cc172010bfb4010203010902120001000000000904"], 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5090108}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 7.551038032s ago: executing program 6 (id=2425): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x1000, 0x3f2f0fde) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000124c2520cc172010bfb4010203010902120001000000000904"], 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5090108}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400000c0}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc) add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000019c0)='s', 0x1, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 7.429329382s ago: executing program 1 (id=2427): ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a09040000000000df0000020000002c000480280001800e000100636f6e6e6c696d697400000014000280080002400000000108000140000000050900010073797a30000000000900020073797a32000000001400000011000100"/126], 0x80}}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000300)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x0}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="20000021ad2810f4b39e99", @ANYRES16], 0x20}, 0x1, 0x40030000000000, 0x0, 0x20004000}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x8040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r4) sendmsg$NET_DM_CMD_START(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) syz_open_dev$evdev(0x0, 0x1, 0x2080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 7.086286179s ago: executing program 1 (id=2428): syz_80211_inject_frame(0x0, 0x0, 0xb5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) personality(0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffa9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000956900000000000a40000000160a03020000000000000000020000000900020073797a3000000000090001"], 0x68}}, 0x0) syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB], 0x17d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 6.638907078s ago: executing program 8 (id=2430): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x3a456e1aebe75a0c) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) (async) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000000)={'geneve0\x00', {0x2, 0x4e20, @multicast1}}) sendmmsg(r2, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800ff000040"]) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x4, 0x7, 0x9, 0x2}) (async) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x4e170000) write$selinux_load(r8, 0x0, 0x7c2) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x208080, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000001c0)={r1, r7, 0x0, 0x1, 0x1, 0xfffffff9, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xfffffffa}) 6.243007688s ago: executing program 1 (id=2431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x449b}, 0x0) r0 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000001b00)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x2, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfffffffc}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x104}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r7, 0xaea2, 0xfffffffffffffffc) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.173221797s ago: executing program 8 (id=2432): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de2010203010902120001000000000904000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000002f520edc44ca2f0e57b6573939f4484bc076b7281802800e76b0c46537777e1bd2a097d7c65d76011619122f98e0ebbcd0e7178f49d4fad2666a1c4714b732f9c1d5e447183d2e0d52fad71bda0570cee23943ce56b19acf4a03c5ed904f28fb9496b54b071b4d26b65ecae63973b47b306b2af4db43230cf20efc9ee1174ea16361280316"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000414723c"], &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0xa37}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000002c0)={0x40, 0x18, 0x27, "ec45e5abff6882887f1ab76a1b550b58bbc0c781d71dd42c2bc172b652d0358a0cad51d0a0e70a"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x1}, 0x0, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1}}) 5.556419894s ago: executing program 0 (id=2433): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x141a82, 0x0) write$char_usb(r0, &(0x7f0000000240)="96", 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r3 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r3}, &(0x7f0000044000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) r4 = getpid() waitid(0x1, r4, &(0x7f0000000040), 0x1, &(0x7f00000001c0)) 5.448045098s ago: executing program 6 (id=2434): r0 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x7f, 0x2a82) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[], 0x0) io_uring_setup(0x4519, &(0x7f0000000140)={0x0, 0x8510, 0x8000, 0x0, 0xf3}) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$int_in(r1, 0x73, &(0x7f0000001840)=0x4) sched_setscheduler(0x0, 0x1, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0xb6, "0f4fd30a9f515b8c0155592869edbdc95a07d4bd69156c13a95cc17c12b7629a711f3d803a9273f9c03902896c7e0e43cf5709270be150412f5d1a0058b9a0638af2da4bb1c9bc2bdfeeea1db32efb199f8d73ca7a1e7a71e5952177b574a1c25990da19fb4e78b78b07e0e0882c7b83c6625f94c07d63bf52cd5d0cf6b4ddc0021a21cace2df5947158808c4ce325fabc0d6923ef3df0e563a865a90749c3a1d2282773ed8cfd525d539324223e6be29877e17345c6"}, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r3, 0xb) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e80200000000000029"], 0x2e8}}], 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r0}, 0x18) 5.195793031s ago: executing program 1 (id=2435): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$loop(&(0x7f0000000540), 0x5, 0x46780) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) ioctl$LOOP_SET_DIRECT_IO(r0, 0x40081271, 0x591) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000380)={0x1, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x1, 0x3}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000029c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000640)="035a41b22fc58d72005c4d374282a87ed10d592bb998807540fcc0ac0ba1630a7905bbf6baf552caef9b35d327bd84fc0569a0cffacb434e949cb50305f163cd1f429abfb05df7d9d2df5a35416b47fa1b302852583261b1ba3d55ad5cf55c749d70d8c2a6f6f45f2b796167fa49ac84f80f915d6c0a37449daa569351d5447651304ffbb8a8265e209d1f6bb66a611375bd777f8bf8ade729d59ca52b42e960a660dc924e4fafad3409dcd28beb", 0xae}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000240)=0xfffc) r5 = creat(0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) 4.065648192s ago: executing program 3 (id=2437): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000280)={0x0, 0x1ffefe, 0x800, 0x7fffb}, &(0x7f0000000200), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000001cc0)=[{0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, {0xb, 0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f00000004c0)=""/231, 0xe7}, {&(0x7f00000005c0)=""/101, 0x65}, {&(0x7f0000000640)=""/58, 0x3a}, {&(0x7f0000001d40)=""/180, 0xb4}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/209, 0xd1}, {&(0x7f00000000c0)=""/36, 0x24}, {&(0x7f0000000740)=""/168, 0xa8}], &(0x7f0000000680)=[0x40, 0x9, 0x9874, 0xffffffffffff7fff, 0x5, 0x8001]}, {0x0, 0x0, 0x0, &(0x7f0000001b40), &(0x7f0000001b80)=[0x100000005, 0x8, 0x8]}, {0x0, 0x1, 0x0, &(0x7f0000001c40), &(0x7f0000001c80)=[0x101, 0x7, 0xb]}], 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002c00)=""/102400, 0x19000) r2 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x0, 0x3c48, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket$inet6_udp(0xa, 0x2, 0x0) ioperm(0x0, 0x7, 0x7) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r3) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x21) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) 3.514770162s ago: executing program 6 (id=2438): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000100)=0x2, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000002f520edc44ca2f0e57b6573939f4484bc076b7281802800e76b0c46537777e1bd2a097d7c65d76011619122f98e0ebbcd0e7178f49d4fad2666a1c4714b732f9c1d5e447183d2e0d52fad71bda0570cee23943ce56b19acf4a03c5ed904f28fb9496b54b071b4d26b65ecae63973b47b306b2af4db43230cf20efc9ee1174ea16361280316"], 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x32, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x1, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x1, 0x0, 0x1, 0xfd, 0x100, @void}, "36a8c7bc"}}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x2c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x9, 0x0, 0x1ff, 0x2641bef, 0x3]}, &(0x7f0000000200)=0x54) sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.93528716s ago: executing program 3 (id=2439): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0xfffc, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) 2.864904657s ago: executing program 8 (id=2440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20202, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) iopl(0x3) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x42040, 0x123) openat(r5, &(0x7f0000000140)='./file0/file0/file0\x00', 0x80, 0x15d) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r7, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x100000000000000, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 2.817277369s ago: executing program 1 (id=2441): syz_80211_inject_frame(0x0, 0x0, 0xb5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) personality(0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffa9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000956900000000000a40000000160a03020000000000000000020000000900020073797a3000000000090001"], 0x68}}, 0x0) syz_emit_vhci(&(0x7f0000000f80)=ANY=[@ANYBLOB], 0x17d) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.816697878s ago: executing program 3 (id=2442): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = getpid() r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0xf888, 0x80, 0x1, 0x5, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x46, 0x2f, 0x0, @private=0xa010101, @broadcast}}}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x1ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, 0x0) iopl(0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r3, 0x4ee7000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x11, 0x0, 0x6}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) 2.611514552s ago: executing program 8 (id=2443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @local}}) ioperm(0x8, 0x1, 0x7fffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae09, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xfffffffffffffe24) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019700)=""/102390, 0x18ff6) getpriority(0x2, 0x0) preadv(r3, 0x0, 0x0, 0xffffffff, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045503, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) socket$inet(0x2, 0x2, 0x965) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x101000) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) 2.20590081s ago: executing program 0 (id=2444): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000680)) 2.116000552s ago: executing program 8 (id=2445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)="14", 0x1}, {&(0x7f0000000380)="21c5741a6d8ef804a1c59b401e5990077d19e5fc59120021a7fe2f7902f131746373376ba35a950f8e92e27d9cfcb1c70192b2f0f670d8c724ab54024a15b2c0b88dd4561b4a5a343fa2fcaaf8e6756519d9aeb0308afab97ade71e4becb38f92af4becf714d58133961183c2f390796822160dcb995ee4f66ffb790bbd713cb3e7e55364d3acfa4919287b879cc97e36b9db8efd599cefe395dec0b60cef1db23ce85717867ee0065ccbb34b9d7", 0xae}, {&(0x7f0000000180)}, {&(0x7f0000001300)="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", 0xeb2}], 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0xfff], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0, 0x10100}) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000ee4"], 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r7, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x0, 0x1000, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r8, 0x0, 0x81, 0xf80, &(0x7f0000000700)="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", 0x4}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000001000000b70300000000e3760000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 2.081398478s ago: executing program 3 (id=2446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x5f6a1000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) 1.771872169s ago: executing program 3 (id=2447): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000040)={{0x7, 0x2}, {0x3, 0x9}, 0x2, 0x2, 0x4}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.748838957s ago: executing program 0 (id=2448): socket(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c20000000000000000088100200086dd6000040000442f00fe800000000000000000000000000000fe8000000000000000000000000000aa042065580000000000000800000086dd890288be00000000100000000100000000000000080022eb0000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r3, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0xf000) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f00000004c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), 0xffffffffffffffff, 0x2}}, 0x18) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x140c, 0x200, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x40000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000440)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r6, &(0x7f0000000040), &(0x7f0000000900)=ANY=[@ANYBLOB="004b7262b23e50e3ce0d5050e88ec8dca3dcd3e27fd2200ca5cd5dc457f1f3ed1aad1fd64e802a0b539f26b5ad7f96ab3a9acb0ee475f914ad62708c61b84931a8487d01091b3f3c366f6b2aaf115a1ea9dd35d0d0ac9f2e75dd5f677190016cc3566ebe0ea8a41eaf4973efa62ffef1aa1897af77ffe41b29619896cd7f49fec9e77923fc325bc91e17a1df763028d0b9ca68b1"], 0xfe49, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x27, 0x0, &(0x7f00000001c0)="000000c900000000000000000000d3d64d514f69f65a617db81606f5b3386c564efbcf574833bf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd}, 0x50) 1.74796301s ago: executing program 1 (id=2449): socket$kcm(0x11, 0x3, 0x0) r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_vhci(&(0x7f00000014c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x9, 0xc8, 0x80, 0x8241}}}, 0x9) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x111400, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000003c0)={0x3, 0xb, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3b, 0x4}) sendmmsg$unix(r2, &(0x7f0000000dc0)=[{{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000580)="310985d05272dc93fb4f95a3d594d5f647bdf4f4d7db2bc11d4513bc2afa9e0884998d74eca74c59d8c10e8fbdd65cf2f09f81a0e3567b887490668e323d7368fce03c195c0123522305303101436e6d2b31b15c88044cf7d993d4f249758d3cbbc3f3d0db57d335033003d3b7ba555bb2ed42f1f4874f20792956576fe7aa0aaeb3d2098bd893516915ff7367f3d98498ca6e595aa9409ad2b3c3ad3021c988376617e36e50857bc72ef785ad020d2c04fdbefed1b0e69960dfe3cce9fe37fd031cb0bce6627f1c9f87c053e08bb9f44a49e126bb2b06afe81a067eb4", 0xdd}, {&(0x7f0000000680)="66687f328431c38b18400270675c6676785546a28107868bdd96e6aac87a060f8107629bf5177b646896eed1b24d2a83dc70b95389c9ae7392caf83cd015b9c7288060f64ff5524e04ed66244e83d0581a77678a62ede4ae00899c37f981c5e1b65e9ac8ea2267f2414cdadd4a91042867624ec0880e11750c2fe1216086418eb8eb2069b2542c934076a2bff62718cf4690f690db7f719a0b3d4909a3cea01e88f813279b92876515842cf975bf27e4c9af46561ec54fe1da0bb9682596cdd2d1d2e9324481bc6b759a6e267ff51dbdcfa8a95bafc0b25f1e8ea7994672ec271e6274b38f907743c4f9bd660b2e8fe7243b1eb87bcb74", 0xf7}, {&(0x7f00000002c0)="0210218bdaba08e44094bd5b7b3ed9c8ae644566489b713bab0fc6be6dfa2f5587829938b1513efe9d8332d23e20ecd6387d19155f8a4410ec8593eccd45fcb353345e75097b3d644a12c620e7fe047950acb48e0e86d249e569675aa75b0003ff713723", 0x64}], 0x4, &(0x7f0000000c40)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, r3]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r0]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}], 0x148}}], 0x1, 0x4080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fspick(0xffffffffffffff9c, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, &(0x7f0000000000), &(0x7f0000000280)=0x4) getuid() sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0xc0044dff, &(0x7f0000004000)) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, 0x0) 384.182264ms ago: executing program 8 (id=2450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x243, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ef7ffffff9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x40000, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'rose0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x1b, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33"}, &(0x7f0000000200)=0x23) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000280)={r5, 0xa508}, &(0x7f0000000340)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x7c, 0x20000, {r2}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x180}) 333.332312ms ago: executing program 3 (id=2451): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x28, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r4, 0x106, 0x1, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4) syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000000440), &(0x7f0000000100)) r6 = socket(0x2c, 0x800, 0x800) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) read(r6, &(0x7f00000002c0)=""/183, 0xb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='/\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x600, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 0s ago: executing program 0 (id=2452): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r1 = dup(0xffffffffffffffff) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, r2}, 0x18) write$FUSE_DIRENTPLUS(r1, 0x0, 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000140)=ANY=[], 0x10) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0x4, 0x790d, 0x2, 0x8}) write$FUSE_DIRENTPLUS(r1, 0x0, 0xa8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180a00000000000000000000006ad8fca908fc1ecd000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x8, 0x40) syz_usb_disconnect(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r8, 0x400, 0x0) close(r8) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000d00"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x44}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x2, 0xb, 0x1}}, 0x30) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0200000004000700080000000100000080000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRESHEX=r0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000000), &(0x7f0000000680)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000004000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa10000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000de98000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) kernel console output (not intermixed with test programs): 28 bytes leftover after parsing attributes in process `syz.3.1971'. [ 651.915274][ T5875] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 651.924440][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.934264][ T5875] usb 1-1: Product: syz [ 651.939619][ T5875] usb 1-1: Manufacturer: syz [ 651.945426][ T5875] usb 1-1: SerialNumber: syz [ 652.248674][ T5875] usb 1-1: config 0 descriptor?? [ 652.259501][ T5875] appledisplay 1-1:0.0: Could not find int-in endpoint [ 652.270102][ T5869] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 652.279738][ T5875] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 652.287061][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.300251][ T5869] usb 9-1: Product: syz [ 652.308667][ T5869] usb 9-1: Manufacturer: syz [ 652.323018][ T5869] usb 9-1: SerialNumber: syz [ 652.336565][ T5869] r8152-cfgselector 9-1: Unknown version 0x0000 [ 652.349501][ T5869] r8152-cfgselector 9-1: config 0 descriptor?? [ 652.603012][ T5930] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 652.664833][T13317] tmpfs: Bad value for 'nr_blocks' [ 652.681156][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1968'. [ 652.692447][ T5869] usb 1-1: USB disconnect, device number 74 [ 652.700652][ T30] audit: type=1400 audit(1745322773.116:1345): avc: denied { accept } for pid=13316 comm="syz.0.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 652.980863][T13342] overlayfs: missing 'lowerdir' [ 653.372329][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 653.378983][ T5930] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 653.387945][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.398198][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.410028][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.419366][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.539879][ T5930] usb 2-1: Product: syz [ 653.544251][ T5930] usb 2-1: Manufacturer: syz [ 653.548892][ T5930] usb 2-1: SerialNumber: syz [ 653.910968][ T30] audit: type=1400 audit(1745322774.070:1346): avc: denied { ioctl } for pid=13344 comm="syz.0.1976" path="socket:[40322]" dev="sockfs" ino=40322 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 654.048594][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.057294][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.288795][ T5930] usb 2-1: 0:2 : does not exist [ 654.753772][ T973] r8152-cfgselector 9-1: USB disconnect, device number 30 [ 655.066154][T13361] xt_hashlimit: size too large, truncated to 1048576 [ 656.119214][ T5930] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 656.214749][ T5930] usb 2-1: USB disconnect, device number 62 [ 656.235415][ T5937] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 656.254078][ T5825] block nbd1: Receive control failed (result -107) [ 656.374034][T13377] nbd1: detected capacity change from 0 to 32 [ 656.643901][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 656.728529][ T5937] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 656.760144][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.776548][ T5937] usb 4-1: Product: syz [ 656.783254][ T5937] usb 4-1: Manufacturer: syz [ 656.803632][ T5937] usb 4-1: SerialNumber: syz [ 656.824770][ T5937] usb 4-1: config 0 descriptor?? [ 657.021132][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 657.178453][ T973] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 657.366804][ T973] usb 7-1: Using ep0 maxpacket: 32 [ 657.402002][ T973] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 657.422483][ T973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.750012][ T973] usb 7-1: Product: syz [ 657.754263][ T973] usb 7-1: Manufacturer: syz [ 657.759225][ T973] usb 7-1: SerialNumber: syz [ 657.766926][ T973] usb 7-1: config 0 descriptor?? [ 657.907058][ T5937] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 657.921244][ T5937] usb 4-1: USB disconnect, device number 64 [ 657.936783][T13399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.992846][ T973] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 658.006576][ T973] usb 7-1: USB disconnect, device number 46 [ 658.027868][T13399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.296188][T13404] netlink: 'syz.0.1991': attribute type 3 has an invalid length. [ 658.579093][ T973] libceph: connect (1)[c::]:6789 error -101 [ 658.601715][ T973] libceph: mon0 (1)[c::]:6789 connect error [ 658.739989][T13411] ceph: No mds server is up or the cluster is laggy [ 659.106510][ T5875] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 659.240606][T13424] overlayfs: failed to resolve './file1': -2 [ 659.411050][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 659.463230][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 659.506965][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 659.592563][ T5875] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 659.623580][ T30] audit: type=1400 audit(1745322779.599:1347): avc: denied { read write } for pid=13425 comm="syz.0.1997" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 659.629671][T13429] input: syz0 as /devices/virtual/input/input77 [ 659.649176][ T30] audit: type=1400 audit(1745322779.599:1348): avc: denied { open } for pid=13425 comm="syz.0.1997" path="/379/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 659.675471][ T5875] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 659.675498][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.686198][ T5875] usb 7-1: config 0 descriptor?? [ 659.783180][T13433] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 659.923732][T13416] netlink: 284 bytes leftover after parsing attributes in process `syz.6.1994'. [ 659.936646][ T30] audit: type=1400 audit(1745322779.889:1349): avc: denied { setopt } for pid=13414 comm="syz.6.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 660.174690][ T5869] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 660.275497][ T5875] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 660.335893][ T5875] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 660.510974][ T30] audit: type=1400 audit(1745322780.431:1350): avc: denied { connect } for pid=13444 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 660.764591][ T5869] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 660.776395][ T30] audit: type=1400 audit(1745322780.431:1351): avc: denied { read } for pid=13444 comm="syz.3.2004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 660.800590][ T5869] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.808726][ T5869] usb 9-1: Product: syz [ 660.815529][ T5869] usb 9-1: Manufacturer: syz [ 660.823749][ T5869] usb 9-1: SerialNumber: syz [ 660.834648][ T5869] r8152-cfgselector 9-1: Unknown version 0x0000 [ 660.841024][ T5869] r8152-cfgselector 9-1: config 0 descriptor?? [ 661.467566][ T5937] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 661.646843][ T5937] usb 1-1: Using ep0 maxpacket: 32 [ 661.719111][ T5937] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 661.735483][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.749580][ T5937] usb 1-1: Product: syz [ 661.800384][ T5937] usb 1-1: Manufacturer: syz [ 661.814149][ T5937] usb 1-1: SerialNumber: syz [ 661.825366][ T5937] usb 1-1: config 0 descriptor?? [ 661.979395][T13463] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[13463] [ 662.209930][T13461] syz.1.2008 (13461): /proc/13461/oom_adj is deprecated, please use /proc/13461/oom_score_adj instead. [ 662.237797][ T5937] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 662.257569][ T5937] usb 1-1: USB disconnect, device number 75 [ 662.291313][ T5869] usb 7-1: USB disconnect, device number 47 [ 662.371551][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 662.413686][T13468] input: syz0 as /devices/virtual/input/input79 [ 662.827260][T13466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2009'. [ 662.852228][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 662.868741][T13466] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2009'. [ 663.856934][T13491] lo speed is unknown, defaulting to 1000 [ 663.862941][T13491] lo speed is unknown, defaulting to 1000 [ 663.871722][T13491] lo speed is unknown, defaulting to 1000 [ 663.921553][T13491] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 663.955517][T13491] lo speed is unknown, defaulting to 1000 [ 663.962544][T13491] lo speed is unknown, defaulting to 1000 [ 663.969900][T13491] lo speed is unknown, defaulting to 1000 [ 663.976917][T13491] lo speed is unknown, defaulting to 1000 [ 663.984052][T13491] lo speed is unknown, defaulting to 1000 [ 664.014863][ T91] r8152-cfgselector 9-1: USB disconnect, device number 31 [ 664.095123][ T973] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 664.198386][T13494] sctp: [Deprecated]: syz.1.2018 (pid 13494) Use of int in max_burst socket option deprecated. [ 664.198386][T13494] Use struct sctp_assoc_value instead [ 664.309450][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 664.330629][ T973] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 664.339903][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.367063][ T5930] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 664.387798][ T973] usb 1-1: Product: syz [ 664.392051][ T973] usb 1-1: Manufacturer: syz [ 664.417091][ T973] usb 1-1: SerialNumber: syz [ 664.445554][ T973] usb 1-1: config 0 descriptor?? [ 664.629838][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 664.803933][ T5930] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 664.823489][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.497676][T13498] sctp: [Deprecated]: syz.8.2019 (pid 13498) Use of int in max_burst socket option deprecated. [ 665.497676][T13498] Use struct sctp_assoc_value instead [ 665.555235][ T5930] usb 7-1: Product: syz [ 665.560194][ T5930] usb 7-1: Manufacturer: syz [ 665.564842][ T5930] usb 7-1: SerialNumber: syz [ 665.673922][ T5930] usb 7-1: config 0 descriptor?? [ 665.717969][ T973] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 665.765617][ T973] usb 1-1: USB disconnect, device number 76 [ 665.797282][T13510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13510 comm=syz.1.2021 [ 666.108437][T13509] input: syz0 as /devices/virtual/input/input81 [ 666.213057][ T5930] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 666.223736][ T5930] usb 7-1: USB disconnect, device number 48 [ 667.226212][T13531] ubi: mtd0 is already attached to ubi31 [ 667.292010][ T5875] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 667.409310][ T5930] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 667.529637][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.540886][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 667.550522][ T5875] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 667.560259][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.570937][ T5875] usb 4-1: config 0 descriptor?? [ 667.580164][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 667.588171][ T5930] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 667.597414][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.605586][ T5930] usb 2-1: Product: syz [ 667.609866][ T5930] usb 2-1: Manufacturer: syz [ 667.614638][ T5930] usb 2-1: SerialNumber: syz [ 667.620923][ T5930] usb 2-1: config 0 descriptor?? [ 667.627850][ T5930] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 667.794899][ T5869] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 667.954315][ T5869] usb 7-1: Using ep0 maxpacket: 8 [ 667.963162][ T5869] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 667.972940][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.982194][ T5869] usb 7-1: Product: syz [ 667.986447][ T5869] usb 7-1: Manufacturer: syz [ 667.991204][ T5869] usb 7-1: SerialNumber: syz [ 667.999023][ T5869] usb 7-1: config 0 descriptor?? [ 668.006245][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 668.085927][ T5875] Bluetooth: Can't get version to change to load ram patch err [ 668.095110][ T5875] Bluetooth: Loading patch file failed [ 668.100630][ T5875] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 668.113968][ T5875] usb 4-1: USB disconnect, device number 65 [ 668.825598][T13544] sctp: [Deprecated]: syz.3.2032 (pid 13544) Use of int in max_burst socket option deprecated. [ 668.825598][T13544] Use struct sctp_assoc_value instead [ 669.051024][ T5930] input: sonixj as /devices/platform/dummy_hcd.1/usb2/2-1/input/input82 [ 669.133622][T13548] input: syz0 as /devices/virtual/input/input83 [ 669.449570][ T5937] usb 2-1: USB disconnect, device number 63 [ 669.561112][ T5869] input: sonixj as /devices/platform/dummy_hcd.6/usb7/7-1/input/input84 [ 669.579862][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 669.603359][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 669.711003][T13553] ceph: No mds server is up or the cluster is laggy [ 669.847654][ T5875] usb 7-1: USB disconnect, device number 49 [ 669.898736][ T5869] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 670.165032][ T5869] usb 4-1: device descriptor read/64, error -71 [ 670.648990][ T5869] usb 4-1: new low-speed USB device number 67 using dummy_hcd [ 670.709789][T13581] overlayfs: conflicting lowerdir path [ 670.722504][T13581] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 670.798207][ T5869] usb 4-1: device descriptor read/64, error -71 [ 670.926612][ T5869] usb usb4-port1: attempt power cycle [ 672.351862][ T30] audit: type=1400 audit(1745322791.516:1352): avc: denied { mounton } for pid=13593 comm="syz.1.2046" path="/415/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 672.499984][T13602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2047'. [ 672.610821][ T5869] usb 4-1: new low-speed USB device number 68 using dummy_hcd [ 672.637424][ T5869] usb 4-1: device descriptor read/8, error -71 [ 673.131195][T13602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 673.402379][T13619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.694568][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.721032][T13645] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 675.851782][T13648] ubi: mtd0 is already attached to ubi31 [ 676.763504][ T52] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 676.985791][ T52] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 676.998446][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.007233][ T52] usb 1-1: Product: syz [ 677.018371][ T52] usb 1-1: Manufacturer: syz [ 677.027549][ T5930] libceph: connect (1)[c::]:6789 error -101 [ 677.060882][ T5930] libceph: mon0 (1)[c::]:6789 connect error [ 677.070055][ T52] usb 1-1: SerialNumber: syz [ 677.097953][ T52] r8152-cfgselector 1-1: Unknown version 0x0000 [ 677.102761][T13658] ceph: No mds server is up or the cluster is laggy [ 677.107633][ T52] r8152-cfgselector 1-1: config 0 descriptor?? [ 677.210620][ T5825] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 677.222195][T13665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.249555][ T5875] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 678.336858][T13690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 678.346950][ T5869] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 678.388481][ T5875] usb 4-1: device descriptor read/64, error -71 [ 678.516633][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 678.524844][ T5869] usb 2-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0x62, changing to 0x2 [ 678.558308][ T5869] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 678.587068][ T5869] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 0 [ 678.643114][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 678.655443][ T5875] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 678.673283][ T5869] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 678.677016][ T52] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 678.688084][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.699247][ T5869] usb 2-1: Product: syz [ 678.705812][ T5869] usb 2-1: Manufacturer: syz [ 678.727221][ T5869] usb 2-1: SerialNumber: syz [ 678.736329][ T5869] usb 2-1: config 0 descriptor?? [ 678.749239][ T5869] gs_usb 2-1:0.0: Required endpoints not found [ 678.806690][ T5875] usb 4-1: device descriptor read/64, error -71 [ 678.882026][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 678.893456][ T52] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 678.908968][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.917444][ T52] usb 7-1: Product: syz [ 678.921626][ T52] usb 7-1: Manufacturer: syz [ 678.926255][ T52] usb 7-1: SerialNumber: syz [ 678.932142][ T52] usb 7-1: config 0 descriptor?? [ 678.933805][ T5875] usb usb4-port1: attempt power cycle [ 678.969709][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.978421][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.988677][ T5869] usb 2-1: USB disconnect, device number 64 [ 679.449903][ T5875] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 679.473788][ T52] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 679.490257][ T5875] usb 4-1: device descriptor read/8, error -71 [ 679.501003][ T52] usb 7-1: USB disconnect, device number 50 [ 679.756756][ T5875] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 679.778703][ T5875] usb 4-1: device descriptor read/8, error -71 [ 679.817969][ T52] r8152-cfgselector 1-1: USB disconnect, device number 77 [ 680.292674][ T5875] usb usb4-port1: unable to enumerate USB device [ 681.217150][T13715] input: syz0 as /devices/virtual/input/input86 [ 681.991476][ T30] audit: type=1400 audit(1745322800.524:1353): avc: denied { ioctl } for pid=13712 comm="syz.8.2080" path="socket:[42215]" dev="sockfs" ino=42215 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 682.213348][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2080'. [ 682.223997][T13723] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2080'. [ 682.408112][ T973] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 682.619289][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 682.632388][ T973] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 682.661928][ T973] usb 4-1: config 0 has no interface number 0 [ 682.692599][ T973] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 682.718187][ T52] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 682.771971][ T5937] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 682.792910][ T973] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 682.823967][ T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.832264][ T973] usb 4-1: Product: syz [ 682.836700][ T973] usb 4-1: Manufacturer: syz [ 682.841349][ T973] usb 4-1: SerialNumber: syz [ 682.885678][ T973] usb 4-1: config 0 descriptor?? [ 682.899796][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 682.905466][ T973] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 682.918151][ T973] em28xx 4-1:0.132: Video interface 132 found: [ 682.925710][ T52] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 682.936927][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.947828][ T52] usb 1-1: Product: syz [ 682.952135][ T52] usb 1-1: Manufacturer: syz [ 682.956813][ T52] usb 1-1: SerialNumber: syz [ 682.964788][ T52] usb 1-1: config 0 descriptor?? [ 682.989428][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 683.013928][ T5937] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 683.025117][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.034903][ T5937] usb 7-1: Product: syz [ 683.041183][ T5937] usb 7-1: Manufacturer: syz [ 683.045871][ T5937] usb 7-1: SerialNumber: syz [ 683.057958][ T5937] usb 7-1: config 0 descriptor?? [ 683.081564][T12633] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 683.242021][T12633] usb 2-1: Using ep0 maxpacket: 32 [ 683.332251][ T973] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 683.400058][T12633] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 683.556095][T12633] usb 2-1: config 0 has no interface number 0 [ 683.565503][T12633] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 683.617025][T11061] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 683.623931][T12633] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 683.626783][ T5937] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 683.634583][T12633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.647422][ T5937] usb 7-1: USB disconnect, device number 51 [ 683.667294][T12633] usb 2-1: Product: syz [ 683.678099][T12633] usb 2-1: Manufacturer: syz [ 683.682756][T12633] usb 2-1: SerialNumber: syz [ 683.695187][ T52] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 683.699643][T12633] usb 2-1: config 0 descriptor?? [ 683.705826][ T52] usb 1-1: USB disconnect, device number 78 [ 683.714771][T12633] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 683.726395][T12633] em28xx 2-1:0.132: Video interface 132 found: [ 683.799658][T11061] usb 9-1: Using ep0 maxpacket: 32 [ 683.821607][T11061] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 683.830687][T11061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.838653][T11061] usb 9-1: Product: syz [ 683.842838][T11061] usb 9-1: Manufacturer: syz [ 683.847445][T11061] usb 9-1: SerialNumber: syz [ 683.854649][T11061] usb 9-1: config 0 descriptor?? [ 683.934174][ T973] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 683.946888][ T973] em28xx 4-1:0.132: board has no eeprom [ 684.013570][ T973] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 684.021438][ T973] em28xx 4-1:0.132: analog set to bulk mode. [ 684.027603][ T52] em28xx 4-1:0.132: Registering V4L2 extension [ 684.037804][ T973] usb 4-1: USB disconnect, device number 74 [ 684.045081][ T973] em28xx 4-1:0.132: Disconnecting em28xx [ 684.139700][T11061] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 684.156096][T11061] usb 9-1: USB disconnect, device number 32 [ 684.156761][T12633] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 684.199884][ T52] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 684.207235][ T52] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 684.214348][ T52] em28xx 4-1:0.132: No AC97 audio processor [ 684.226969][ T52] usb 4-1: Decoder not found [ 684.269807][ T52] em28xx 4-1:0.132: failed to create media graph [ 684.298436][ T52] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 684.415320][ T52] em28xx 4-1:0.132: Remote control support is not available for this card. [ 684.427837][ T973] em28xx 4-1:0.132: Closing input extension [ 684.601351][ T973] em28xx 4-1:0.132: Freeing device [ 684.620716][T12633] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 684.727618][T12633] em28xx 2-1:0.132: board has no eeprom [ 684.767673][T13766] input: syz0 as /devices/virtual/input/input87 [ 684.787619][ T30] audit: type=1400 audit(1745322803.133:1354): avc: denied { read } for pid=13761 comm="syz.3.2093" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 684.816104][T12633] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 684.861315][T12633] em28xx 2-1:0.132: analog set to bulk mode. [ 684.880438][ T5869] em28xx 2-1:0.132: Registering V4L2 extension [ 684.892370][T12633] usb 2-1: USB disconnect, device number 65 [ 684.912818][T12633] em28xx 2-1:0.132: Disconnecting em28xx [ 685.180938][ T5869] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 685.195847][ T5869] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 685.214293][ T5869] em28xx 2-1:0.132: No AC97 audio processor [ 685.229917][ T5869] usb 2-1: Decoder not found [ 685.234627][ T5869] em28xx 2-1:0.132: failed to create media graph [ 685.244763][ T5869] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 685.258007][ T5869] em28xx 2-1:0.132: Remote control support is not available for this card. [ 685.340895][T13782] xt_CT: You must specify a L4 protocol and not use inversions on it [ 685.721030][T12633] em28xx 2-1:0.132: Closing input extension [ 685.756121][T12633] em28xx 2-1:0.132: Freeing device [ 685.903616][ T30] audit: type=1400 audit(1745322804.172:1355): avc: denied { rename } for pid=13785 comm="syz.1.2100" name="file0" dev="tmpfs" ino=2474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 686.047168][T12633] kernel write not supported for file /snd/pcmC0D0p (pid: 12633 comm: kworker/0:1) [ 686.184532][ T973] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 686.253358][T13800] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 686.264370][T13800] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 686.273509][T13800] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 686.282644][T13800] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 686.319770][T13800] batman_adv: batadv0: Adding interface: geneve2 [ 686.320832][T11061] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 686.363617][ T973] usb 9-1: Using ep0 maxpacket: 32 [ 686.395730][ T52] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 686.405818][ T973] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 686.457843][T13800] batman_adv: batadv0: Interface activated: geneve2 [ 686.461093][ T973] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.518754][ T973] usb 9-1: Product: syz [ 686.534596][T11061] usb 2-1: Using ep0 maxpacket: 32 [ 686.564088][ T973] usb 9-1: Manufacturer: syz [ 686.577769][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 686.597187][ T973] usb 9-1: SerialNumber: syz [ 686.605462][T11061] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 686.624958][ T52] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 686.635815][T11061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.644608][ T973] usb 9-1: config 0 descriptor?? [ 686.649607][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.661844][T11061] usb 2-1: Product: syz [ 686.666122][ T52] usb 7-1: Product: syz [ 686.670309][T11061] usb 2-1: Manufacturer: syz [ 686.674998][ T52] usb 7-1: Manufacturer: syz [ 686.682234][T11061] usb 2-1: SerialNumber: syz [ 686.690765][ T52] usb 7-1: SerialNumber: syz [ 686.700485][T11061] usb 2-1: config 0 descriptor?? [ 686.707948][ T52] usb 7-1: config 0 descriptor?? [ 687.483470][T11061] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 687.504060][ T52] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 687.520244][T11061] usb 2-1: USB disconnect, device number 66 [ 687.540681][ T52] usb 7-1: USB disconnect, device number 52 [ 687.553569][ T973] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 687.570118][ T973] usb 9-1: USB disconnect, device number 33 [ 687.995896][T13815] sctp: [Deprecated]: syz.0.2108 (pid 13815) Use of int in max_burst socket option deprecated. [ 687.995896][T13815] Use struct sctp_assoc_value instead [ 688.371587][T13818] sctp: [Deprecated]: syz.0.2109 (pid 13818) Use of int in max_burst socket option deprecated. [ 688.371587][T13818] Use struct sctp_assoc_value instead [ 689.634987][T12633] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 690.182190][T12633] usb 7-1: device descriptor read/64, error -71 [ 690.516323][ T5870] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 690.604031][T12633] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 690.833583][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 690.886521][T12633] usb 7-1: device descriptor read/64, error -71 [ 691.130578][T12633] usb usb7-port1: attempt power cycle [ 691.216748][ T5870] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 691.239300][ T5870] usb 9-1: config 0 has no interface number 0 [ 691.323316][ T5870] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 691.332481][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.357790][ T5870] usb 9-1: Product: syz [ 691.368086][ T5870] usb 9-1: Manufacturer: syz [ 691.373476][ T5870] usb 9-1: SerialNumber: syz [ 691.586264][ T5870] usb 9-1: config 0 descriptor?? [ 691.601966][T12633] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 691.610566][ T5870] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 691.637039][T12633] usb 7-1: device descriptor read/8, error -71 [ 691.814552][T13862] ubi: mtd0 is already attached to ubi31 [ 691.896699][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.924186][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.999276][ T5870] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 692.029603][T12633] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 692.309631][T12633] usb 7-1: device descriptor read/8, error -71 [ 692.322891][ T5870] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 692.427457][T12633] usb usb7-port1: unable to enumerate USB device [ 692.537409][T13832] xt_cgroup: path and classid specified [ 692.546211][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 692.568750][ T30] audit: type=1107 audit(1745322810.401:1356): pid=13831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='ä7¢ÙQÿç$+tuÏÓQ±°óÞž”±Ê„ð“$sØ{åU !áÉÑcOîèC}äl®`4Q <|9H' [ 692.598242][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 692.631038][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 692.631377][ T52] usb 9-1: USB disconnect, device number 34 [ 692.663983][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 692.679371][T13873] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.2126'. [ 692.692887][T13873] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.2126'. [ 692.729121][T13873] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.2126'. [ 692.746436][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 692.778487][ T52] quatech2 9-1:0.51: device disconnected [ 692.879680][T13876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2127'. [ 693.167015][T13884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.177784][T11061] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 696.330659][T11061] usb 4-1: device descriptor read/64, error -71 [ 696.502461][ T30] audit: type=1400 audit(1745322814.078:1357): avc: denied { read } for pid=13918 comm="syz.0.2139" laddr=127.0.0.1 lport=52390 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 696.712411][T11061] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 697.992190][T11061] usb 4-1: device descriptor read/64, error -71 [ 698.149226][ T30] audit: type=1400 audit(1745322815.640:1358): avc: denied { listen } for pid=13937 comm="syz.6.2144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 698.206761][T11061] usb usb4-port1: attempt power cycle [ 698.222530][T13935] macvtap1: entered allmulticast mode [ 698.227917][T13935] veth0_macvtap: entered allmulticast mode [ 698.369108][ T5875] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 698.572345][T11061] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 699.465561][T11061] usb 4-1: device not accepting address 77, error -71 [ 699.841833][ T5875] usb 9-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df [ 699.849756][ T30] audit: type=1400 audit(1745322817.005:1359): avc: denied { read write } for pid=13952 comm="syz.6.2146" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 699.851261][ T5875] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.978615][ T30] audit: type=1400 audit(1745322817.258:1360): avc: denied { open } for pid=13952 comm="syz.6.2146" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 700.114163][T13953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.209746][ T5875] usb 9-1: config 0 descriptor?? [ 700.218439][ T5875] gspca_main: benq-2.14.0 probing 04a5:3035 [ 701.127199][ T30] audit: type=1400 audit(1745322817.585:1361): avc: denied { create } for pid=13962 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 701.156897][ T30] audit: type=1400 audit(1745322817.585:1362): avc: denied { write } for pid=13962 comm="syz.1.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 701.188801][ T30] audit: type=1400 audit(1745322817.641:1363): avc: denied { mount } for pid=13962 comm="syz.1.2149" name="/" dev="hugetlbfs" ino=42783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 702.204431][ T30] audit: type=1400 audit(1745322818.418:1364): avc: denied { unmount } for pid=5831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 702.752341][ T5875] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 703.392184][ T9] usb 9-1: USB disconnect, device number 35 [ 703.422389][ T5875] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 703.465875][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.483835][ T5875] usb 4-1: Product: syz [ 703.491551][ T5875] usb 4-1: Manufacturer: syz [ 703.496218][ T5875] usb 4-1: SerialNumber: syz [ 703.515467][ T5875] r8152-cfgselector 4-1: Unknown version 0x0000 [ 703.521742][ T5875] r8152-cfgselector 4-1: config 0 descriptor?? [ 704.190307][T13995] FAULT_INJECTION: forcing a failure. [ 704.190307][T13995] name failslab, interval 1, probability 0, space 0, times 0 [ 704.497497][T13995] CPU: 0 UID: 0 PID: 13995 Comm: syz.0.2159 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 704.497525][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 704.497534][T13995] Call Trace: [ 704.497539][T13995] [ 704.497544][T13995] dump_stack_lvl+0x16c/0x1f0 [ 704.497564][T13995] should_fail_ex+0x512/0x640 [ 704.497576][T13995] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 704.497589][T13995] should_failslab+0xc2/0x120 [ 704.497601][T13995] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 704.497614][T13995] ? __d_alloc+0x31/0xaa0 [ 704.497628][T13995] __d_alloc+0x31/0xaa0 [ 704.497641][T13995] d_alloc_pseudo+0x1c/0xc0 [ 704.497655][T13995] alloc_file_pseudo+0xcf/0x230 [ 704.497682][T13995] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 704.497696][T13995] ? do_raw_spin_unlock+0x172/0x230 [ 704.497711][T13995] __anon_inode_getfile+0xf7/0x370 [ 704.497725][T13995] anon_inode_getfd+0x52/0xb0 [ 704.497736][T13995] btf_new_fd+0x541/0x53a0 [ 704.497753][T13995] ? __pfx_btf_new_fd+0x10/0x10 [ 704.497765][T13995] ? cap_capable+0xb3/0x250 [ 704.497779][T13995] ? bpf_lsm_capable+0x9/0x10 [ 704.497789][T13995] ? security_capable+0x7e/0x260 [ 704.497801][T13995] ? ns_capable+0xd7/0x110 [ 704.497816][T13995] __sys_bpf+0x1adb/0x4d80 [ 704.497831][T13995] ? rcu_is_watching+0x12/0xc0 [ 704.497845][T13995] ? __pfx___sys_bpf+0x10/0x10 [ 704.497862][T13995] ? __schedule+0x1186/0x5de0 [ 704.497887][T13995] ? xfd_validate_state+0x5d/0x180 [ 704.497901][T13995] ? rcu_is_watching+0x12/0xc0 [ 704.497915][T13995] __x64_sys_bpf+0x78/0xc0 [ 704.497929][T13995] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.497942][T13995] do_syscall_64+0xcd/0x260 [ 704.497957][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.497968][T13995] RIP: 0033:0x7f9e7d78e169 [ 704.497977][T13995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.497987][T13995] RSP: 002b:00007f9e7e6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 704.497998][T13995] RAX: ffffffffffffffda RBX: 00007f9e7d9b5fa0 RCX: 00007f9e7d78e169 [ 704.498005][T13995] RDX: 0000000000000020 RSI: 0000200000000d80 RDI: 0000000000000012 [ 704.498011][T13995] RBP: 00007f9e7e6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 704.498017][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 704.498024][T13995] R13: 0000000000000001 R14: 00007f9e7d9b5fa0 R15: 00007ffcfdf604e8 [ 704.498037][T13995] [ 704.763270][T13998] sctp: [Deprecated]: syz.6.2158 (pid 13998) Use of int in max_burst socket option deprecated. [ 704.763270][T13998] Use struct sctp_assoc_value instead [ 705.313277][T14009] overlayfs: missing 'workdir' [ 705.621699][T14013] FAULT_INJECTION: forcing a failure. [ 705.621699][T14013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.635000][T14013] CPU: 1 UID: 0 PID: 14013 Comm: syz.6.2160 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 705.635023][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 705.635034][T14013] Call Trace: [ 705.635040][T14013] [ 705.635047][T14013] dump_stack_lvl+0x16c/0x1f0 [ 705.635075][T14013] should_fail_ex+0x512/0x640 [ 705.635097][T14013] _copy_to_user+0x32/0xd0 [ 705.635120][T14013] simple_read_from_buffer+0xcb/0x170 [ 705.635149][T14013] proc_fail_nth_read+0x197/0x270 [ 705.635177][T14013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.635204][T14013] ? rw_verify_area+0xcf/0x680 [ 705.635227][T14013] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 705.635254][T14013] vfs_read+0x1de/0xc70 [ 705.635282][T14013] ? __pfx___mutex_lock+0x10/0x10 [ 705.635306][T14013] ? __pfx_vfs_read+0x10/0x10 [ 705.635338][T14013] ? __fget_files+0x20e/0x3c0 [ 705.635363][T14013] ksys_read+0x12a/0x240 [ 705.635378][T14013] ? __pfx_ksys_read+0x10/0x10 [ 705.635402][T14013] ? rcu_is_watching+0x12/0xc0 [ 705.635431][T14013] do_syscall_64+0xcd/0x260 [ 705.635456][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.635474][T14013] RIP: 0033:0x7fcdf698cb7c [ 705.635488][T14013] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 705.635504][T14013] RSP: 002b:00007fcdf47b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 705.635521][T14013] RAX: ffffffffffffffda RBX: 00007fcdf6bb6160 RCX: 00007fcdf698cb7c [ 705.635532][T14013] RDX: 000000000000000f RSI: 00007fcdf47b40a0 RDI: 0000000000000007 [ 705.635543][T14013] RBP: 00007fcdf47b4090 R08: 0000000000000000 R09: 0000200000000400 [ 705.635553][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.635563][T14013] R13: 0000000000000000 R14: 00007fcdf6bb6160 R15: 00007ffd0f44a958 [ 705.635587][T14013] [ 706.720750][ T5825] Bluetooth: hci4: unexpected cc 0x042f length: 1 < 7 [ 706.727631][ T5825] Bluetooth: hci4: unexpected event for opcode 0x042f [ 707.667257][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2169'. [ 707.755891][T14027] sctp: [Deprecated]: syz.1.2166 (pid 14027) Use of int in max_burst socket option deprecated. [ 707.755891][T14027] Use struct sctp_assoc_value instead [ 708.430191][T14038] Invalid ELF header magic: != ELF [ 708.635303][T14035] bond0: (slave team0): Releasing backup interface [ 708.662277][ T5875] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 708.705320][T11061] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 708.714624][T14035] team0 (unregistering): Port device team_slave_0 removed [ 708.772316][T14035] team0 (unregistering): Port device team_slave_1 removed [ 708.802817][ T30] audit: type=1400 audit(1745322825.602:1365): avc: denied { listen } for pid=14039 comm="syz.8.2172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 708.931671][ T5875] usb 7-1: Using ep0 maxpacket: 8 [ 708.956200][ T5875] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.009444][ T5875] usb 7-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 709.069128][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.128579][ T5875] usb 7-1: config 0 descriptor?? [ 710.190419][ T5875] apple 0003:05AC:021C.001B: item fetching failed at offset 4/5 [ 710.356816][ T5875] apple 0003:05AC:021C.001B: parse failed [ 710.362947][ T5875] apple 0003:05AC:021C.001B: probe with driver apple failed with error -22 [ 710.446535][ T5875] usb 7-1: USB disconnect, device number 57 [ 710.533347][T14051] ubi: mtd0 is already attached to ubi31 [ 710.804606][T14054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 712.438098][T14082] syz.6.2186: attempt to access beyond end of device [ 712.438098][T14082] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 712.460161][T14082] gfs2: error -5 reading superblock [ 712.523501][T11061] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 712.544921][T12633] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 712.683827][T11061] usb 9-1: Using ep0 maxpacket: 32 [ 712.785606][T11061] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 712.794800][T11061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.801535][T12633] usb 4-1: Using ep0 maxpacket: 32 [ 712.802940][T11061] usb 9-1: Product: syz [ 712.811979][T12633] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 712.812251][T11061] usb 9-1: Manufacturer: syz [ 712.820290][T12633] usb 4-1: config 0 has no interface number 0 [ 713.256360][T12633] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 713.268186][T12633] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 713.278401][T12633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.286507][T12633] usb 4-1: Product: syz [ 713.290654][T12633] usb 4-1: Manufacturer: syz [ 713.295241][T11061] usb 9-1: SerialNumber: syz [ 713.295250][T12633] usb 4-1: SerialNumber: syz [ 713.298213][T12633] usb 4-1: config 0 descriptor?? [ 713.311367][T11061] usb 9-1: config 0 descriptor?? [ 713.358970][T12633] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 713.395233][T12633] em28xx 4-1:0.132: Video interface 132 found: [ 713.689009][ T5937] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 713.781982][T12633] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 713.892835][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 713.926065][ T5937] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 713.935922][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 713.946009][ T5937] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 714.094798][ T5937] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.108017][ T5937] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 714.117407][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.636576][T11061] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -110 [ 714.646253][T14099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 714.659234][T12633] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 714.683013][T12633] em28xx 4-1:0.132: board has no eeprom [ 714.809623][T12633] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 714.835633][T12633] em28xx 4-1:0.132: analog set to bulk mode. [ 714.848319][ T5875] em28xx 4-1:0.132: Registering V4L2 extension [ 714.868164][T12633] usb 4-1: USB disconnect, device number 80 [ 714.878752][T12633] em28xx 4-1:0.132: Disconnecting em28xx [ 715.434303][ T5937] usb 1-1: GET_CAPABILITIES returned 0 [ 715.451630][ T5937] usbtmc 1-1:16.0: can't read capabilities [ 715.492418][ T5937] usb 9-1: USB disconnect, device number 36 [ 715.534766][ T5875] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 715.542664][ T5875] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 715.551431][ T5875] em28xx 4-1:0.132: No AC97 audio processor [ 715.558756][ T5875] usb 4-1: Decoder not found [ 715.563489][ T5875] em28xx 4-1:0.132: failed to create media graph [ 715.569821][ T5875] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 715.577321][ T5875] em28xx 4-1:0.132: Remote control support is not available for this card. [ 715.585949][T12633] em28xx 4-1:0.132: Closing input extension [ 715.594462][T12633] em28xx 4-1:0.132: Freeing device [ 715.597217][T14117] FAULT_INJECTION: forcing a failure. [ 715.597217][T14117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.612634][T14117] CPU: 1 UID: 0 PID: 14117 Comm: syz.6.2194 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 715.612648][T14117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 715.612654][T14117] Call Trace: [ 715.612659][T14117] [ 715.612663][T14117] dump_stack_lvl+0x16c/0x1f0 [ 715.612681][T14117] should_fail_ex+0x512/0x640 [ 715.612695][T14117] _copy_to_user+0x32/0xd0 [ 715.612709][T14117] simple_read_from_buffer+0xcb/0x170 [ 715.612730][T14117] proc_fail_nth_read+0x197/0x270 [ 715.612747][T14117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.612764][T14117] ? rw_verify_area+0xcf/0x680 [ 715.612778][T14117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.612794][T14117] vfs_read+0x1de/0xc70 [ 715.612812][T14117] ? __pfx___mutex_lock+0x10/0x10 [ 715.612827][T14117] ? __pfx_vfs_read+0x10/0x10 [ 715.612847][T14117] ? __fget_files+0x20e/0x3c0 [ 715.612860][T14117] ksys_read+0x12a/0x240 [ 715.612869][T14117] ? __pfx_ksys_read+0x10/0x10 [ 715.612889][T14117] do_syscall_64+0xcd/0x260 [ 715.612905][T14117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.612916][T14117] RIP: 0033:0x7fcdf698cb7c [ 715.612925][T14117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 715.612935][T14117] RSP: 002b:00007fcdf47f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 715.612945][T14117] RAX: ffffffffffffffda RBX: 00007fcdf6bb5fa0 RCX: 00007fcdf698cb7c [ 715.612952][T14117] RDX: 000000000000000f RSI: 00007fcdf47f60a0 RDI: 0000000000000006 [ 715.612966][T14117] RBP: 00007fcdf47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 715.612976][T14117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.612984][T14117] R13: 0000000000000000 R14: 00007fcdf6bb5fa0 R15: 00007ffd0f44a958 [ 715.613004][T14117] [ 715.886027][ T30] audit: type=1400 audit(1745322832.234:1366): avc: denied { bind } for pid=14090 comm="syz.0.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 716.549065][T14129] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2197'. [ 716.561405][ T5825] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 716.571391][T14128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.810149][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.867764][ T5875] usb 1-1: USB disconnect, device number 79 [ 717.887296][ T30] audit: type=1400 audit(1745322834.096:1367): avc: denied { map } for pid=14146 comm="syz.8.2201" path="socket:[43222]" dev="sockfs" ino=43222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 717.949076][ T30] audit: type=1400 audit(1745322834.096:1368): avc: denied { read } for pid=14146 comm="syz.8.2201" path="socket:[43222]" dev="sockfs" ino=43222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 718.055885][T14150] FAULT_INJECTION: forcing a failure. [ 718.055885][T14150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.190501][T14150] CPU: 1 UID: 0 PID: 14150 Comm: syz.0.2202 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 718.190527][T14150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 718.190537][T14150] Call Trace: [ 718.190543][T14150] [ 718.190550][T14150] dump_stack_lvl+0x16c/0x1f0 [ 718.190577][T14150] should_fail_ex+0x512/0x640 [ 718.190600][T14150] _copy_to_user+0x32/0xd0 [ 718.190620][T14150] mousedev_read+0x3a9/0x7d0 [ 718.190645][T14150] ? __pfx_mousedev_read+0x10/0x10 [ 718.190665][T14150] ? inode_security+0x101/0x130 [ 718.190687][T14150] ? __pfx_autoremove_wake_function+0x10/0x10 [ 718.190713][T14150] ? bpf_lsm_file_permission+0x9/0x10 [ 718.190737][T14150] ? security_file_permission+0x71/0x210 [ 718.190760][T14150] ? rw_verify_area+0xcf/0x680 [ 718.190782][T14150] ? __pfx_mousedev_read+0x10/0x10 [ 718.190804][T14150] vfs_read+0x1de/0xc70 [ 718.190834][T14150] ? __pfx_vfs_read+0x10/0x10 [ 718.190857][T14150] ? find_held_lock+0x2b/0x80 [ 718.190879][T14150] ? __fget_files+0x204/0x3c0 [ 718.190897][T14150] ? __fget_files+0x20e/0x3c0 [ 718.190918][T14150] ksys_read+0x205/0x240 [ 718.190931][T14150] ? __pfx_ksys_read+0x10/0x10 [ 718.190952][T14150] ? rcu_is_watching+0x12/0xc0 [ 718.190978][T14150] do_syscall_64+0xcd/0x260 [ 718.191004][T14150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.191021][T14150] RIP: 0033:0x7f9e7d78e169 [ 718.191035][T14150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.191051][T14150] RSP: 002b:00007f9e7e6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 718.191068][T14150] RAX: ffffffffffffffda RBX: 00007f9e7d9b5fa0 RCX: 00007f9e7d78e169 [ 718.191079][T14150] RDX: 0000000000002020 RSI: 0000200000002b00 RDI: 0000000000000005 [ 718.191089][T14150] RBP: 00007f9e7e6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 718.191099][T14150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 718.191109][T14150] R13: 0000000000000000 R14: 00007f9e7d9b5fa0 R15: 00007ffcfdf604e8 [ 718.191132][T14150] [ 718.195416][ T30] audit: type=1400 audit(1745322834.395:1369): avc: denied { bind } for pid=14154 comm="syz.3.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 718.510377][ T5937] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 718.791139][T14160] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2207'. [ 718.801473][T14160] autofs: Unknown parameter ';„O¯9w´”EËÐM<¤:v@-¡€†pEÑðy^Äa%×÷¼Xøfº ^8_í}.bPœhÊ<}(à€¡®*UG™‰j†QT}ú›ó¢ï("Üù¶?¾µ!ë' [ 718.895551][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 718.909737][ T5937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 718.924348][ T5937] usb 4-1: config 0 has no interface number 0 [ 718.936679][ T5937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.953545][ T5937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.964022][ T5937] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 718.973925][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.423644][T11061] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 719.469028][ T5937] usb 4-1: config 0 descriptor?? [ 719.600707][T11061] usb 2-1: Using ep0 maxpacket: 32 [ 719.607290][T11061] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 719.615574][T11061] usb 2-1: config 0 has no interface number 0 [ 719.621726][T11061] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 719.622045][ T5875] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 719.633454][T11061] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 719.648382][T11061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.656443][T11061] usb 2-1: Product: syz [ 719.660636][T11061] usb 2-1: Manufacturer: syz [ 719.667475][T11061] usb 2-1: SerialNumber: syz [ 719.673658][T11061] usb 2-1: config 0 descriptor?? [ 719.688392][T11061] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 719.698214][T11061] em28xx 2-1:0.132: Video interface 132 found: [ 719.806916][ T5875] usb 9-1: config 0 has an invalid interface number: 171 but max is 0 [ 719.815199][ T5875] usb 9-1: config 0 has no interface number 0 [ 719.821277][ T5875] usb 9-1: config 0 interface 171 has no altsetting 0 [ 719.833205][ T5875] usb 9-1: New USB device found, idVendor=041e, idProduct=401a, bcdDevice=4b.f1 [ 719.842642][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=31, SerialNumber=3 [ 719.853249][ T5875] usb 9-1: Product: syz [ 719.857659][ T5875] usb 9-1: Manufacturer: syz [ 719.862247][ T5875] usb 9-1: SerialNumber: syz [ 719.869832][ T5875] usb 9-1: config 0 descriptor?? [ 720.060455][T12633] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 720.099130][ T5875] gspca_main: spca561-2.14.0 probing 041e:401a [ 720.109728][ T5875] spca561 9-1:0.171: probe with driver spca561 failed with error -22 [ 720.131891][ T5875] usb 9-1: USB disconnect, device number 37 [ 720.138583][T11061] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 720.149706][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'. [ 720.181211][ T5937] usbhid 4-1:0.1: can't add hid device: -71 [ 720.187777][ T5937] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 720.216194][ T5937] usb 4-1: USB disconnect, device number 81 [ 720.274544][T12633] usb 1-1: no configurations [ 720.279169][T12633] usb 1-1: can't read configurations, error -22 [ 720.381994][T14179] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2212'. [ 720.397064][ T5825] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 720.398034][T14178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 720.436463][T12633] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 720.608630][T12633] usb 1-1: no configurations [ 720.613255][T12633] usb 1-1: can't read configurations, error -22 [ 720.620741][T12633] usb usb1-port1: attempt power cycle [ 720.624451][T11061] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 720.639482][T11061] em28xx 2-1:0.132: board has no eeprom [ 720.701799][T11061] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 720.709715][T11061] em28xx 2-1:0.132: analog set to bulk mode. [ 720.717236][ T5937] em28xx 2-1:0.132: Registering V4L2 extension [ 720.727864][T11061] usb 2-1: USB disconnect, device number 67 [ 720.738138][T11061] em28xx 2-1:0.132: Disconnecting em28xx [ 720.814586][ T5937] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 720.830087][ T5937] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 720.840905][ T5937] em28xx 2-1:0.132: No AC97 audio processor [ 720.852354][ T5937] usb 2-1: Decoder not found [ 720.856929][ T5937] em28xx 2-1:0.132: failed to create media graph [ 720.873086][ T5937] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 720.881127][ T5937] em28xx 2-1:0.132: Remote control support is not available for this card. [ 720.889933][T11061] em28xx 2-1:0.132: Closing input extension [ 720.898487][T11061] em28xx 2-1:0.132: Freeing device [ 721.003628][T12633] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 721.024236][T12633] usb 1-1: no configurations [ 721.029841][T12633] usb 1-1: can't read configurations, error -22 [ 721.219655][T12633] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 721.266356][T12633] usb 1-1: no configurations [ 721.277587][T12633] usb 1-1: can't read configurations, error -22 [ 721.314689][T12633] usb usb1-port1: unable to enumerate USB device [ 721.905296][T14197] sctp: [Deprecated]: syz.3.2216 (pid 14197) Use of int in max_burst socket option deprecated. [ 721.905296][T14197] Use struct sctp_assoc_value instead [ 722.261610][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2217'. [ 722.984801][ T30] audit: type=1400 audit(1745322838.857:1370): avc: denied { read } for pid=14203 comm="syz.1.2220" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 723.074285][ T30] audit: type=1400 audit(1745322838.857:1371): avc: denied { open } for pid=14203 comm="syz.1.2220" path="/448/file0" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 724.144498][T11061] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 724.338987][T11061] usb 1-1: Using ep0 maxpacket: 32 [ 724.347957][T11061] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 724.357103][T11061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.388969][T11061] usb 1-1: Product: syz [ 724.393744][T11061] usb 1-1: Manufacturer: syz [ 724.398341][T11061] usb 1-1: SerialNumber: syz [ 724.410644][T11061] usb 1-1: config 0 descriptor?? [ 724.432833][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 724.529130][ T5937] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 724.816127][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 725.021015][ T5937] usb 2-1: Using ep0 maxpacket: 32 [ 725.637269][ T5937] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 725.662676][T11061] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -110 [ 725.722909][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.784206][T11061] usb 1-1: USB disconnect, device number 84 [ 725.800470][ T5937] usb 2-1: Product: syz [ 725.828500][ T5937] usb 2-1: Manufacturer: syz [ 725.885115][ T5937] usb 2-1: SerialNumber: syz [ 725.959385][ T5937] usb 2-1: config 0 descriptor?? [ 726.265870][ T5937] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 726.395120][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 726.403880][ T9] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 726.426702][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.429007][ T5937] usb 2-1: USB disconnect, device number 68 [ 726.699113][ T9] usb 7-1: config 0 descriptor?? [ 727.310912][ T9] aquacomputer_d5next 0003:0C70:F00E.001C: unknown main item tag 0x0 [ 727.338777][ T9] aquacomputer_d5next 0003:0C70:F00E.001C: unknown main item tag 0x0 [ 727.398882][ T5875] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 727.437453][T11061] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 727.568830][ T9] aquacomputer_d5next 0003:0C70:F00E.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f00e] on usb-dummy_hcd.6-1/input0 [ 727.604677][T14269] netlink: 'syz.0.2236': attribute type 4 has an invalid length. [ 727.653724][ T5875] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.661377][T11061] usb 4-1: Using ep0 maxpacket: 16 [ 727.674502][T11061] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 727.685707][ T5875] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.694710][T11061] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.694731][T11061] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.697441][T11061] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.710238][ T9] usb 7-1: USB disconnect, device number 58 [ 727.720638][T11061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.742433][T11061] usb 4-1: Product: syz [ 727.746774][T11061] usb 4-1: Manufacturer: syz [ 727.752405][T11061] usb 4-1: SerialNumber: syz [ 727.752411][ T5875] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 727.819221][ T5875] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.830489][ T5875] usb 9-1: Product: syz [ 727.842421][ T5875] usb 9-1: Manufacturer: syz [ 728.102144][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.111229][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.204823][ T5875] usb 9-1: SerialNumber: syz [ 728.232164][ T5875] r8152-cfgselector 9-1: Unknown version 0x0000 [ 728.422232][T11061] usb 4-1: 0:2 : does not exist [ 728.475491][ T5875] r8152-cfgselector 9-1: config 0 descriptor?? [ 728.686884][ T5825] Bluetooth: hci2: unexpected subevent 0x0a length: 9 < 30 [ 728.698386][ T30] audit: type=1326 audit(1745322844.208:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.786527][ T30] audit: type=1326 audit(1745322844.208:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.800243][T14285] syz_tun: entered promiscuous mode [ 728.817099][ T30] audit: type=1400 audit(1745322844.254:1375): avc: denied { connect } for pid=14278 comm="syz.1.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 728.837779][ T30] audit: type=1400 audit(1745322844.254:1376): avc: denied { write } for pid=14278 comm="syz.1.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 728.877846][ T30] audit: type=1326 audit(1745322844.245:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.892392][T14285] syz_tun: left promiscuous mode [ 728.917416][ T30] audit: type=1326 audit(1745322844.273:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.945926][ T30] audit: type=1326 audit(1745322844.273:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.970651][ T30] audit: type=1326 audit(1745322844.283:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 728.997976][ T30] audit: type=1326 audit(1745322844.283:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 729.023006][ T30] audit: type=1326 audit(1745322844.283:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14284 comm="syz.6.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf698e169 code=0x7ffc0000 [ 729.085100][T11061] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 729.104251][T11061] usb 4-1: USB disconnect, device number 82 [ 729.211788][ T5937] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 729.372213][ T5937] usb 2-1: device descriptor read/64, error -71 [ 729.639168][ T5937] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 729.779742][ T5937] usb 2-1: device descriptor read/64, error -71 [ 729.853055][T11061] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 729.995513][ T5937] usb usb2-port1: attempt power cycle [ 730.056361][T12633] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 730.088584][T11061] usb 7-1: Using ep0 maxpacket: 32 [ 730.124399][T11061] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 730.139932][T11061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.152263][T11061] usb 7-1: Product: syz [ 730.156427][T11061] usb 7-1: Manufacturer: syz [ 730.167219][T11061] usb 7-1: SerialNumber: syz [ 730.173387][T11061] usb 7-1: config 0 descriptor?? [ 730.237838][T12633] usb 1-1: Using ep0 maxpacket: 8 [ 730.246777][T12633] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 730.257359][T12633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.265683][T12633] usb 1-1: Product: syz [ 730.270819][T12633] usb 1-1: Manufacturer: syz [ 730.275435][T12633] usb 1-1: SerialNumber: syz [ 730.283967][T12633] usb 1-1: config 0 descriptor?? [ 730.298764][ T52] r8152-cfgselector 9-1: USB disconnect, device number 38 [ 730.390172][ T5937] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 730.739300][T12633] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 730.753759][T11061] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 730.766566][ T5937] usb 2-1: device descriptor read/8, error -71 [ 730.796292][T11061] usb 7-1: USB disconnect, device number 59 [ 731.146535][ T5937] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 731.168637][ T5937] usb 2-1: device descriptor read/8, error -71 [ 731.414887][ T5937] usb usb2-port1: unable to enumerate USB device [ 731.890853][T12633] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 731.902381][T12633] usb 1-1: USB disconnect, device number 85 [ 732.053661][T14324] FAULT_INJECTION: forcing a failure. [ 732.053661][T14324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.076707][T14324] CPU: 0 UID: 0 PID: 14324 Comm: syz.8.2252 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 732.076731][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 732.076741][T14324] Call Trace: [ 732.076746][T14324] [ 732.076752][T14324] dump_stack_lvl+0x16c/0x1f0 [ 732.076780][T14324] should_fail_ex+0x512/0x640 [ 732.076801][T14324] _copy_from_user+0x2e/0xd0 [ 732.076821][T14324] kvm_arch_vm_ioctl+0x1620/0x1cf0 [ 732.076849][T14324] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 732.076874][T14324] ? __lock_acquire+0x5ca/0x1ba0 [ 732.076894][T14324] ? __lock_acquire+0x5ca/0x1ba0 [ 732.076915][T14324] ? __lock_acquire+0x5ca/0x1ba0 [ 732.076934][T14324] ? __lock_acquire+0x5ca/0x1ba0 [ 732.076968][T14324] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 732.076991][T14324] ? is_bpf_text_address+0x94/0x1a0 [ 732.077009][T14324] ? kernel_text_address+0x8d/0x100 [ 732.077029][T14324] ? __kernel_text_address+0xd/0x40 [ 732.077047][T14324] ? unwind_get_return_address+0x59/0xa0 [ 732.077068][T14324] ? arch_stack_walk+0xa6/0x100 [ 732.077099][T14324] ? stack_trace_save+0x8e/0xc0 [ 732.077120][T14324] ? __pfx_stack_trace_save+0x10/0x10 [ 732.077141][T14324] ? stack_depot_save_flags+0x28/0xa50 [ 732.077159][T14324] ? __lock_acquire+0xaa4/0x1ba0 [ 732.077177][T14324] ? kasan_save_stack+0x42/0x60 [ 732.077191][T14324] ? kasan_save_stack+0x33/0x60 [ 732.077206][T14324] ? kasan_save_track+0x14/0x30 [ 732.077220][T14324] ? kasan_save_free_info+0x3b/0x60 [ 732.077240][T14324] ? __kasan_slab_free+0x51/0x70 [ 732.077254][T14324] ? kfree+0x2b6/0x4d0 [ 732.077274][T14324] ? tomoyo_path_number_perm+0x470/0x580 [ 732.077294][T14324] ? security_file_ioctl+0x9b/0x240 [ 732.077315][T14324] ? __x64_sys_ioctl+0xb7/0x200 [ 732.077336][T14324] ? do_syscall_64+0xcd/0x260 [ 732.077360][T14324] kvm_vm_ioctl+0x1985/0x3d40 [ 732.077389][T14324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 732.077422][T14324] ? kasan_quarantine_put+0x10a/0x240 [ 732.077437][T14324] ? lockdep_hardirqs_on+0x7c/0x110 [ 732.077459][T14324] ? find_held_lock+0x2b/0x80 [ 732.077480][T14324] ? tomoyo_path_number_perm+0x295/0x580 [ 732.077504][T14324] ? tomoyo_path_number_perm+0x18d/0x580 [ 732.077532][T14324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 732.077552][T14324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 732.077571][T14324] ? do_vfs_ioctl+0x512/0x1990 [ 732.077593][T14324] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 732.077621][T14324] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 732.077649][T14324] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 732.077682][T14324] ? hook_file_ioctl_common+0x145/0x410 [ 732.077705][T14324] ? selinux_file_ioctl+0x180/0x270 [ 732.077728][T14324] ? selinux_file_ioctl+0xb4/0x270 [ 732.077753][T14324] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 732.077774][T14324] __x64_sys_ioctl+0x190/0x200 [ 732.077798][T14324] do_syscall_64+0xcd/0x260 [ 732.077821][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.077836][T14324] RIP: 0033:0x7f25d478e169 [ 732.077850][T14324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.077867][T14324] RSP: 002b:00007f25d25f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 732.077884][T14324] RAX: ffffffffffffffda RBX: 00007f25d49b5fa0 RCX: 00007f25d478e169 [ 732.077895][T14324] RDX: 0000200000000980 RSI: 00000000c048aec8 RDI: 0000000000000004 [ 732.077906][T14324] RBP: 00007f25d25f6090 R08: 0000000000000000 R09: 0000000000000000 [ 732.077916][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.077926][T14324] R13: 0000000000000000 R14: 00007f25d49b5fa0 R15: 00007ffc6168b7b8 [ 732.077949][T14324] [ 732.504077][T14326] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2253'. [ 732.543341][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.007765][T14343] syz.6.2259: attempt to access beyond end of device [ 733.007765][T14343] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 733.023500][T14342] ubi: mtd0 is already attached to ubi31 [ 733.161628][T14343] gfs2: error -5 reading superblock [ 733.402236][T12633] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 733.564409][T12633] usb 1-1: Using ep0 maxpacket: 32 [ 733.574846][T12633] usb 1-1: config 0 has an invalid descriptor of length 203, skipping remainder of the config [ 733.586628][T12633] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.611244][T12633] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 733.646903][T12633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.655752][T12633] usb 1-1: Product: syz [ 733.660197][T12633] usb 1-1: Manufacturer: syz [ 733.681098][T12633] usb 1-1: SerialNumber: syz [ 733.707137][T12633] usb 1-1: config 0 descriptor?? [ 733.955463][T14363] openvswitch: netlink: VXLAN extension 311 out of range max 1 [ 733.959211][T14346] syz.0.2260: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 733.978766][T14346] CPU: 0 UID: 0 PID: 14346 Comm: syz.0.2260 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 733.978789][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 733.978800][T14346] Call Trace: [ 733.978807][T14346] [ 733.978813][T14346] dump_stack_lvl+0x16c/0x1f0 [ 733.978842][T14346] warn_alloc+0x248/0x3a0 [ 733.978862][T14346] ? __pfx_warn_alloc+0x10/0x10 [ 733.978876][T14346] ? __pfx_stack_trace_save+0x10/0x10 [ 733.978899][T14346] ? stack_depot_save_flags+0x28/0xa50 [ 733.978924][T14346] ? kasan_save_stack+0x42/0x60 [ 733.978940][T14346] ? kasan_save_stack+0x33/0x60 [ 733.978955][T14346] ? kasan_save_track+0x14/0x30 [ 733.978969][T14346] ? __kasan_kmalloc+0xaa/0xb0 [ 733.978983][T14346] ? xskq_create+0x52/0x1d0 [ 733.979003][T14346] ? do_sock_setsockopt+0x221/0x470 [ 733.979026][T14346] ? __sys_setsockopt+0x1a0/0x230 [ 733.979044][T14346] ? __x64_sys_setsockopt+0xbd/0x160 [ 733.979068][T14346] __vmalloc_node_range_noprof+0x10ea/0x1540 [ 733.979103][T14346] ? xskq_create+0xfb/0x1d0 [ 733.979127][T14346] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 733.979159][T14346] ? xskq_create+0xfb/0x1d0 [ 733.979179][T14346] vmalloc_user_noprof+0x6b/0x90 [ 733.979204][T14346] ? xskq_create+0xfb/0x1d0 [ 733.979223][T14346] xskq_create+0xfb/0x1d0 [ 733.979245][T14346] xsk_setsockopt+0x684/0x840 [ 733.979272][T14346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.979297][T14346] ? selinux_socket_setsockopt+0x6a/0x80 [ 733.979320][T14346] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.979339][T14346] do_sock_setsockopt+0x221/0x470 [ 733.979366][T14346] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 733.979409][T14346] __sys_setsockopt+0x1a0/0x230 [ 733.979433][T14346] __x64_sys_setsockopt+0xbd/0x160 [ 733.979451][T14346] ? do_syscall_64+0x91/0x260 [ 733.979472][T14346] ? lockdep_hardirqs_on+0x7c/0x110 [ 733.979494][T14346] do_syscall_64+0xcd/0x260 [ 733.979518][T14346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.979535][T14346] RIP: 0033:0x7f9e7d78e169 [ 733.979550][T14346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.979565][T14346] RSP: 002b:00007f9e7e6d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 733.979582][T14346] RAX: ffffffffffffffda RBX: 00007f9e7d9b5fa0 RCX: 00007f9e7d78e169 [ 733.979593][T14346] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 733.979603][T14346] RBP: 00007f9e7d810a68 R08: 0000000000000004 R09: 0000000000000000 [ 733.979614][T14346] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 733.979625][T14346] R13: 0000000000000000 R14: 00007f9e7d9b5fa0 R15: 00007ffcfdf604e8 [ 733.979648][T14346] [ 734.281034][T14346] Mem-Info: [ 734.285260][T14346] active_anon:7443 inactive_anon:0 isolated_anon:0 [ 734.285260][T14346] active_file:11944 inactive_file:47129 isolated_file:0 [ 734.285260][T14346] unevictable:768 dirty:279 writeback:0 [ 734.285260][T14346] slab_reclaimable:12003 slab_unreclaimable:105706 [ 734.285260][T14346] mapped:33442 shmem:4302 pagetables:1130 [ 734.285260][T14346] sec_pagetables:0 bounce:0 [ 734.285260][T14346] kernel_misc_reclaimable:0 [ 734.285260][T14346] free:1300832 free_pcp:3553 free_cma:0 [ 734.331802][T14346] Node 0 active_anon:29772kB inactive_anon:0kB active_file:47776kB inactive_file:188444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133768kB dirty:1116kB writeback:0kB shmem:15772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11432kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 734.367596][T14346] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 734.398922][T14346] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.426899][T14346] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 734.433394][T14346] Node 0 DMA32 free:1270044kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:40044kB inactive_anon:0kB active_file:47776kB inactive_file:186868kB unevictable:1536kB writepending:1116kB present:3129332kB managed:2541508kB mlocked:0kB bounce:0kB free_pcp:19776kB local_pcp:12620kB free_cma:0kB [ 734.464892][T14346] lowmem_reserve[]: 0 0 1 1 1 [ 734.472203][T14346] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 734.502749][T14346] lowmem_reserve[]: 0 0 0 0 0 [ 734.509693][T14346] Node 1 Normal free:3902012kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.595237][T14372] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.737828][T14346] lowmem_reserve[]: 0 0 0 0 0 [ 734.916519][ T52] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 734.944079][T14346] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 734.966786][T14346] Node 0 DMA32: 289*4kB (UME) 1047*8kB (UME) 44*16kB (UME) 259*32kB (UME) 872*64kB (UME) 595*128kB (UM) 200*256kB (UME) 66*512kB (UME) 21*1024kB (UM) 7*2048kB (UM) 247*4096kB (UM) = 1283036kB [ 735.065072][T14346] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 735.108324][T14346] Node 1 Normal: 177*4kB (UE) 43*8kB (UME) 44*16kB (UME) 189*32kB (UME) 97*64kB (UME) 31*128kB (UME) 8*256kB (UM) 6*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3902012kB [ 735.132500][T14346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.147564][T14346] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.157139][T14346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.169454][T14346] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 735.459902][T14346] 66237 total pagecache pages [ 735.521354][T14346] 0 pages in swap cache [ 735.535332][T14346] Free swap = 124996kB [ 735.539561][T14346] Total swap = 124996kB [ 735.543779][T14346] 2097051 pages RAM [ 735.549837][T14346] 0 pages HighMem/MovableOnly [ 735.556306][ T52] usb 4-1: Using ep0 maxpacket: 32 [ 735.561572][T14346] 429632 pages reserved [ 735.566349][T14346] 0 pages cma reserved [ 735.933854][ T52] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 735.950495][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.958826][ T52] usb 4-1: Product: syz [ 735.963046][ T52] usb 4-1: Manufacturer: syz [ 735.968224][T14380] sctp: [Deprecated]: syz.8.2270 (pid 14380) Use of int in max_burst socket option deprecated. [ 735.968224][T14380] Use struct sctp_assoc_value instead [ 735.983963][ T52] usb 4-1: SerialNumber: syz [ 735.999554][ T52] usb 4-1: config 0 descriptor?? [ 736.008540][T11061] usb 1-1: USB disconnect, device number 86 [ 736.775713][T14391] netlink: 'syz.8.2272': attribute type 10 has an invalid length. [ 737.332669][ T52] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -110 [ 737.637528][ T52] usb 4-1: USB disconnect, device number 83 [ 737.656184][T14391] team0: Port device wlan1 added [ 737.751920][T14406] ubi: mtd0 is already attached to ubi31 [ 737.902976][T11061] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 737.913736][T12633] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 738.075309][T11061] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 738.079108][T12633] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 738.092592][T11061] usb 7-1: config 0 has no interface number 0 [ 738.092731][T11061] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 738.092795][T11061] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 738.121984][T11061] usb 7-1: config 0 interface 113 has no altsetting 0 [ 738.130252][T12633] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.139827][T12633] usb 1-1: Product: syz [ 738.140503][T11061] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 738.144041][T12633] usb 1-1: Manufacturer: syz [ 738.158494][T12633] usb 1-1: SerialNumber: syz [ 738.158528][T11061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.202315][T12633] usb 1-1: config 0 descriptor?? [ 738.225853][T11061] usb 7-1: Product: syz [ 738.233106][T11061] usb 7-1: Manufacturer: syz [ 738.238115][T11061] usb 7-1: SerialNumber: syz [ 738.253863][T11061] usb 7-1: config 0 descriptor?? [ 738.260121][ T5937] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 738.274976][ C1] usb 7-1: NFC: Urb failure (status -71) [ 738.281464][T11061] usb 7-1: NFC: Unable to get FW version [ 738.287603][T11061] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -90 [ 738.426919][ T5937] usb 9-1: Using ep0 maxpacket: 16 [ 738.433568][ T5937] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 738.442774][ T5937] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.453606][ T5937] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.464434][ T5937] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 738.473596][ T5937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.481626][ T5937] usb 9-1: Product: syz [ 738.485802][ T5937] usb 9-1: Manufacturer: syz [ 738.490400][ T5937] usb 9-1: SerialNumber: syz [ 738.507951][T14399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.516954][T14399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.587251][T11061] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 738.610122][ T9] usb 7-1: USB disconnect, device number 60 [ 738.655936][T12633] airspy 1-1:0.0: Board ID: 00 [ 738.660726][T12633] airspy 1-1:0.0: Firmware version: [ 738.719358][T14413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.727908][T14413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.768971][T11061] usb 4-1: Using ep0 maxpacket: 32 [ 738.777414][T11061] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 738.786701][T11061] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.795693][T11061] usb 4-1: Product: syz [ 738.799865][T11061] usb 4-1: Manufacturer: syz [ 738.807151][T11061] usb 4-1: SerialNumber: syz [ 738.813610][T11061] usb 4-1: config 0 descriptor?? [ 738.897222][ T52] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 738.955244][ T5937] usb 9-1: 0:2 : does not exist [ 739.068355][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 739.088473][ T52] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 739.097638][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.105718][ T52] usb 2-1: Product: syz [ 739.109955][ T52] usb 2-1: Manufacturer: syz [ 739.114864][ T52] usb 2-1: SerialNumber: syz [ 739.137342][ T52] usb 2-1: config 0 descriptor?? [ 739.188500][T12633] airspy 1-1:0.0: usb_control_msg() failed -32 request 0e [ 739.276730][T12633] airspy 1-1:0.0: Registered as swradio24 [ 739.334065][T12633] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 739.549566][T12633] usb 1-1: USB disconnect, device number 87 [ 739.578184][T11061] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 739.587461][ T52] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 739.702366][T11061] usb 4-1: USB disconnect, device number 84 [ 739.710048][ T52] usb 2-1: USB disconnect, device number 73 [ 739.735580][ T5937] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 739.759632][ T5937] usb 9-1: USB disconnect, device number 39 [ 740.303010][T14427] sctp: [Deprecated]: syz.0.2283 (pid 14427) Use of int in max_burst socket option deprecated. [ 740.303010][T14427] Use struct sctp_assoc_value instead [ 740.772123][T14436] FAULT_INJECTION: forcing a failure. [ 740.772123][T14436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.786002][T14436] CPU: 0 UID: 0 PID: 14436 Comm: syz.6.2285 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 740.786026][T14436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 740.786036][T14436] Call Trace: [ 740.786042][T14436] [ 740.786048][T14436] dump_stack_lvl+0x16c/0x1f0 [ 740.786075][T14436] should_fail_ex+0x512/0x640 [ 740.786098][T14436] _copy_to_user+0x32/0xd0 [ 740.786120][T14436] simple_read_from_buffer+0xcb/0x170 [ 740.786147][T14436] proc_fail_nth_read+0x197/0x270 [ 740.786180][T14436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.786207][T14436] ? rw_verify_area+0xcf/0x680 [ 740.786229][T14436] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 740.786255][T14436] vfs_read+0x1de/0xc70 [ 740.786284][T14436] ? __pfx___mutex_lock+0x10/0x10 [ 740.786307][T14436] ? __pfx_vfs_read+0x10/0x10 [ 740.786339][T14436] ? __fget_files+0x20e/0x3c0 [ 740.786364][T14436] ksys_read+0x12a/0x240 [ 740.786378][T14436] ? __pfx_ksys_read+0x10/0x10 [ 740.786410][T14436] do_syscall_64+0xcd/0x260 [ 740.786436][T14436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.786452][T14436] RIP: 0033:0x7fcdf698cb7c [ 740.786465][T14436] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 740.786481][T14436] RSP: 002b:00007fcdf47d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.786498][T14436] RAX: ffffffffffffffda RBX: 00007fcdf6bb6080 RCX: 00007fcdf698cb7c [ 740.786510][T14436] RDX: 000000000000000f RSI: 00007fcdf47d50a0 RDI: 0000000000000009 [ 740.786520][T14436] RBP: 00007fcdf47d5090 R08: 0000000000000000 R09: 0000000000000000 [ 740.786529][T14436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 740.786540][T14436] R13: 0000000000000000 R14: 00007fcdf6bb6080 R15: 00007ffd0f44a958 [ 740.786564][T14436] [ 741.456497][T14449] 9pnet_fd: Insufficient options for proto=fd [ 741.624969][ T5930] IPVS: starting estimator thread 0... [ 742.276929][ T5937] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 742.307560][T14455] IPVS: using max 57 ests per chain, 136800 per kthread [ 742.510626][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 742.564688][ T5937] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 742.585530][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.615524][ T5937] usb 7-1: Product: syz [ 742.624925][ T5937] usb 7-1: Manufacturer: syz [ 742.632336][ T5937] usb 7-1: SerialNumber: syz [ 742.642655][ T5937] usb 7-1: config 0 descriptor?? [ 742.714102][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 743.357434][ T5937] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 743.410634][ T5937] usb 7-1: USB disconnect, device number 61 [ 743.465074][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 743.580332][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 743.602142][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.616048][T14478] netlink: 'syz.1.2299': attribute type 7 has an invalid length. [ 743.632975][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 743.649515][T14478] netlink: 'syz.1.2299': attribute type 5 has an invalid length. [ 743.670346][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 743.683950][T14478] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2299'. [ 743.713726][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.734737][ T9] usb 4-1: Product: syz [ 743.738916][ T9] usb 4-1: Manufacturer: syz [ 743.843727][ T9] usb 4-1: SerialNumber: syz [ 744.283375][T14482] FAULT_INJECTION: forcing a failure. [ 744.283375][T14482] name failslab, interval 1, probability 0, space 0, times 0 [ 744.299455][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.315354][T14482] CPU: 1 UID: 0 PID: 14482 Comm: syz.0.2300 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 744.315382][T14482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 744.315392][T14482] Call Trace: [ 744.315398][T14482] [ 744.315404][T14482] dump_stack_lvl+0x16c/0x1f0 [ 744.315432][T14482] should_fail_ex+0x512/0x640 [ 744.315454][T14482] should_failslab+0xc2/0x120 [ 744.315474][T14482] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 744.315492][T14482] ? skb_clone+0x190/0x3f0 [ 744.315517][T14482] skb_clone+0x190/0x3f0 [ 744.315537][T14482] netlink_deliver_tap+0xabd/0xd30 [ 744.315565][T14482] netlink_unicast+0x5df/0x7f0 [ 744.315592][T14482] ? __pfx_netlink_unicast+0x10/0x10 [ 744.315622][T14482] netlink_sendmsg+0x8d1/0xdd0 [ 744.315649][T14482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.315682][T14482] ____sys_sendmsg+0xa95/0xc70 [ 744.315706][T14482] ? copy_msghdr_from_user+0x10a/0x160 [ 744.315726][T14482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.315763][T14482] ___sys_sendmsg+0x134/0x1d0 [ 744.315786][T14482] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.315838][T14482] __sys_sendmsg+0x16d/0x220 [ 744.315860][T14482] ? __pfx___sys_sendmsg+0x10/0x10 [ 744.315886][T14482] ? rcu_is_watching+0x12/0xc0 [ 744.315915][T14482] do_syscall_64+0xcd/0x260 [ 744.315941][T14482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.315958][T14482] RIP: 0033:0x7f9e7d78e169 [ 744.315971][T14482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.315988][T14482] RSP: 002b:00007f9e7e6d2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.316004][T14482] RAX: ffffffffffffffda RBX: 00007f9e7d9b5fa0 RCX: 00007f9e7d78e169 [ 744.316015][T14482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 744.316025][T14482] RBP: 00007f9e7e6d2090 R08: 0000000000000000 R09: 0000000000000000 [ 744.316035][T14482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.316044][T14482] R13: 0000000000000000 R14: 00007f9e7d9b5fa0 R15: 00007ffcfdf604e8 [ 744.316067][T14482] [ 744.316501][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.894957][ T9] usb 4-1: 0:2 : does not exist [ 745.423462][T14488] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.431039][T14488] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.611882][ T9] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 745.717999][ T9] usb 4-1: USB disconnect, device number 85 [ 745.869569][T14488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 745.944986][T14488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 745.997912][T14488] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.011345][T14488] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.026254][T14488] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.037168][T14488] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.402094][ T5930] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 746.435925][T14488] veth0_macvtap: left allmulticast mode [ 746.565703][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 746.620438][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.854219][ T5930] usb 2-1: Product: syz [ 746.934479][ T5930] usb 2-1: Manufacturer: syz [ 746.940642][ T5930] usb 2-1: SerialNumber: syz [ 746.979616][ T5930] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 746.989539][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 746.989603][ T30] audit: type=1400 audit(1745322861.326:1412): avc: denied { firmware_load } for pid=5937 comm="kworker/1:8" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 747.021767][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.227933][T14520] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2311'. [ 747.295535][ T5937] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 747.384745][T14523] 9pnet_virtio: no channels available for device syz [ 747.680536][T14499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.703386][T14499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.754237][T14499] block nbd1: Dead connection, failed to find a fallback [ 747.773461][T14499] block nbd1: shutting down sockets [ 747.780060][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.230111][T14499] buffer_io_error: 6 callbacks suppressed [ 748.230126][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.307763][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.337069][T11061] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 748.340264][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.380076][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.398060][T14537] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 748.405786][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.414270][T14537] macsec1: entered promiscuous mode [ 748.419790][T14537] macsec1: entered allmulticast mode [ 748.428247][T14537] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 748.435876][ T5937] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 748.445249][ T5937] ath9k_htc: Failed to initialize the device [ 748.453611][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.490373][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.509138][ T52] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 748.521905][T11061] usb 1-1: Using ep0 maxpacket: 32 [ 748.547156][T11061] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 748.562318][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.572300][T11061] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.631342][T11061] usb 1-1: Product: syz [ 748.646329][ T5937] usb 2-1: ath9k_htc: USB layer deinitialized [ 748.657743][T11061] usb 1-1: Manufacturer: syz [ 748.668246][T11061] usb 1-1: SerialNumber: syz [ 748.703780][T11061] usb 1-1: config 0 descriptor?? [ 748.742403][ T52] usb 4-1: config 0 interface 0 has no altsetting 0 [ 748.752708][ T52] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 748.765891][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.777736][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.795268][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 748.832765][ T52] usb 4-1: config 0 descriptor?? [ 748.873198][ T52] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 748.889895][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 748.910735][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.086360][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 749.302824][T14533] overlay: Unknown parameter '/owerdir' [ 749.303014][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.317840][T11061] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 749.334247][ T5875] usb 4-1: USB disconnect, device number 86 [ 749.335620][T11061] usb 1-1: USB disconnect, device number 88 [ 749.346690][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 749.371338][T14549] xt_TCPMSS: Only works on TCP SYN packets [ 749.384485][ T30] audit: type=1400 audit(1745322863.561:1413): avc: denied { read } for pid=14548 comm="syz.8.2320" path="socket:[45567]" dev="sockfs" ino=45567 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 749.408300][T14499] ldm_validate_partition_table(): Disk read failed. [ 749.415108][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.427776][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 749.435885][T14499] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 749.453056][T14499] Buffer I/O error on dev nbd1, logical block 0, async page read [ 749.466604][T14499] Dev nbd1: unable to read RDB block 0 [ 749.474830][T14499] nbd1: unable to read partition table [ 749.820225][ T5869] usb 2-1: USB disconnect, device number 74 [ 750.466535][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 750.473413][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 750.702324][T14561] ceph: No mds server is up or the cluster is laggy [ 750.876050][T14568] input: syz0 as /devices/virtual/input/input88 [ 752.100963][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2333'. [ 752.374999][ T5869] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 752.560120][ T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 752.591955][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 752.602224][ T5869] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.620824][ T5869] usb 2-1: config 0 has no interfaces? [ 752.631772][ T5869] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 752.641796][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.650894][ T5869] usb 2-1: Product: syz [ 752.667028][ T5869] usb 2-1: Manufacturer: syz [ 752.671692][ T5869] usb 2-1: SerialNumber: syz [ 752.677903][ T5937] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 752.678463][ T5869] usb 2-1: config 0 descriptor?? [ 752.720243][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 752.726706][ T9] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 752.735141][ T9] usb 7-1: config 0 has no interface number 0 [ 752.741280][ T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 752.752313][ T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 752.765367][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 752.775530][ T9] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 752.788549][ T9] usb 7-1: Product: syz [ 752.792695][ T9] usb 7-1: SerialNumber: syz [ 752.807723][ T9] usb 7-1: config 0 descriptor?? [ 752.815365][ T9] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 752.823953][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input89 [ 752.848816][ T5937] usb 9-1: Using ep0 maxpacket: 32 [ 752.858195][ T5937] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 752.880362][ T5937] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.888827][ T5937] usb 9-1: Product: syz [ 752.894182][ T5937] usb 9-1: Manufacturer: syz [ 752.898779][ T5937] usb 9-1: SerialNumber: syz [ 752.906228][ T5937] usb 9-1: config 0 descriptor?? [ 752.916924][T14617] input: syz0 as /devices/virtual/input/input90 [ 753.072272][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 753.545527][ T5937] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 753.562969][ T5937] usb 9-1: USB disconnect, device number 40 [ 753.597330][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 753.597524][ T5869] usb 7-1: USB disconnect, device number 62 [ 753.604309][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 753.623475][ T5869] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 753.640555][T14626] No control pipe specified [ 753.905762][T14623] 9pnet_fd: Insufficient options for proto=fd [ 754.714739][T14639] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 755.579870][ T5930] usb 2-1: USB disconnect, device number 75 [ 755.788772][T14653] syz.6.2348: attempt to access beyond end of device [ 755.788772][T14653] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 755.802104][T14653] gfs2: error -5 reading superblock [ 756.045026][ T55] Bluetooth: hci5: command 0xfc11 tx timeout [ 756.045266][ T5825] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 756.069920][T14628] sp0: Synchronizing with TNC [ 756.179197][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 756.185345][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 756.289476][T14656] ceph: No mds server is up or the cluster is laggy [ 756.313336][T14664] input: syz0 as /devices/virtual/input/input91 [ 757.043941][T14675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 758.467339][T14696] syz.6.2359: attempt to access beyond end of device [ 758.467339][T14696] nbd6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 758.490915][T14696] gfs2: error -5 reading superblock [ 758.506274][T12633] libceph: connect (1)[c::]:6789 error -101 [ 758.562316][T12633] libceph: mon0 (1)[c::]:6789 connect error [ 758.578384][T14690] ceph: No mds server is up or the cluster is laggy [ 758.807272][T14703] input: syz0 as /devices/virtual/input/input92 [ 759.057475][ T30] audit: type=1400 audit(1745322872.616:1414): avc: denied { map } for pid=14706 comm="syz.0.2364" path="socket:[45880]" dev="sockfs" ino=45880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 759.223836][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2365'. [ 759.238522][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2365'. [ 759.258317][T11061] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 759.291371][T14711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.321542][T14711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 759.433910][T11061] usb 4-1: Using ep0 maxpacket: 16 [ 759.445612][T11061] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 759.477253][T11061] usb 4-1: config 0 has no interface number 0 [ 759.653101][T12633] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 759.675064][T11061] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 759.925885][T12633] usb 9-1: Using ep0 maxpacket: 16 [ 760.037839][T11061] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 760.047028][T11061] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 760.066533][T11061] usb 4-1: Product: syz [ 760.068234][T12633] usb 9-1: config 0 has an invalid interface number: 5 but max is 0 [ 760.071997][T11061] usb 4-1: SerialNumber: syz [ 760.118100][T12633] usb 9-1: config 0 has no interface number 0 [ 760.131672][T12633] usb 9-1: config 0 interface 5 has no altsetting 0 [ 760.268374][T12633] usb 9-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice= 5.28 [ 760.271429][T11061] usb 4-1: config 0 descriptor?? [ 760.282495][T12633] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.324335][T12633] usb 9-1: Product: syz [ 760.328373][T11061] cm109 4-1:0.8: invalid payload size 142, expected 4 [ 760.328520][T12633] usb 9-1: Manufacturer: syz [ 760.350836][T12633] usb 9-1: SerialNumber: syz [ 760.351989][T11061] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input93 [ 760.379457][T12633] usb 9-1: config 0 descriptor?? [ 760.582489][T14739] input: syz0 as /devices/virtual/input/input94 [ 760.618106][T12633] sierra 9-1:0.5: Sierra USB modem converter detected [ 760.632707][T12633] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 760.664330][T12633] usb 9-1: USB disconnect, device number 41 [ 760.685393][T12633] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 760.694377][T12633] sierra 9-1:0.5: device disconnected [ 761.292369][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 761.299535][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 761.306654][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 761.306966][T12633] usb 4-1: USB disconnect, device number 87 [ 761.313583][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 761.594195][T12633] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 761.774633][T14754] blk_print_req_error: 6 callbacks suppressed [ 761.774682][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.793166][T14754] buffer_io_error: 6 callbacks suppressed [ 761.793180][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.874654][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.885709][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.894175][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.904818][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.927719][ T9] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 761.955178][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 761.975342][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 761.995999][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.011541][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.021226][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.030291][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.042878][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.051948][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.060512][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.069785][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.078083][T14754] ldm_validate_partition_table(): Disk read failed. [ 762.085034][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.099374][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.108332][T14754] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 762.117904][T14754] Buffer I/O error on dev nbd1, logical block 0, async page read [ 762.129823][T14754] Dev nbd1: unable to read RDB block 0 [ 762.138174][T14754] nbd1: unable to read partition table [ 762.148484][T14754] syz.1.2378: attempt to access beyond end of device [ 762.148484][T14754] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=32 [ 762.162150][T14754] gfs2: error -5 reading superblock [ 762.191141][ T9] usb 7-1: device descriptor read/64, error -71 [ 762.633265][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 762.741708][T11061] libceph: connect (1)[c::]:6789 error -101 [ 762.747797][T11061] libceph: mon0 (1)[c::]:6789 connect error [ 762.801535][ T9] usb 7-1: device descriptor read/64, error -71 [ 762.905940][T14774] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 762.919272][ T9] usb usb7-port1: attempt power cycle [ 763.003409][T14775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 763.395259][T11061] libceph: connect (1)[c::]:6789 error -101 [ 763.431337][T11061] libceph: mon0 (1)[c::]:6789 connect error [ 763.463286][T14764] ceph: No mds server is up or the cluster is laggy [ 763.688754][ T9] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 763.713650][ T30] audit: type=1400 audit(1745322876.965:1415): avc: denied { mount } for pid=14778 comm="syz.1.2386" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 763.776151][ T9] usb 7-1: device descriptor read/8, error -71 [ 764.326008][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 764.739881][T14791] input: syz0 as /devices/virtual/input/input95 [ 764.749013][ T9] usb 7-1: device descriptor read/8, error -71 [ 764.987547][ T9] usb usb7-port1: unable to enumerate USB device [ 766.443890][T14820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 766.511143][ T5930] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 766.910564][T14823] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 767.129340][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.143937][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.171529][ T5930] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 767.180922][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.196748][ T30] audit: type=1400 audit(1745322880.183:1416): avc: denied { map } for pid=14824 comm="syz.0.2399" path="socket:[47171]" dev="sockfs" ino=47171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 767.379369][ T5930] usb 4-1: config 0 descriptor?? [ 767.419241][ T30] audit: type=1400 audit(1745322880.183:1417): avc: denied { accept } for pid=14824 comm="syz.0.2399" path="socket:[47171]" dev="sockfs" ino=47171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 767.455219][ T30] audit: type=1326 audit(1745322880.230:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14824 comm="syz.0.2399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7d78e169 code=0x0 [ 768.183956][ T5930] hid (null): global environment stack underflow [ 768.395904][T14816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 768.438945][ T5937] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 768.567175][ T5930] aquacomputer_d5next 0003:0C70:F00E.001D: global environment stack underflow [ 768.654130][ T5930] aquacomputer_d5next 0003:0C70:F00E.001D: item 0 4 1 11 parsing failed [ 768.691583][ T5937] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 768.754348][ T5930] aquacomputer_d5next 0003:0C70:F00E.001D: probe with driver aquacomputer_d5next failed with error -22 [ 768.775462][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.908904][ T5937] usb 9-1: config 0 descriptor?? [ 768.936628][ T5930] usb 4-1: USB disconnect, device number 88 [ 768.999820][ T5937] cp210x 9-1:0.0: cp210x converter detected [ 769.024794][T12446] Bluetooth: hci5: Frame reassembly failed (-84) [ 769.153484][ T9] libceph: connect (1)[c::]:6789 error -22 [ 769.159449][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 769.279967][ T973] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 769.290094][T14843] ceph: No mds server is up or the cluster is laggy [ 769.482546][ T5937] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 769.499800][ T5937] usb 9-1: cp210x converter now attached to ttyUSB0 [ 769.506710][ T973] usb 7-1: Using ep0 maxpacket: 32 [ 769.517163][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.528132][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.538061][ T973] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 769.547176][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.785346][ T973] usb 7-1: config 0 descriptor?? [ 769.840823][ T5930] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 769.872656][ T9] usb 9-1: USB disconnect, device number 42 [ 769.886416][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 769.903419][ T9] cp210x 9-1:0.0: device disconnected [ 770.017616][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 770.051195][ T5930] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 770.077021][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.091924][ T5930] usb 1-1: Product: syz [ 770.110780][ T5930] usb 1-1: Manufacturer: syz [ 770.129571][ T5930] usb 1-1: SerialNumber: syz [ 770.139379][ T5930] usb 1-1: config 0 descriptor?? [ 770.279472][ T973] usbhid 7-1:0.0: can't add hid device: -71 [ 770.288208][ T973] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 770.318975][ T973] usb 7-1: USB disconnect, device number 67 [ 770.367405][ T5930] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 770.839629][ T5930] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 771.135815][ T5930] usb 1-1: USB disconnect, device number 89 [ 771.182917][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 771.183102][ T9] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 771.197700][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 771.466949][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 771.565232][ T9] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 771.615734][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.635491][ T9] usb 9-1: Product: syz [ 771.639695][ T9] usb 9-1: Manufacturer: syz [ 771.644377][ T9] usb 9-1: SerialNumber: syz [ 771.651275][ T9] usb 9-1: config 0 descriptor?? [ 771.669161][T14872] netlink: 'syz.0.2413': attribute type 2 has an invalid length. [ 772.417542][ T9] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 772.704387][T14881] libceph: resolve '4' (ret=-3): failed [ 772.816840][T14884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2417'. [ 773.268270][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2419'. [ 773.671838][T14886] netlink: ct family unspecified [ 773.676917][T14886] openvswitch: netlink: Actions may not be safe on all matching packets [ 773.786680][ T30] audit: type=1400 audit(1745322886.282:1419): avc: denied { ioctl } for pid=14882 comm="syz.0.2417" path="socket:[46894]" dev="sockfs" ino=46894 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 774.266675][ T9] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 774.328285][ T9] usb 9-1: USB disconnect, device number 43 [ 774.390141][ T973] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 774.561198][ T973] usb 1-1: Using ep0 maxpacket: 32 [ 774.583918][ T973] usb 1-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 774.593203][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.601293][ T973] usb 1-1: Product: syz [ 774.617278][ T5930] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 774.635125][ T973] usb 1-1: Manufacturer: syz [ 774.657096][ T973] usb 1-1: SerialNumber: syz [ 774.751669][ T973] usb 1-1: config 0 descriptor?? [ 774.815652][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2428'. [ 774.824954][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 774.833247][T14918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.835201][ T5930] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=b4.bf [ 774.853377][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.861833][ T5930] usb 7-1: Product: syz [ 774.866260][ T5930] usb 7-1: Manufacturer: syz [ 774.870911][ T5930] usb 7-1: SerialNumber: syz [ 774.879615][ T5930] usb 7-1: config 0 descriptor?? [ 775.567967][ T973] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 775.590522][ T973] usb 1-1: USB disconnect, device number 90 [ 775.612386][ T5930] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 775.635598][ T5930] usb 7-1: USB disconnect, device number 68 [ 776.068461][ T52] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 776.255280][ T52] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 776.264576][ T52] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.273633][ T52] usb 9-1: Product: syz [ 776.278249][ T52] usb 9-1: Manufacturer: syz [ 776.283184][ T52] usb 9-1: SerialNumber: syz [ 776.290491][ T52] r8152-cfgselector 9-1: Unknown version 0x0000 [ 776.298576][ T52] r8152-cfgselector 9-1: config 0 descriptor?? [ 776.339587][ T30] audit: type=1326 audit(1745322888.780:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14937 comm="syz.0.2433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e7d78e169 code=0x0 [ 776.362448][ C1] vkms_vblank_simulate: vblank timer overrun [ 776.451058][ T9] libceph: connect (1)[c::]:6789 error -101 [ 776.458894][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 776.466880][ T9] libceph: connect (1)[c::]:6789 error -101 [ 776.472970][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 776.560334][T14945] ceph: No mds server is up or the cluster is laggy [ 776.667463][ T5875] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 776.702574][T14954] No control pipe specified [ 777.009402][ T5875] usb 1-1: Using ep0 maxpacket: 8 [ 777.664190][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 777.675071][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 777.686704][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 777.697959][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 777.712875][ T5875] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 777.722106][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.732121][ T5875] usb 1-1: Product: syz [ 777.736663][ T5875] usb 1-1: Manufacturer: syz [ 777.741773][ T5875] usb 1-1: SerialNumber: syz [ 777.750502][ T5875] usb 1-1: config 0 descriptor?? [ 777.772972][ T5875] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input96 [ 778.991958][ T5930] r8152-cfgselector 9-1: USB disconnect, device number 44 [ 779.131886][T14988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2441'. [ 779.148714][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.318513][ T52] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 779.548795][ T5875] imon:send_packet: packet tx failed (-71) [ 779.626944][ T52] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 779.659296][ T5875] imon 1-1:0.0: panel buttons/knobs setup failed [ 779.705151][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.741868][ T52] usb 7-1: Product: syz [ 779.756751][ T52] usb 7-1: Manufacturer: syz [ 779.757348][ T5875] rc_core: IR keymap rc-imon-pad not found [ 779.772419][ T52] usb 7-1: SerialNumber: syz [ 779.789565][ T5875] Registered IR keymap rc-empty [ 779.805702][ T52] r8152-cfgselector 7-1: Unknown version 0x0000 [ 779.815055][ T5875] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 779.817250][ T52] r8152-cfgselector 7-1: config 0 descriptor?? [ 779.831157][ T5875] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 780.039620][ T5875] imon:send_packet: packet tx failed (-71) [ 780.070612][ T5875] imon 1-1:0.0: remote input dev register failed [ 780.096051][ T5875] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 780.439621][ T5875] imon 1-1:0.0: unable to initialize intf0, err 0 [ 781.152707][ T5875] imon:imon_probe: failed to initialize context! [ 781.160275][ T5875] imon 1-1:0.0: unable to register, err -19 [ 781.438232][ T5875] usb 1-1: USB disconnect, device number 91 [ 782.010405][T15039] page: refcount:3 mapcount:0 mapping:ffff888023d10878 index:0x2 pfn:0x59e32 [ 782.019321][T15039] memcg:ffff88804e9a4000 [ 782.023670][T15039] aops:def_blk_aops ino:fa00000 [ 782.028526][T15039] flags: 0xfff6800000003d(locked|referenced|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 782.038872][T15039] raw: 00fff6800000003d ffffea0001678cc8 ffffea0001b29808 ffff888023d10878 [ 782.047497][T15039] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88804e9a4000 [ 782.056094][T15039] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 782.064255][T15039] page_owner tracks the page as allocated [ 782.070027][T15039] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 15037, tgid 15037 (syz.8.2450), ts 781691517865, free_ts 781542525890 [ 782.091019][T15039] post_alloc_hook+0x181/0x1b0 [ 782.095825][T15039] get_page_from_freelist+0x135c/0x3920 [ 782.101445][T15039] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 782.107368][T15039] alloc_pages_mpol+0x1fb/0x550 [ 782.112251][T15039] folio_alloc_noprof+0x20/0x2d0 [ 782.117197][T15039] filemap_alloc_folio_noprof+0x3a1/0x470 [ 782.122936][T15039] page_cache_ra_order+0x4c0/0xd00 [ 782.128045][T15039] filemap_fault+0x147c/0x2740 [ 782.132831][T15039] __do_fault+0x10a/0x490 [ 782.137155][T15039] do_pte_missing+0x1a6/0x3fb0 [ 782.141942][T15039] __handle_mm_fault+0x103d/0x2a40 [ 782.147053][T15039] handle_mm_fault+0x3fe/0xad0 [ 782.151846][T15039] do_user_addr_fault+0x60c/0x1370 [ 782.156992][T15039] exc_page_fault+0x5c/0xc0 [ 782.161509][T15039] asm_exc_page_fault+0x26/0x30 [ 782.166396][T15039] page last free pid 15036 tgid 15036 stack trace: [ 782.172955][T15039] __free_frozen_pages+0x69d/0xff0 [ 782.178072][T15039] qlist_free_all+0x4e/0x120 [ 782.182674][T15039] kasan_quarantine_reduce+0x195/0x1e0 [ 782.188164][T15039] __kasan_slab_alloc+0x69/0x90 [ 782.193023][T15039] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 782.198493][T15039] getname_flags.part.0+0x4c/0x550 [ 782.203607][T15039] getname_flags+0x93/0xf0 [ 782.208039][T15039] __x64_sys_symlinkat+0x79/0xc0 [ 782.212969][T15039] do_syscall_64+0xcd/0x260 [ 782.217554][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.223532][T15039] ------------[ cut here ]------------ [ 782.228992][T15039] kernel BUG at mm/filemap.c:3433! [ 782.234122][T15039] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 782.240518][T15039] CPU: 1 UID: 0 PID: 15039 Comm: syz.8.2450 Not tainted 6.15.0-rc3-syzkaller-00008-ga33b5a08cbbd #0 PREEMPT(full) [ 782.252562][T15039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 782.262595][T15039] RIP: 0010:filemap_fault+0x1862/0x2740 [ 782.268121][T15039] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 782.287719][T15039] RSP: 0018:ffffc90003f07510 EFLAGS: 00010246 [ 782.293756][T15039] RAX: 0000000000080000 RBX: ffffea0001678c80 RCX: ffffc90012e92000 [ 782.301707][T15039] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88804bc92884 [ 782.309653][T15039] RBP: ffffc90003f077e0 R08: 0000000000000001 R09: 0000000000000001 [ 782.317597][T15039] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888023d10878 [ 782.325552][T15039] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 782.333494][T15039] FS: 00007f25d25f66c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 782.342395][T15039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.348955][T15039] CR2: 0000200000001e7e CR3: 0000000065cb2000 CR4: 00000000003526f0 [ 782.356913][T15039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.364859][T15039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.372801][T15039] Call Trace: [ 782.376054][T15039] [ 782.378960][T15039] ? __pfx_filemap_fault+0x10/0x10 [ 782.384052][T15039] __do_fault+0x10a/0x490 [ 782.388359][T15039] do_pte_missing+0x1031/0x3fb0 [ 782.393191][T15039] ? __handle_mm_fault+0x1010/0x2a40 [ 782.398455][T15039] __handle_mm_fault+0x103d/0x2a40 [ 782.403544][T15039] ? __pfx___handle_mm_fault+0x10/0x10 [ 782.408992][T15039] ? find_vma+0xbf/0x140 [ 782.413217][T15039] ? __pfx_find_vma+0x10/0x10 [ 782.417867][T15039] handle_mm_fault+0x3fe/0xad0 [ 782.422611][T15039] do_user_addr_fault+0x7a6/0x1370 [ 782.427698][T15039] ? rcu_is_watching+0x12/0xc0 [ 782.432435][T15039] exc_page_fault+0x5c/0xc0 [ 782.436914][T15039] asm_exc_page_fault+0x26/0x30 [ 782.441735][T15039] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 782.447427][T15039] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 782.467006][T15039] RSP: 0018:ffffc90003f07a78 EFLAGS: 00050202 [ 782.473055][T15039] RAX: 0000000000000001 RBX: 0000200000001e7e RCX: 0000000000000001 [ 782.481000][T15039] RDX: ffffed1008e42178 RSI: 0000200000001e7e RDI: ffff888047210bbe [ 782.488944][T15039] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed1008e42177 [ 782.496889][T15039] R10: ffff888047210bbe R11: 0000000000000000 R12: 0000000000000000 [ 782.504835][T15039] R13: ffff888047210bbe R14: dffffc0000000000 R15: 0000200000001e7e [ 782.512781][T15039] _copy_from_user+0x98/0xd0 [ 782.517347][T15039] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 782.522960][T15039] snd_rawmidi_write+0x26e/0xc10 [ 782.527871][T15039] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 782.533312][T15039] ? avc_policy_seqno+0x9/0x20 [ 782.538060][T15039] ? selinux_file_permission+0x11f/0x580 [ 782.543689][T15039] ? __pfx_default_wake_function+0x10/0x10 [ 782.549481][T15039] ? bpf_lsm_file_permission+0x9/0x10 [ 782.554831][T15039] ? security_file_permission+0x71/0x210 [ 782.560443][T15039] ? rw_verify_area+0xcf/0x680 [ 782.565186][T15039] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 782.570615][T15039] vfs_writev+0x6c4/0xdc0 [ 782.574926][T15039] ? __pfx_vfs_writev+0x10/0x10 [ 782.579752][T15039] ? kmem_cache_free+0x2d4/0x4d0 [ 782.584663][T15039] ? __fget_files+0x20e/0x3c0 [ 782.589311][T15039] ? do_writev+0x295/0x330 [ 782.593703][T15039] do_writev+0x295/0x330 [ 782.597925][T15039] ? __pfx_do_writev+0x10/0x10 [ 782.602665][T15039] ? rcu_is_watching+0x12/0xc0 [ 782.607403][T15039] do_syscall_64+0xcd/0x260 [ 782.611882][T15039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.617751][T15039] RIP: 0033:0x7f25d478e169 [ 782.622143][T15039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.641725][T15039] RSP: 002b:00007f25d25f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 782.650108][T15039] RAX: ffffffffffffffda RBX: 00007f25d49b5fa0 RCX: 00007f25d478e169 [ 782.658051][T15039] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 782.665991][T15039] RBP: 00007f25d4810a68 R08: 0000000000000000 R09: 0000000000000000 [ 782.673933][T15039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.681874][T15039] R13: 0000000000000000 R14: 00007f25d49b5fa0 R15: 00007ffc6168b7b8 [ 782.689821][T15039] [ 782.692813][T15039] Modules linked in: [ 782.696713][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.703630][T15039] ---[ end trace 0000000000000000 ]--- [ 782.709091][T15039] RIP: 0010:filemap_fault+0x1862/0x2740 [ 782.714631][T15039] Code: 00 e9 bf ec ff ff 48 8b 7c 24 28 e8 98 48 2d 00 e9 66 f3 ff ff e8 1e cd c7 ff 48 c7 c6 40 ee 98 8b 48 89 df e8 2f 94 10 00 90 <0f> 0b e8 07 cd c7 ff 48 c7 c6 a0 e4 98 8b 48 89 df e8 18 94 10 00 [ 782.734304][T15039] RSP: 0018:ffffc90003f07510 EFLAGS: 00010246 [ 782.740370][T15039] RAX: 0000000000080000 RBX: ffffea0001678c80 RCX: ffffc90012e92000 [ 782.748332][T15039] RDX: 0000000000080000 RSI: ffffffff81f382e1 RDI: ffff88804bc92884 [ 782.756310][T15039] RBP: ffffc90003f077e0 R08: 0000000000000001 R09: 0000000000000001 [ 782.764289][T15039] R10: ffffffff90864917 R11: 1ffffffff1c79489 R12: ffff888023d10878 [ 782.772262][T15039] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 782.780229][T15039] FS: 00007f25d25f66c0(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 782.789176][T15039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 782.795770][T15039] CR2: 0000200000001e7e CR3: 0000000065cb2000 CR4: 00000000003526f0 [ 782.803750][T15039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 782.811717][T15039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 782.819721][T15039] Kernel panic - not syncing: Fatal exception [ 782.825955][T15039] Kernel Offset: disabled [ 782.830251][T15039] Rebooting in 86400 seconds..