last executing test programs: 10m27.467065062s ago: executing program 32 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x10008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x2}}, 0x20) r4 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000140)="ad", 0x1) 9m19.50290507s ago: executing program 33 (id=536): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='debugfs\x00', 0x1200010, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000180)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x8, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6m45.500142612s ago: executing program 34 (id=1091): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xf}, &(0x7f00000000c0)=0x8) 6m26.868408914s ago: executing program 35 (id=1153): gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x42}, 0x10) 6m20.007194167s ago: executing program 36 (id=1173): socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x4005, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000f9064d564b"]) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e21, @dev}, 0x2}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r10, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=""/234, 0xea}, 0x3}], 0x1, 0x100, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0d2c922bcfbe989504bca73a4d2503000000000000000008000000"], 0x14}}, 0x8) 5m35.245398718s ago: executing program 37 (id=1289): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)=""/107, 0x70, 0x6b, 0x1, 0x8, 0x10000, @value}, 0x28) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x48, 0xb, 0x7, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x86, 0x3c70, 0x9, 0x9}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x69f7d16ad9f496b9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x1200}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e25, @remote}, 0x10) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$TCSETS2(r9, 0x402c542b, &(0x7f0000000080)={0x2, 0x2, 0xffffffe0, 0xfffffffc, 0x42, "c9190000000003052de5856ee1aa3a9400", 0x99, 0x4}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x80000000001}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) 5m11.455645082s ago: executing program 38 (id=1365): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a3000000000080005"], 0x6c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x12}, 0x0) 4m46.345429288s ago: executing program 39 (id=1459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0xff0f0000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 4m37.118134237s ago: executing program 40 (id=1498): fsopen(&(0x7f0000000340)='ext3\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0xb931}, 0xfffffffffffffe89) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x5c, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40400) r4 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20040054) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000240)={0x0, 0x9759, 0x100, 0x2, 0x34c}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x31713}) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(r8, 0x3516, 0x1, 0x0, 0x0, 0x0) 4m32.380625948s ago: executing program 41 (id=1515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x2, 0x3}) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x2044001) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) 4m29.182318968s ago: executing program 42 (id=1522): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) setreuid(0x0, 0xee00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x2fb, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xdd, 0x10, 0x5e, 0x20, 0xdf6, 0x6e, 0x1c58, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e9, 0x1, 0x0, 0x20, 0x30, 0x1, [{{0x9, 0x4, 0x71, 0x9, 0x8, 0x33, 0x97, 0xfe, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0x7fff, 0x9}, [@mixer_unit={0x8, 0x24, 0x4, 0x5, 0x9, '=?j'}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x3, 0x3, 0xb1, "", "5d930b"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x453, 0x2, "961f207874bf08f03f"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x63, 0x8, "0cf20150939468"}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x0, 0x2, 0x4, [@generic={0x9a, 0x23, "3ab87bb3fcdbbf83327d160c42d1f836b68d2561f521bb7397ee06c3162e6067f499d9ae76d5692268f79ac5b8e6cd796b4312a6952d8b47521d6ffde20eb229f318317e0d155cda739a3955a2e222cbf2a44ceb60eaa06677de8dbdd3fd1e0e779a8128c2f91bfb434da38e6d74de3e343abfd46ad75177988a94e6ef4e1b35c207a77a8e5ab344171b6dcf8c0cddb9f03126e6c1f78dae"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x57, 0x47b}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x1, 0x0, 0x7, [@generic={0x5, 0xf, "67e139"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x0, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x28f209b08ab0f32d, 0x82, 0x4}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x7, 0x5, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xd6}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0xfc, 0x8, 0x80, [@generic={0xf2, 0x23, "afaa949c754e11aea0692b857aa573dc2eabd4e8d7c9a45d3aa71b7cbdd7b4c4125c5c8686297cd82a66b0e546e5f77b745d9b1fb24a3ec9503b841112374397d09c8be8037d364e166e473be72b03d24f7ae24d0e7fe8c6f7fe82cda4799fa55f57e2d913141f557fee05f9223aed270616c422f936904c1d31644d53b0fc07b5a52523c5d5187ff501a6b7ff863b6d5541f2b6582f59419c8ed43c801973db16e5118497734d6faab7de8c61ec9a6bc1e53519e838c289a62983c6c3bd3d8c4beb907d0924885e8f662308bd3c954003815bfd1bdde1ef4d8a55bd7eb126f4e0cc178837825b14de2c4c8e2c099c65"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x1d, 0x4, 0x1}}, {{0x9, 0x5, 0xf, 0xc, 0x608, 0xb, 0x1, 0x9}}, {{0x9, 0x5, 0x80, 0xc, 0x200, 0x0, 0xd6, 0xa, [@generic={0xac, 0x3c, "94b57debb63dbc4ec061d655f48f96dbe941ac9aa0e2eeb7e1674413912f5ba83a6e74fef578f1cfc524af9e8376ed3619770c97fcfdcb842b52b64f2b0d4986d5309ae53e791d0bce66f96ede041aa3c067ba7f192ac41e07a337ddc222c9221498f85fb95493e52760f3d297b2ef804b3fefe743e28231104cc1c7f56ce0e72a20a28f02a73d2fa73cc2138c3a57d2aabc40b979a9a5f86f2711566736b37c9cd08550984143a8e64c"}]}}]}}]}}]}}, 0x0) 4m19.530611409s ago: executing program 43 (id=1538): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="18000040009500000000000000dc17979ccfab90af10d64cbc4ec604fc255fa4cc534ac2cde050a2cc542c79fb393a6d394eacccfe3ed1efe017c78139bd74ae69fe862ab230a8859d380da770771ee37bc3c3e0d4fe00000000000007eeb782a4c8f2f0ca548a6c85033f91b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) 4m15.008771211s ago: executing program 7 (id=1523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) socket$nl_generic(0x10, 0x3, 0x10) 4m14.428477889s ago: executing program 7 (id=1564): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x6, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {0x2}, {}, {}, {0x4}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setgroups(0x1, &(0x7f0000000300)=[0x0]) sendto$packet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140), 0x14) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) fcntl$notify(r1, 0x402, 0x8000003d) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) 4m12.726569299s ago: executing program 7 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000}) 4m10.810837978s ago: executing program 7 (id=1575): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00a4f9f390059dacaa5d18c088f239a56cfeff20797a30000031000900010073797a32"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) 4m10.665519133s ago: executing program 7 (id=1578): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) fchdir(0xffffffffffffffff) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file5\x00') 4m10.348655895s ago: executing program 7 (id=1583): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109", @ANYBLOB="87e295"], 0x0) 4m9.416309099s ago: executing program 44 (id=1583): bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109", @ANYBLOB="87e295"], 0x0) 2m44.487146767s ago: executing program 3 (id=1939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x60, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 2m44.165224613s ago: executing program 3 (id=1942): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) rename(&(0x7f0000000180)='./file0\x00', 0x0) 2m44.076490533s ago: executing program 3 (id=1944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001180)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @empty, 0x4, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000400)={0xed, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5) open(&(0x7f0000000100)='./bus\x00', 0x1c3142, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x212082) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x10bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3e505f89, 0x5, 0x200000e4, 0x2, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m42.885580172s ago: executing program 3 (id=1948): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 2m42.502571777s ago: executing program 3 (id=1952): r0 = io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3, 0x3, 0x35b}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x8, @empty, 0x2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001580)={r3, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000540)=0x9c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x6500, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m41.785413296s ago: executing program 3 (id=1958): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x59, 0x400800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20001, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000280)='/dev/video#\x00', &(0x7f00000002c0)='./file0\x00', r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x700, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x30, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004008d}, 0x20000000) 2m40.434064324s ago: executing program 45 (id=1958): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x59, 0x400800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20001, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000280)='/dev/video#\x00', &(0x7f00000002c0)='./file0\x00', r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x700, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x30, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004008d}, 0x20000000) 2m30.548348782s ago: executing program 9 (id=1994): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/114, 0x72) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101581, 0x100) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xcc}}, 0x0) 2m30.30430036s ago: executing program 1 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(r1, &(0x7f0000000300)='./file1\x00', 0x400, 0x41, &(0x7f00000003c0)) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x4) ioctl$TIOCSTI(r7, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xc1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)) capset(0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000200000000000000003b00000008000300", @ANYRES32, @ANYBLOB="5800330050000000080211000000ffffffffffff5050505050500000ebffffffffffffff6400000000060101010101013dab1ae000000000060209002d1a02000000000000000000009000000000000000000000000000000800260064140000"], 0x7c}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 2m28.427844504s ago: executing program 9 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x400000ffc000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5900, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 2m27.623006676s ago: executing program 9 (id=2000): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file1/file0/file0', [{0x20, '\xfe]\xe9a<$\x01)\xa3\x03D%\x06\xf9}iv\xfc\xe0\xc7s\xc1\xa5c\xa4\xfd\xb8\xea\xe5\x9a\x82w\xc6\\]\x8cB\xfb\xea\xbd\xe3\x8c@\x8aqX\xcd\xf5?\xe6\xa2z\xbdPF_\x01K5\xbf\xc0\x83=\xa9]S\xe2`\x02j;\xce\x8a\x9fY\xdc\x90L\x1f\x9cS\x83\xb4\xc3\xfb\xe9$\x80\xbd\x85\x8bu-a\x9a\xb3\xb0{\xed\xcc\xdd\xeeG\xeb\x98\xb2\xfa\xc8\xa1\x04\xd5N\x9f\xda\x95\xf8\x8c\x92v\xf3\xf6I\xeb6\xe9`\xcbt\x0f`\xb3dl\x0f\x8e\x93\x10\x97n@\xc4\xcb\xc6\x80\x17O\x8dM#x\xe2\xe9T\xda\x1d\xe6\xb1\x1b\x06\x89\x94Q\xcb\x8f\x92N\xade\xf9l\xca\x81\xd3\xd1\x84`6\xed\x98\x9a\x90:\x13\xdb\x8f\x87\xd6\xe8w\xfdb\x17}\x14*z\x98\xb3\x96\x9dW\xa7\x81\x0e\x11Q3\xc2\xbfx\x94\xbb\x13\x9b\xd2\xec/\xfac^\xa2\x8e8\xbeM\x11\xcb\x89P\xba\xd9E}\xe4\xa7M~?\xbdiMh\xce\xb2\b\x9d\xf0\xbd\xc5\xa7=A\xc9\xf6\x9c\\\x9c\xf0\xaa=\xb7\x83\x80\x10.%\t\xed\xb6\xacP\"\a\xc6\x8a\xf6GB\xd2a\x83\xa4\xa4\x1bRO\x1a\xe2N\xe6\xc8\xf2Cm\xb0\xe7\xeb\xcf\xc3\xba\xbd\xf4\xde\x8a\\;\xb6\xfdR3\x0e\xe5\x1ekzrV#Z@\xcd\xc9\xcbLJi8\x04q\xd5+\xf9x\xeas\xb2\xa1D\xd5\xc7\xfa\x919\x93_\xc7/:R2\xc5\xc0\xb4\"\x85\xe8THI$\xe5\xac\xb7\x13\xb2\xa5\x93\xbf\x83g5.\xb9\xd0\x89\xef\x8f\r\xa2\xfe\x90\x1b\xc8[\xef(\x85\x91\xc8\x9e\x87g4u\xf4PD^\xe2\x85p]\x06\x13\xd2\xf9\xdf\x8d\x96\xdf@\xf4*\x82\x9d\xb4\xf1\n\x89.\xf2\xbc\xa8\xb9\x98}\xc2\x8c_\x84\xabJ\x04\x84!x\xb8l\xb9T\xed\xc5\x9f\xb5\xf1<|\x12\x8d6<\xe7\x89\x80\xbe.\xa6I\xbb\xfe\xdfkv9\xb6\r\x11x\xb5LM\xb0\xd9\x15~-t4\xf8\xe6\xd8\x94R2\xace{pu(R2\xa3\x9dyh\x83\xa3R\x1f'}]}, 0x20c) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x2361, 0x0, 0x2}, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) inotify_rm_watch(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup, 0x17, 0x1, 0xb3bd, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)}, 0x40) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x100, 0x2, 0x100316}, &(0x7f0000000340), &(0x7f0000000280)) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x81) r4 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000180)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={'sha3-224-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022edffffff9a04004eea"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 2m26.381332425s ago: executing program 1 (id=2003): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2970826, &(0x7f0000000080)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0]) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000002c0)=0xa60, 0x4) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000040)=0x9, 0x4) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x10, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267bd, r5, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x3, 0x0, 0x0, r5}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r0, r9}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000480), 0x10) 2m25.220077536s ago: executing program 9 (id=2012): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 2m25.072871276s ago: executing program 9 (id=2014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0xa}) (async) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000400)={0x8f, 0x0, 0xa}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0xfffffffffffffee9, 0x700, 0x0}) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f00000002c0)={0xfffffffffffffee9, 0x700, 0x0}) keyctl$KEYCTL_PKEY_QUERY(0x20, 0x0, 0x0, &(0x7f00000005c0)='\x00', 0x0) syz_open_dev$video(&(0x7f0000000080), 0x6, 0x0) (async) syz_open_dev$video(&(0x7f0000000080), 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000010009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r11, 0xc048aeca, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m24.76951496s ago: executing program 9 (id=2016): getpid() sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x3000000, 0x0, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 2m24.438442841s ago: executing program 46 (id=2016): getpid() sched_setscheduler(0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000008c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x3000000, 0x0, 0x0, 0xfffffffc}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) 2m23.451266336s ago: executing program 1 (id=2019): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000280)=""/114, 0x72) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101581, 0x100) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[], 0xcc}}, 0x0) 2m22.442497757s ago: executing program 1 (id=2023): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 2m22.026702254s ago: executing program 1 (id=2024): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0xfffffffffffffffe, 0xfd8f) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x0, 0x1}, 0xc, 0x1, &(0x7f0000000180)="e43e54c2c3ee75493ef0203697597f992827036f9216299b92c6468088e7681801f347ac2047ba27e6740d12b5dc5582ca2b59ff4ce2dd062690bf595615c7f80b04ee68b4843f0306469f6c9ada95", 0x4f, 0x10000, 0x8, 0x41, 0x2, 0x4, &(0x7f0000000440)="806150524a75ac59747be5d2800a75dac7cb5ada895d72e158b9890bcb7b62e49ca0d5e1101bb67ece3170447d8186293eca667aed98c9a959eca576c2df34233b6908aaa50d9cd9d3524d0662a6d367a5f24720d9472aed8a864881d22552728e51a9cb2021c2ed83b4ccaca4bb201498f5937b0d87f71c480126cec7ddcc1117e32409103813062a050595efa6ec90c119beac864b2f45533f8e0b3f10d61c9eb96329d57b6a6ac9f136f06f13ef17a7eaa3a71f61ae87f5a575c51cdae328bb10701bc8d9351effc78244", [{0xd268, 0x8000, 0x7604}, {0x2, 0x7ff, 0x32e}, {0x9, 0xfffffff7, 0x1}, {0x9, 0x5, 0x3}, {0x101, 0x8}, {0x8, 0x8, 0x7}, {0x8, 0x232b, 0x6}, {0x2680a944}, {0x3, 0x5}, {0x1, 0x0, 0x7}, {0xa65, 0x7, 0x2}, {0xc, 0xb5d, 0x10000}, {0x2, 0x5, 0x80a}, {0x4a, 0x0, 0x2}, {0x5, 0x7f, 0x8}, {0x2000000, 0x5, 0x401}, {0x6, 0x6098, 0xc3c2}, {0x5b, 0x8, 0x5}, {0x5, 0x5, 0x5}, {0xb3f, 0x9}, {0x3, 0x5, 0x7}, {0x7fff, 0x5, 0x9}, {0xfffffff8, 0xb4, 0xac7d}, {0x80, 0x2, 0x5}, {0x9, 0xa8f, 0xfffffff3}, {0x2, 0x7, 0xa}, {0x7, 0x2b, 0x8}, {0x7ff, 0x1, 0x569}, {0x101, 0x8, 0x10000}, {0x100, 0x7fff, 0x2}, {0x8, 0x0, 0x1}, {0x714, 0x3, 0x6}, {0x10, 0xb49, 0x8}, {0x5, 0x10, 0x19f4000}, {0x4, 0x8, 0x4}, {0xfff, 0x8000, 0x6}, {0x7fffffff, 0xfffffffb, 0x18f7}, {0xfe000000, 0xfff, 0x7fffffff}, {0x2b, 0x5, 0x6}, {0x4, 0x1, 0x1}, {0x48, 0x2, 0x9}, {0x0, 0x4, 0x40000000}, {0xe1d, 0x2, 0x1}, {0x0, 0x6, 0x6}, {0xa, 0xe, 0x6}, {0x3fe, 0xb3d, 0x1273}, {0x1ff, 0x8001, 0x1000}, {0x2, 0x3, 0x25}, {0x7f, 0x2, 0x3}, {0x7fffffff, 0x5, 0x5}, {0x9, 0x1, 0x100}, {0x6, 0xd06, 0x3}, {0x0, 0x7, 0xaa}, {0x0, 0x1, 0x6}, {0x0, 0x7, 0x80000001}, {0x401, 0x1, 0x1}, {0x10001, 0xb95, 0xa}, {0x401, 0x5, 0x3}, {0x4, 0x6d0, 0xffffffff}, {0x1, 0x7, 0x509e}, {0x7fff, 0x8, 0x2}, {0xd430, 0x4, 0xa}, {0x5, 0xcd, 0x101}, {0x8, 0xfffffff9, 0xcf}, {0xa3f, 0x0, 0x4}]}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 2m21.705010807s ago: executing program 1 (id=2027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010008000000404112155000000000000109030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="043dc658015c3f306c46392b2581be002205000000a3551bb4ff"], 0x0}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xc0, 0x3}, 0x0, &(0x7f0000000140)={0x1000001ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0xbcf}, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c00028006000100f1"], 0x4c}, 0x1, 0xba01}, 0x810) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="f0e25f5cc1cbc88fe4aabedc7632b6febba9e3e5ead8c264363afc68f62912bdb3d740771376a8a2289394ff8dbede266b848515cb459c39f5f04de6e347de3397a07cd6837ff5733affcef138850ea3cf579cf082a3b0de4b5430a54a1458f66b3099fa38115806d086e247d9a1de5f5c55dab16febc7d45c3dd72726ef6e39e19f64baf1f700"/148], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004808) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, 0x0) 2m20.984940809s ago: executing program 47 (id=2027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010008000000404112155000000000000109030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="043dc658015c3f306c46392b2581be002205000000a3551bb4ff"], 0x0}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) r1 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xc0, 0x3}, 0x0, &(0x7f0000000140)={0x1000001ff, 0x0, 0x1, 0x3, 0x0, 0x8, 0x1, 0xbcf}, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$uinput_user_dev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000100003040400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006970766c616e00000c00028006000100f1"], 0x4c}, 0x1, 0xba01}, 0x810) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00', @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="f0e25f5cc1cbc88fe4aabedc7632b6febba9e3e5ead8c264363afc68f62912bdb3d740771376a8a2289394ff8dbede266b848515cb459c39f5f04de6e347de3397a07cd6837ff5733affcef138850ea3cf579cf082a3b0de4b5430a54a1458f66b3099fa38115806d086e247d9a1de5f5c55dab16febc7d45c3dd72726ef6e39e19f64baf1f700"/148], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20004808) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, 0x0) 1m57.955968414s ago: executing program 2 (id=2118): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, 0xfffffffffffffffe, 0xfd8f) openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x0, 0x1}, 0xc, 0x1, &(0x7f0000000180)="e43e54c2c3ee75493ef0203697597f992827036f9216299b92c6468088e7681801f347ac2047ba27e6740d12b5dc5582ca2b59ff4ce2dd062690bf595615c7f80b04ee68b4843f0306469f6c9ada95", 0x4f, 0x10000, 0x8, 0x41, 0x2, 0x4, &(0x7f0000000440)="806150524a75ac59747be5d2800a75dac7cb5ada895d72e158b9890bcb7b62e49ca0d5e1101bb67ece3170447d8186293eca667aed98c9a959eca576c2df34233b6908aaa50d9cd9d3524d0662a6d367a5f24720d9472aed8a864881d22552728e51a9cb2021c2ed83b4ccaca4bb201498f5937b0d87f71c480126cec7ddcc1117e32409103813062a050595efa6ec90c119beac864b2f45533f8e0b3f10d61c9eb96329d57b6a6ac9f136f06f13ef17a7eaa3a71f61ae87f5a575c51cdae328bb10701bc8d9351effc78244", [{0xd268, 0x8000, 0x7604}, {0x2, 0x7ff, 0x32e}, {0x9, 0xfffffff7, 0x1}, {0x9, 0x5, 0x3}, {0x101, 0x8}, {0x8, 0x8, 0x7}, {0x8, 0x232b, 0x6}, {0x2680a944}, {0x3, 0x5}, {0x1, 0x0, 0x7}, {0xa65, 0x7, 0x2}, {0xc, 0xb5d, 0x10000}, {0x2, 0x5, 0x80a}, {0x4a, 0x0, 0x2}, {0x5, 0x7f, 0x8}, {0x2000000, 0x5, 0x401}, {0x6, 0x6098, 0xc3c2}, {0x5b, 0x8, 0x5}, {0x5, 0x5, 0x5}, {0xb3f, 0x9}, {0x3, 0x5, 0x7}, {0x7fff, 0x5, 0x9}, {0xfffffff8, 0xb4, 0xac7d}, {0x80, 0x2, 0x5}, {0x9, 0xa8f, 0xfffffff3}, {0x2, 0x7, 0xa}, {0x7, 0x2b, 0x8}, {0x7ff, 0x1, 0x569}, {0x101, 0x8, 0x10000}, {0x100, 0x7fff, 0x2}, {0x8, 0x0, 0x1}, {0x714, 0x3, 0x6}, {0x10, 0xb49, 0x8}, {0x5, 0x10, 0x19f4000}, {0x4, 0x8, 0x4}, {0xfff, 0x8000, 0x6}, {0x7fffffff, 0xfffffffb, 0x18f7}, {0xfe000000, 0xfff, 0x7fffffff}, {0x2b, 0x5, 0x6}, {0x4, 0x1, 0x1}, {0x48, 0x2, 0x9}, {0x0, 0x4, 0x40000000}, {0xe1d, 0x2, 0x1}, {0x0, 0x6, 0x6}, {0xa, 0xe, 0x6}, {0x3fe, 0xb3d, 0x1273}, {0x1ff, 0x8001, 0x1000}, {0x2, 0x3, 0x25}, {0x7f, 0x2, 0x3}, {0x7fffffff, 0x5, 0x5}, {0x9, 0x1, 0x100}, {0x6, 0xd06, 0x3}, {0x0, 0x7, 0xaa}, {0x0, 0x1, 0x6}, {0x0, 0x7, 0x80000001}, {0x401, 0x1, 0x1}, {0x10001, 0xb95, 0xa}, {0x401, 0x5, 0x3}, {0x4, 0x6d0, 0xffffffff}, {0x1, 0x7, 0x509e}, {0x7fff, 0x8, 0x2}, {0xd430, 0x4, 0xa}, {0x5, 0xcd, 0x101}, {0x8, 0xfffffff9, 0xcf}, {0xa3f, 0x0, 0x4}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 1m56.775996952s ago: executing program 2 (id=2122): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101600, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x1, 0xffffffc, 0x8000000, 0xffffffff, 0x9, "26000000000000000000000000000019", 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) 1m55.504802248s ago: executing program 2 (id=2129): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(0x0, 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$dri(0x0, 0x40100001, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000002c0)=0xa0000) r2 = dup(r1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m55.423032159s ago: executing program 2 (id=2132): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 1m54.252563388s ago: executing program 2 (id=2135): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=r0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="000002be23d4ccf8f09800000000001000e300008ff92c8d1ca26300", @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r0], 0x50) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="320000000600000000000000000000001120000000000000000000000000000009000000679010dae6e23b5ac9732722c7c4000000002f2b2d21090000002600", @ANYRES8, @ANYRES16=r2, @ANYRES32=r2, @ANYRES8=r3, @ANYRESOCT], 0x32) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, 0x1c5}, &(0x7f0000000100), 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2c00000002090102000000000000000001000004180002001400018008000100ffff07000900020064010101"], 0x2c}, 0x1, 0x0, 0x0, 0x20008810}, 0x44) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) 1m53.356817814s ago: executing program 2 (id=2139): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000080)={0xeeee0000, 0x101000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="6abddca45723e65886369fbc6ef20f00000000000000d06e920dbf7a2929bf"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x0, 0x3fffc, {0x77359400}, {0x5, 0x0, 0x81, 0x6, 0x7f, 0x8, "14f31d90"}, 0x101, 0x1, {}, 0xade}) ioprio_set$pid(0x0, 0x0, 0x2007) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 1m53.004553138s ago: executing program 48 (id=2139): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f0000000080)={0xeeee0000, 0x101000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="6abddca45723e65886369fbc6ef20f00000000000000d06e920dbf7a2929bf"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x0, 0x3fffc, {0x77359400}, {0x5, 0x0, 0x81, 0x6, 0x7f, 0x8, "14f31d90"}, 0x101, 0x1, {}, 0xade}) ioprio_set$pid(0x0, 0x0, 0x2007) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) 18.153545311s ago: executing program 4 (id=2496): r0 = userfaultfd(0x80001) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x1000000}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x7fff, 0x0, '\x00', 0x100000}}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.829535845s ago: executing program 4 (id=2503): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x4) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) 16.768315722s ago: executing program 8 (id=2504): socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x2, 0x101000) open(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000007200330306000000a6ffffff07000000", @ANYRES32=0x0, @ANYBLOB='\b'], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES64], &(0x7f0000000580)='GPL\x00', 0x9, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r5, 0x103, 0x2, &(0x7f0000000700)=0x81, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400020000000000100002000000000013000100000000000a8217406531db5aa70fa08925e6976adbc81d4dc78398e2461e63b2b5a0d1d11d8d59c916f42077c45640b4e4714590e3c1"], 0x24, 0x3) close_range(r6, 0xffffffffffffffff, 0x0) 14.434587375s ago: executing program 8 (id=2510): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f00000000c0)={0x14}, 0x14) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x4, 0x9, 0xfffffff7}) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 13.701885711s ago: executing program 4 (id=2517): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)="f2ddde091149e1bd6cf4e8402907723b", 0x10) read$char_usb(r1, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans']) r2 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000791207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x21, &(0x7f00000005c0)={&(0x7f0000000080)={0x6c, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) syz_usb_disconnect(r0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x208402) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000380)={0x218, @time={0x6, 0x7}, 0x9, {0xf}, 0x40, 0x1, 0x7}) socket(0x2b, 0x80801, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004ef00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r7, 0x0, 0x0}, 0x20) syz_open_dev$evdev(0x0, 0x7ff, 0x2640a2) ioctl$AUTOFS_IOC_ASKUMOUNT(r6, 0x80049370, &(0x7f0000000240)) 9.753323877s ago: executing program 4 (id=2525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fanotify_init(0x2, 0x101000) open(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) syz_emit_ethernet(0x46, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x61680, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x21, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x24, 0x3) close_range(r4, 0xffffffffffffffff, 0x1f000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 9.105442201s ago: executing program 8 (id=2527): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000060000000000000000000850000001700000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x400, 0x800, 0xf, 0x1a, 0x4, 0x2, 0xa, 0xa, 0x9b, 0x3, 0xf5, 0x1e, 0x9}, {0x0, 0x1, 0x0, 0x9, 0x3, 0x65, 0x77, 0x8, 0x6, 0x4, 0x7, 0x7, 0x3}, {0x4, 0x4933, 0x6, 0x80, 0x3, 0x1, 0xc7, 0x3, 0xf, 0xc, 0x5, 0x5d, 0x100000001}]}) syz_usb_disconnect(r0) 7.289482804s ago: executing program 0 (id=2531): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000b51000/0x1000)=nil, 0x1000, 0xb635773f05ebbee7, 0x10, 0xffffffffffffffff, 0xeadd4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x6) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="042f"], 0x200) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'wg0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 6.934231811s ago: executing program 0 (id=2532): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x4) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f020048017f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_DROP_MASTER(r4, 0x641f) socket$nl_generic(0x10, 0x3, 0x10) 6.796069296s ago: executing program 5 (id=2534): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000001240)='notify_on_release\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x121342, 0x0) (async) open(0x0, 0x121342, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r6, 0x0) (async) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) pread64(r7, &(0x7f0000000300)=""/27, 0x1b, 0x9) (async) pread64(r7, &(0x7f0000000300)=""/27, 0x1b, 0x9) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r9, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)="f856036d10aa", 0x6}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0xe84e, 0x100000001}, 0x0) (async) prlimit64(0x0, 0x5, &(0x7f00000000c0)={0xe84e, 0x100000001}, 0x0) r10 = fsmount(r8, 0x0, 0x91) pwrite64(r2, &(0x7f0000000380)='k\'', 0x2, 0x8) (async) pwrite64(r2, &(0x7f0000000380)='k\'', 0x2, 0x8) sync_file_range(r10, 0x8, 0x8, 0x0) 6.527874068s ago: executing program 5 (id=2535): mkdir(&(0x7f00000002c0)='./file0\x00', 0x50) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x412001) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000400000000007f09737e000008000300", @ANYRES32=r5], 0x3c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 6.527342841s ago: executing program 0 (id=2536): mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(0x0, 0x40100001, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 5.933548873s ago: executing program 5 (id=2537): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.925245796s ago: executing program 0 (id=2538): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000080)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x2000, 0x4) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000001c0)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$isdn(0x22, 0x2, 0x26) bind$isdn(r5, &(0x7f0000000040)={0x22, 0x8c, 0x0, 0x1}, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delqdisc={0x2c, 0x25, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2, 0x10}, {0x7, 0xe}, {0x19, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9b3}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc050}, 0x801) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r1, 0xa}, 0x10) 5.791469133s ago: executing program 6 (id=2539): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000240), 0x59, 0x400800) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x20001, 0x20) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000280)='/dev/video#\x00', &(0x7f00000002c0)='./file0\x00', r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x700, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) fstat(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x30, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @uid=r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004008d}, 0x20000000) 4.932814251s ago: executing program 5 (id=2540): socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0be6ffff060000e400000100090000008c9b0c410000004807", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009e099d5e987643322929427fe0d6e57388d86f956228f0c0d821f168c221064a8355c0330236fffe90341698e451100e077e0e3d79e7d09eebfd644551f76ac7b04a6860fd58a4dbfd15ad876664e34b910d9dcb965603000000000000004654ecd992aaafd144efb9ab4bed4d3cd44ab5ded205771b336989273fb6f1d48998b085fe63cc1c2a31958b4cf43c7cacdc9e33ee78f3115fa627b47da6d95d73f567750c775823"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) 4.553409009s ago: executing program 0 (id=2541): socket(0x2a, 0x2, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000), 0x7af9, 0x40000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x3274, 0x0, 0x8000}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f0000000040), 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r8, &(0x7f00000004c0)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x1, 0x0) (async) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) 4.552909932s ago: executing program 8 (id=2542): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4010, r0}, 0x18) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000180)=r2, 0xffffffffffffff6a) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001200)="a912", 0x2}], 0x1}, 0x20000801) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x65, &(0x7f00000019c0)=0xfffffff8, 0x4) syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x7fffffff, 0x20800) sendmmsg$inet6(r3, &(0x7f0000001240)=[{{&(0x7f0000000400)={0xa, 0x4e24, 0x99, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000290000003600009d1d785f0c94f6dc00180000000000000029000000360000006c00000000000000"], 0x30}}], 0x1, 0x20000004) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) openat$fb0(0xffffff9c, 0x0, 0x80080, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x7d}, 0xffffffffffffffff, "e2410fc7932741e6b70674a7718a57756107b3972fd02b2504ecf28f14ee12cc", 0x192, 0x0, 0x2, 0x7}, 0x3c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x2200890, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000700) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="00f0000000000000", 0x8) write$UHID_INPUT(r4, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 4.455168803s ago: executing program 4 (id=2543): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r0, 0xaec7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000b51000/0x1000)=nil, 0x1000, 0xb635773f05ebbee7, 0x10, 0xffffffffffffffff, 0xeadd4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x6) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="042f"], 0x200) socket$tipc(0x1e, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeed, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.368609108s ago: executing program 6 (id=2544): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r1, 0x20000005) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000000)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @mcast2, 0x4}, r4}}, 0x30) r5 = accept4(r1, 0x0, 0x0, 0x80800) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x64000080) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 3.001467968s ago: executing program 5 (id=2545): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0xfffffffffffffe86, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x7, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4, 0x6, "c619e3cf9bccaefc9658da0882d1a5c11aa7c4fd58121a33a63604162b0faaf1c4aa730299c96386fb7cacea5cf383ef978274e6347d87ef2e78b4441f2a0a91caf172357924843886ec5a0df2465d39a6dc088cb0a291d2"}, {0xfffffffffffffca0}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x10000, 0xe3bd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x0) 2.727165107s ago: executing program 4 (id=2546): syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c93"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = syz_io_uring_setup(0x19f2, 0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.678246595s ago: executing program 0 (id=2547): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a0545000000000000010902"], 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r1, &(0x7f00000000c0), 0x0, 0xfffffff9, 0x3) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'dummy0\x00', 0x3}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'pim6reg1\x00'}, 0x18) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0) 2.618228623s ago: executing program 6 (id=2548): mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dri(0x0, 0x40100001, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000002c0)=0xa0000) r4 = dup(r3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "1a0b5dbeaad6e12581c3705615196659d1edfd3e937bb049a5b6150777cdfc3f662aaa33c62804d786b79e9434331a65305e1ca8b12f2ef78b51d868fcacb8c1ce634287005fa21eae9125b9b5f78afe5816253c1d8179a25109c92aca81cbefee8bfee6e64f7d09541b3b54b464b08cd356e1cb5c49e7deaccfce3d06dbdf2318dfb309890458cb7a7b2a21743cec8f1ad4a7cbea7ea1ed37d1bab65c1bf52f9b1559ea51ed0e07f0184f39018109c38b561e132a99d1248964ca540bf022b6977bfaca7f9fc8e1b6826807127484d9835b5a1b710478b2a67c3f68d4d065d59140309232f0b5884f1d1dc6a575f990d0685a0cd095f6b5b79d0cffdb57b0bac719e4a9f39ccdc79fa6aeafa3a71ed3f46987cc1fda18e3bc34e56a441eb3e7f47476c52a400597b01eaf894da3428b4027a6ce2657b267932e83053be08f450510a0df068e3907290e7d104a8f79838bdc762cfe081260ff54b6b2fb4670b89be06c40b3c4ba8387586f5b84d2547d75125356f478523b8604452d0898c94f6d0bc75d9a34f063c979d519e0379eec57aa7a48d2120ae28682229213017a2215e0755c3b71e56ebaf2c928d6cf53dbc0190864d0b6ea928e933474e58a193c880bd90bb39d3291142687e8f9a10c60887898a931e34dac504220200401a7b26973590621222a74aa843becaec07a70456dad98ab32c225872a699f7aa849a035b8d513c97198d5a790b85a14375bc00f0635db6eaf0741fb9ab5bfb72dde3c1992b0157a1a34933caf5fa679435f34a756e0366a4f7d604958e6ede55883ca9f11e3b7056612489528887a45d7f67588bae91ec6f4b28ac26ccdae64cc82948fe99b2002df2d93236faacccc629f41a6981fffbb640e60399c5fe7288112bba82046197ef850d9f225987a6022fef9ad89b4798dc92b7cb5a1e1d2c698f86c4f99317ba87530b874ac3bd7899dffd2393a1d93ddb5143678831d94aaa2bf4267bfffefb44ec03fadcae8e8d89617ed926ad635559a7cdf61e2638dc3d8c424403c8121ad89aec8277a64955cf090c187113f4484c30f6246643a9707a4ef15869e58fe86ba3ab33ed7646b21846bd4f754ccffac9a96223971e4c44a36eef33c09d1b57a3790bec363a2c7333b07629874ad2119f2ccda107b183477df18f175d7e9132720d7cd7e671f8b62dee95433fa1db34dfb1bcae6a22863d1f592be8f6c64dcbb93bc5131711c7156829f77fe17b5bbfb1ac2eac809daeeeb804994b61c5e4a40c1fcbe7ee925ac8a6b0c52e24eee6d713060e407752ad35aef68040a4e68ba07c6d0548b32b12b62401c8349c6c53084bad6300d2b5e371efa569bb3a67ad15797389b8fe8dfa267fe203555bb15f36807894643f3f7f081a1e584f959c7716a46fe455837fc44c561c41ccebb845434b86b354b4a0c7796d713a5"}, 0x418}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, &(0x7f0000000140)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2.102043494s ago: executing program 8 (id=2549): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xe0}, 0x1c) recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10122, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.052869253s ago: executing program 6 (id=2550): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) close(r0) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TUNSETOWNER(r0, 0xff07, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000480)=[{}, {}], 0x2, 0x0, 0x0, 0x0) 2.052288997s ago: executing program 5 (id=2551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2040400) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x0, 0x1, 0x0, 0xfffe}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0xcc896000) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f0000000600)={{0x3, 0x0, 0x0, 0x0, 0xee00, 0x100, 0xa}, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x401ebd4) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) setxattr$trusted_overlay_opaque(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200), 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x15e2, &(0x7f00000003c0)={0x0, 0x9bc7, 0x400, 0x3, 0x94}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, 0x0, 0x0) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000002200)=0xc0100100) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$uac1(0x2, 0xc2, &(0x7f0000000200)=ANY=[@ANYBLOB="12010003090000406b1d01014000010203010902b00003010e10040904000000010100000a24010100050201020c24070510b5c6a1cfd29608090401000001020000090401010101020000072401090600000c240201fe02090404d875b1082402011004060c0905010910005209060725010008ff01090402000001020000090402010101020000072401010801000d24020104020501ceb739b26b0724012b8a05000724010900071008240201000208a209058209fc"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 496.207187ms ago: executing program 6 (id=2552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x10, 0x140d, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8000080}, 0x24044890) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0, 0x9000000}, 0x38) 5.311484ms ago: executing program 6 (id=2553): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2006, 0x118, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xff, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000640)={0x14, &(0x7f00000005c0)={0xe597d7cb4bec60bd, 0x21, 0x1b, {0x1b, 0x4, "1060418c14fbb140d381c065addb1fa25caf2742941563eea2"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x40, 0x14, 0xfb, "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"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x5, 0x61d3, 0x9, 0x1000, 0x7, 0xe, 0x0, 0x1000000, 0x4, 0x6, 0xfff, 0xfff7}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0xffffffff}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000900)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000940)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x6, "df760a36"}]}}, 0x0}, 0x0) 0s ago: executing program 8 (id=2554): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x100000000, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000080)={0xeeee0000, 0x101000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f00000000c0)=ANY=[@ANYBLOB="6abddca45723e65886369fbc6ef20f00000000000000d06e920dbf7a2929bf"]) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@mmap={0x7, 0x9, 0x4, 0x0, 0x3fffc, {0x77359400}, {0x5, 0x0, 0x81, 0x6, 0x7f, 0x8, "14f31d90"}, 0x101, 0x1, {}, 0xade}) ioprio_set$pid(0x0, 0x0, 0x2007) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x5, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) kernel console output (not intermixed with test programs): .830541][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.855408][ T9] usb 10-1: Product: syz [ 618.859809][ T9] usb 10-1: Manufacturer: syz [ 618.868138][ T9] usb 10-1: SerialNumber: syz [ 619.056456][ T9] usb 10-1: config 0 descriptor?? [ 619.644914][ T9] usb 10-1: can't set config #0, error -71 [ 619.670173][ T9] usb 10-1: USB disconnect, device number 18 [ 619.852152][ T5837] Bluetooth: hci1: command tx timeout [ 619.989475][T15135] chnl_net:caif_netlink_parms(): no params data found [ 620.623896][ T12] bridge_slave_1: left allmulticast mode [ 620.647775][ T12] bridge_slave_1: left promiscuous mode [ 620.658714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.672168][ T12] bridge_slave_0: left allmulticast mode [ 620.682799][ T12] bridge_slave_0: left promiscuous mode [ 620.748144][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.872054][ T5873] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 621.051903][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 621.079770][ T5873] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 621.093846][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.104365][ T5873] usb 3-1: Product: syz [ 621.118586][ T5873] usb 3-1: Manufacturer: syz [ 621.134581][ T5873] usb 3-1: SerialNumber: syz [ 621.142837][ T5873] usb 3-1: config 0 descriptor?? [ 621.172160][ T5873] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 621.266580][T15201] SELinux: Context system_u:object_r:systemd_passwd_var_run_t:s0 is not valid (left unmapped). [ 621.298115][ T29] audit: type=1400 audit(2000000373.580:1251): avc: denied { relabelto } for pid=15188 comm="syz.9.1974" name="51" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 621.473261][ T29] audit: type=1400 audit(2000000373.600:1252): avc: denied { associate } for pid=15188 comm="syz.9.1974" name="51" dev="tmpfs" ino=302 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 622.007160][ T5837] Bluetooth: hci1: command tx timeout [ 622.020920][ T5873] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 622.037792][ T5873] visor 3-1:0.0: probe with driver visor failed with error -5 [ 622.363602][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.384938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.411671][ T12] bond0 (unregistering): Released all slaves [ 622.457963][T15194] tipc: Started in network mode [ 622.463179][T15194] tipc: Node identity 226a7f10c6c2, cluster identity 4711 [ 622.475550][T15187] netdevsim netdevsim1: Direct firmware load for . [ 622.475550][T15187] failed with error -2 [ 622.480756][T15194] tipc: Enabled bearer , priority 0 [ 622.495750][T15187] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 622.495750][T15187] [ 622.639865][T15202] +: renamed from syzkaller0 [ 622.664377][T15202] tipc: Disabling bearer [ 622.665070][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1976'. [ 622.680317][T15229] 9pnet_fd: Insufficient options for proto=fd [ 622.803680][ T29] audit: type=1400 audit(2000000375.110:1253): avc: denied { write } for pid=13109 comm="syz-executor" name="51" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 622.837035][ T29] audit: type=1400 audit(2000000375.110:1254): avc: denied { remove_name } for pid=13109 comm="syz-executor" name="binderfs" dev="tmpfs" ino=306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 622.936871][ T29] audit: type=1400 audit(2000000375.170:1255): avc: denied { rmdir } for pid=13109 comm="syz-executor" name="51" dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_var_run_t:s0" [ 623.004023][ T12] hsr_slave_0: left promiscuous mode [ 623.060123][ T12] hsr_slave_1: left promiscuous mode [ 623.072325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.089842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.102584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.129409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.179076][ T12] veth1_macvtap: left promiscuous mode [ 623.192305][ T12] veth0_macvtap: left promiscuous mode [ 623.205502][ T12] veth1_vlan: left promiscuous mode [ 623.217502][ T12] veth0_vlan: left promiscuous mode [ 623.271422][T12758] usb 3-1: USB disconnect, device number 46 [ 623.439907][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1983'. [ 623.750845][T15263] syz.9.1985: attempt to access beyond end of device [ 623.750845][T15263] loop9: rw=0, sector=2, nr_sectors = 2 limit=0 [ 623.785500][ T3713] tipc: Subscription rejected, illegal request [ 623.847541][T15263] syz.9.1985: attempt to access beyond end of device [ 623.847541][T15263] loop9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 623.860713][T15263] syz.9.1985: attempt to access beyond end of device [ 623.860713][T15263] loop9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 623.931283][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 623.941670][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 623.948975][T15263] syz.9.1985: attempt to access beyond end of device [ 623.948975][T15263] loop9: rw=0, sector=18, nr_sectors = 2 limit=0 [ 624.025810][T15270] ceph: No mds server is up or the cluster is laggy [ 624.035405][T15263] syz.9.1985: attempt to access beyond end of device [ 624.035405][T15263] loop9: rw=0, sector=30, nr_sectors = 2 limit=0 [ 624.096581][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.108805][ T5837] Bluetooth: hci1: command tx timeout [ 624.114001][T15263] syz.9.1985: attempt to access beyond end of device [ 624.114001][T15263] loop9: rw=0, sector=36, nr_sectors = 2 limit=0 [ 624.151498][T15263] VFS: unable to find oldfs superblock on device loop9 [ 624.561942][ T29] audit: type=1400 audit(2000000376.870:1256): avc: denied { create } for pid=15288 comm="syz.6.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 625.245981][T15308] FAULT_INJECTION: forcing a failure. [ 625.245981][T15308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 625.259636][T15308] CPU: 0 UID: 0 PID: 15308 Comm: syz.9.1991 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 625.259658][T15308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 625.259669][T15308] Call Trace: [ 625.259674][T15308] [ 625.259681][T15308] dump_stack_lvl+0x16c/0x1f0 [ 625.259706][T15308] should_fail_ex+0x50a/0x650 [ 625.259728][T15308] ? __pfx___might_resched+0x10/0x10 [ 625.259758][T15308] should_fail_alloc_page+0xe7/0x130 [ 625.259780][T15308] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 625.259810][T15308] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 625.259830][T15308] ? hlock_class+0x4e/0x130 [ 625.259848][T15308] ? mark_lock+0xb5/0xc60 [ 625.259868][T15308] ? __pfx_mark_lock+0x10/0x10 [ 625.259889][T15308] ? psi_task_switch+0x203/0x8e0 [ 625.259911][T15308] ? __pfx_mark_lock+0x10/0x10 [ 625.259932][T15308] ? find_held_lock+0x2d/0x110 [ 625.259952][T15308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 625.259976][T15308] ? finish_task_switch.isra.0+0x212/0xcc0 [ 625.260001][T15308] ? __pfx_lock_release+0x10/0x10 [ 625.260022][T15308] ? rcu_is_watching+0x12/0xc0 [ 625.260048][T15308] ? hlock_class+0x4e/0x130 [ 625.260065][T15308] ? __lock_acquire+0x15a9/0x3c40 [ 625.260089][T15308] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 625.260117][T15308] ? policy_nodemask+0xea/0x4e0 [ 625.260139][T15308] alloc_pages_mpol+0x1fc/0x540 [ 625.260159][T15308] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 625.260185][T15308] alloc_pages_noprof+0x131/0x390 [ 625.260206][T15308] pte_alloc_one+0x20/0x390 [ 625.260232][T15308] __pte_alloc+0x6e/0x3d0 [ 625.260254][T15308] ? __pfx___pte_alloc+0x10/0x10 [ 625.260278][T15308] ? mark_held_locks+0x9f/0xe0 [ 625.260304][T15308] do_pte_missing+0x2828/0x3e10 [ 625.260331][T15308] __handle_mm_fault+0x1166/0x2c60 [ 625.260356][T15308] ? __pfx___handle_mm_fault+0x10/0x10 [ 625.260372][T15308] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 625.260410][T15308] ? find_vma+0xc0/0x140 [ 625.260433][T15308] ? __pfx_find_vma+0x10/0x10 [ 625.260461][T15308] handle_mm_fault+0x3fa/0xaa0 [ 625.260481][T15308] do_user_addr_fault+0x7a3/0x13f0 [ 625.260507][T15308] exc_page_fault+0x5c/0xc0 [ 625.260526][T15308] asm_exc_page_fault+0x26/0x30 [ 625.260548][T15308] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 625.260573][T15308] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 625.260589][T15308] RSP: 0018:ffffc900045cfb18 EFLAGS: 00050206 [ 625.260604][T15308] RAX: 0000000000000001 RBX: 0000400000339000 RCX: 0000000000001000 [ 625.260614][T15308] RDX: 0000000000000000 RSI: 0000400000339000 RDI: ffff888042600000 [ 625.260625][T15308] RBP: 0000000000001000 R08: 0000000000000001 R09: ffffed10084c01ff [ 625.260636][T15308] R10: ffff888042600fff R11: 0000000000000000 R12: 0000000000000000 [ 625.260646][T15308] R13: ffff888042600000 R14: 0000000000000001 R15: 0000000000200000 [ 625.260669][T15308] _copy_from_user+0x98/0xd0 [ 625.260686][T15308] copy_folio_from_user+0xff/0x2a0 [ 625.260708][T15308] mfill_atomic_copy+0x1ba3/0x1e60 [ 625.260740][T15308] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 625.260759][T15308] ? __might_fault+0xe3/0x190 [ 625.260779][T15308] ? __might_fault+0xe3/0x190 [ 625.260806][T15308] userfaultfd_ioctl+0x2099/0x38c0 [ 625.260833][T15308] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 625.260853][T15308] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 625.260879][T15308] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 625.260911][T15308] ? __pfx_lock_release+0x10/0x10 [ 625.260945][T15308] ? selinux_file_ioctl+0x180/0x270 [ 625.260974][T15308] ? selinux_file_ioctl+0xb4/0x270 [ 625.260999][T15308] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 625.261022][T15308] ? __x64_sys_ioctl+0x190/0x200 [ 625.261044][T15308] __x64_sys_ioctl+0x190/0x200 [ 625.261069][T15308] do_syscall_64+0xcd/0x250 [ 625.261090][T15308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.261112][T15308] RIP: 0033:0x7fa8e858cde9 [ 625.261126][T15308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.261142][T15308] RSP: 002b:00007fa8e93ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.261157][T15308] RAX: ffffffffffffffda RBX: 00007fa8e87a6080 RCX: 00007fa8e858cde9 [ 625.261168][T15308] RDX: 0000400000000100 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 625.261178][T15308] RBP: 00007fa8e93ab090 R08: 0000000000000000 R09: 0000000000000000 [ 625.261188][T15308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.261198][T15308] R13: 0000000000000001 R14: 00007fa8e87a6080 R15: 00007ffca9e378f8 [ 625.261221][T15308] [ 625.712711][ C0] vkms_vblank_simulate: vblank timer overrun [ 626.179387][ T5827] Bluetooth: hci1: command tx timeout [ 626.184088][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 627.451605][T15332] Bluetooth: hci5: Frame reassembly failed (-84) [ 627.870641][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 628.061185][ T12] team0 (unregistering): Port device team_slave_1 removed [ 628.218903][ T12] team0 (unregistering): Port device team_slave_0 removed [ 628.718064][T15353] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1999'. [ 629.300606][T12196] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 629.465708][T15135] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.478022][T15135] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.486089][T15135] bridge_slave_0: entered allmulticast mode [ 629.494106][T12196] usb 10-1: Using ep0 maxpacket: 16 [ 629.498438][T15135] bridge_slave_0: entered promiscuous mode [ 629.506999][T12196] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.511255][T15135] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.525268][T12196] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.539628][T12196] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 629.545808][T15135] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.549812][T12196] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.562995][T15135] bridge_slave_1: entered allmulticast mode [ 629.571012][T15135] bridge_slave_1: entered promiscuous mode [ 629.574043][T12196] usb 10-1: config 0 descriptor?? [ 629.673318][T15135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.707030][T15135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.764165][T15387] netlink: 'syz.6.2002': attribute type 7 has an invalid length. [ 629.779584][T15387] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.788963][T15387] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.797323][T15387] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.805628][T15387] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.940551][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 629.948866][T15321] Bluetooth: hci5: command 0x1003 tx timeout [ 630.254460][T15135] team0: Port device team_slave_0 added [ 630.282845][T15135] team0: Port device team_slave_1 added [ 630.338039][ T29] audit: type=1400 audit(2000000382.640:1257): avc: denied { remount } for pid=15405 comm="syz.1.2003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 630.409505][T15135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.416864][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.528142][T15411] netlink: 'syz.6.2005': attribute type 1 has an invalid length. [ 630.551019][T15135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.586193][T15411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 630.606642][T15135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.624345][T15135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.681711][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2005'. [ 630.692220][T15135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.714131][T15416] bond1: (slave gretap2): making interface the new active one [ 630.729335][T12196] usbhid 10-1:0.0: can't add hid device: -71 [ 630.754093][T12196] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 630.783443][T15416] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 630.795260][T12196] usb 10-1: USB disconnect, device number 19 [ 630.958561][ T12] IPVS: stop unused estimator thread 0... [ 631.008745][T15135] hsr_slave_0: entered promiscuous mode [ 631.029973][T15135] hsr_slave_1: entered promiscuous mode [ 631.055577][T15135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.090587][T15135] Cannot create hsr debugfs directory [ 631.233924][T15436] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2010'. [ 631.778160][T15135] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 631.780724][T12196] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 631.955791][T15135] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 631.963569][T12196] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.989560][T12196] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 632.048926][T12196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.249539][T12196] usb 3-1: config 0 descriptor?? [ 632.374408][T12196] pwc: Askey VC010 type 2 USB webcam detected. [ 632.520600][T15135] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 632.542566][T15135] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 632.698374][T15135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.734409][T12196] pwc: recv_control_msg error -32 req 02 val 2b00 [ 632.770558][T12196] pwc: recv_control_msg error -32 req 02 val 2700 [ 632.773455][T15135] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.784035][T12196] pwc: recv_control_msg error -32 req 02 val 2c00 [ 632.818073][T12196] pwc: recv_control_msg error -32 req 04 val 1000 [ 632.836813][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.843940][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.853982][T12196] pwc: recv_control_msg error -32 req 04 val 1300 [ 632.882774][T12196] pwc: recv_control_msg error -32 req 04 val 1400 [ 632.901630][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.908713][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.062383][T15321] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.075914][T15321] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.084831][T15321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.094842][T12196] pwc: recv_control_msg error -32 req 02 val 2100 [ 633.114673][T15321] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.126671][T15321] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 633.127406][T12196] pwc: recv_control_msg error -71 req 04 val 1500 [ 633.143233][T15321] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.152531][T12196] pwc: recv_control_msg error -71 req 02 val 2500 [ 633.214039][T12196] pwc: recv_control_msg error -71 req 02 val 2400 [ 633.242130][T12196] pwc: recv_control_msg error -71 req 02 val 2600 [ 633.260832][T12196] pwc: recv_control_msg error -71 req 02 val 2900 [ 633.278982][T12196] pwc: recv_control_msg error -71 req 02 val 2800 [ 633.298309][T12196] pwc: recv_control_msg error -71 req 04 val 1100 [ 633.325337][T12196] pwc: recv_control_msg error -71 req 04 val 1200 [ 633.364571][T12196] pwc: Registered as video103. [ 633.389261][T12196] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 633.408769][T15135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.458718][T12196] usb 3-1: USB disconnect, device number 47 [ 633.812217][T15482] chnl_net:caif_netlink_parms(): no params data found [ 633.910729][T15540] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2020'. [ 634.176645][T15482] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.186920][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.196534][T15482] bridge_slave_0: entered allmulticast mode [ 634.210179][T15482] bridge_slave_0: entered promiscuous mode [ 634.229811][T15482] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.450945][T15482] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.563251][T15482] bridge_slave_1: entered allmulticast mode [ 634.583551][T15482] bridge_slave_1: entered promiscuous mode [ 634.632828][T15135] veth0_vlan: entered promiscuous mode [ 634.648107][T15482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.702905][T15482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.769121][T15569] overlayfs: failed to clone upperpath [ 634.780638][T15482] team0: Port device team_slave_0 added [ 634.788347][T15482] team0: Port device team_slave_1 added [ 634.795035][T15135] veth1_vlan: entered promiscuous mode [ 635.242581][T15321] Bluetooth: hci4: command tx timeout [ 635.574396][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.604361][T15482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.630898][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.661554][T15482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.688660][T15482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.700439][T15482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 635.806188][T15482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.807054][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 635.837991][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 635.851770][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 635.861661][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.874501][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 635.893700][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 635.905519][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.920795][T11128] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 635.923044][T15135] veth0_macvtap: entered promiscuous mode [ 635.956286][T15482] hsr_slave_0: entered promiscuous mode [ 635.963356][T15482] hsr_slave_1: entered promiscuous mode [ 635.971592][T15482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.979399][T15482] Cannot create hsr debugfs directory [ 635.986238][T15135] veth1_macvtap: entered promiscuous mode [ 636.023861][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.046690][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.057283][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.067255][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.077876][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.085243][T11128] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.088624][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.098965][T11128] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 636.108513][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.121805][T11128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.128241][T15135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.145409][T11128] usb 3-1: config 0 descriptor?? [ 636.156110][T11128] pwc: Askey VC010 type 2 USB webcam detected. [ 636.185781][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.202616][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.213220][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.223689][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.234264][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.244137][T15135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.254650][T15135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.265829][T15135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.288934][T15135] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.298181][T15135] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.307124][T15135] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.315907][T15135] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.562218][T11128] pwc: recv_control_msg error -32 req 02 val 2b00 [ 636.581340][T11128] pwc: recv_control_msg error -32 req 02 val 2700 [ 636.599644][T11128] pwc: recv_control_msg error -32 req 02 val 2c00 [ 636.619784][T11128] pwc: recv_control_msg error -32 req 04 val 1000 [ 636.627010][ T35] bridge_slave_1: left allmulticast mode [ 636.636306][T11128] pwc: recv_control_msg error -32 req 04 val 1300 [ 636.636394][ T35] bridge_slave_1: left promiscuous mode [ 636.650237][T11128] pwc: recv_control_msg error -32 req 04 val 1400 [ 636.658736][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.678371][ T35] bridge_slave_0: left allmulticast mode [ 636.689504][ T35] bridge_slave_0: left promiscuous mode [ 636.696473][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.878878][T11128] pwc: recv_control_msg error -71 req 02 val 2100 [ 636.897946][T11128] pwc: recv_control_msg error -71 req 04 val 1500 [ 636.905993][T11128] pwc: recv_control_msg error -71 req 02 val 2500 [ 636.923420][T11128] pwc: recv_control_msg error -71 req 02 val 2400 [ 636.943314][T11128] pwc: recv_control_msg error -71 req 02 val 2600 [ 636.950946][T11128] pwc: recv_control_msg error -71 req 02 val 2900 [ 636.966156][T11128] pwc: recv_control_msg error -71 req 02 val 2800 [ 636.981439][T11128] pwc: recv_control_msg error -71 req 04 val 1100 [ 636.997669][T11128] pwc: recv_control_msg error -71 req 04 val 1200 [ 637.016218][T11128] pwc: Registered as video103. [ 637.032193][T11128] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 637.055119][T11128] usb 3-1: USB disconnect, device number 48 [ 637.225936][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.235546][ T35] bond0 (unregistering): Released all slaves [ 637.294614][ T5837] Bluetooth: hci4: command tx timeout [ 637.357022][ T1798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.376599][ T1798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.406391][T15577] chnl_net:caif_netlink_parms(): no params data found [ 637.497188][T15609] FAULT_INJECTION: forcing a failure. [ 637.497188][T15609] name failslab, interval 1, probability 0, space 0, times 0 [ 637.510185][T15609] CPU: 0 UID: 0 PID: 15609 Comm: syz.2.2034 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 637.510206][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 637.510215][T15609] Call Trace: [ 637.510220][T15609] [ 637.510227][T15609] dump_stack_lvl+0x16c/0x1f0 [ 637.510253][T15609] should_fail_ex+0x50a/0x650 [ 637.510277][T15609] ? fs_reclaim_acquire+0xae/0x150 [ 637.510302][T15609] ? call_usermodehelper_setup+0x9a/0x340 [ 637.510326][T15609] should_failslab+0xc2/0x120 [ 637.510345][T15609] __kmalloc_cache_noprof+0x68/0x410 [ 637.510370][T15609] ? trace_kmalloc+0x2d/0xd0 [ 637.510391][T15609] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 637.510411][T15609] ? __pfx_free_modprobe_argv+0x10/0x10 [ 637.510436][T15609] call_usermodehelper_setup+0x9a/0x340 [ 637.510465][T15609] __request_module+0x3d6/0x6c0 [ 637.510487][T15609] ? snd_timer_open+0xd75/0x1020 [ 637.510503][T15609] ? __pfx___request_module+0x10/0x10 [ 637.510527][T15609] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 637.510559][T15609] ? snd_timer_open+0xd54/0x1020 [ 637.510578][T15609] ? __pfx_snd_timer_user_interrupt+0x10/0x10 [ 637.510603][T15609] snd_timer_open+0xd75/0x1020 [ 637.510619][T15609] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 637.510638][T15609] ? snd_timer_instance_new+0x65/0x2e0 [ 637.510661][T15609] ? __pfx_snd_timer_open+0x10/0x10 [ 637.510680][T15609] ? kstrdup+0xb5/0x100 [ 637.510705][T15609] ? __pfx_snd_timer_user_interrupt+0x10/0x10 [ 637.510726][T15609] __snd_timer_user_ioctl.isra.0+0x14a1/0x2640 [ 637.510747][T15609] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 637.510763][T15609] ? __mutex_trylock_common+0xea/0x250 [ 637.510783][T15609] ? __pfx___mutex_trylock_common+0x10/0x10 [ 637.510800][T15609] ? trace_contention_end+0xee/0x140 [ 637.510815][T15609] ? __mutex_lock+0x1cc/0xb10 [ 637.510828][T15609] ? snd_timer_user_ioctl+0x4a/0xb0 [ 637.510839][T15609] ? __pfx___mutex_lock+0x10/0x10 [ 637.510850][T15609] ? __pfx_lock_release+0x10/0x10 [ 637.510872][T15609] snd_timer_user_ioctl+0x72/0xb0 [ 637.510882][T15609] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 637.510894][T15609] __x64_sys_ioctl+0x190/0x200 [ 637.510914][T15609] do_syscall_64+0xcd/0x250 [ 637.510927][T15609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.510941][T15609] RIP: 0033:0x7f556bd8cde9 [ 637.510950][T15609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.510960][T15609] RSP: 002b:00007f556ccc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.510970][T15609] RAX: ffffffffffffffda RBX: 00007f556bfa5fa0 RCX: 00007f556bd8cde9 [ 637.510976][T15609] RDX: 0000400000000400 RSI: 0000000040345410 RDI: 0000000000000005 [ 637.510982][T15609] RBP: 00007f556ccc9090 R08: 0000000000000000 R09: 0000000000000000 [ 637.510988][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.510993][T15609] R13: 0000000000000000 R14: 00007f556bfa5fa0 R15: 00007fff1c751998 [ 637.511005][T15609] [ 637.960349][ T5837] Bluetooth: hci2: command tx timeout [ 637.985764][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2036'. [ 638.087487][ T29] audit: type=1400 audit(2000000390.390:1258): avc: denied { write } for pid=15611 comm="syz.2.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 638.498222][T15530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.553220][T15530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.565221][ T35] hsr_slave_0: left promiscuous mode [ 638.587660][ T35] hsr_slave_1: left promiscuous mode [ 638.596052][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.604139][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.614282][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 638.622035][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.648771][ T35] veth1_macvtap: left promiscuous mode [ 638.654988][ T35] veth0_macvtap: left promiscuous mode [ 638.662544][ T35] veth1_vlan: left promiscuous mode [ 638.671150][ T35] veth0_vlan: left promiscuous mode [ 639.390488][ T5837] Bluetooth: hci4: command tx timeout [ 640.020526][ T5837] Bluetooth: hci2: command tx timeout [ 640.459237][ T35] team0 (unregistering): Port device team_slave_1 removed [ 640.563818][ T35] team0 (unregistering): Port device team_slave_0 removed [ 641.004315][T15650] dccp_close: ABORT with 180 bytes unread [ 641.455637][ T5837] Bluetooth: hci4: command tx timeout [ 641.669737][T15577] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.682871][T15577] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.690061][T15577] bridge_slave_0: entered allmulticast mode [ 641.703747][T15577] bridge_slave_0: entered promiscuous mode [ 641.759050][T15577] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.766520][T15577] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.773929][T15577] bridge_slave_1: entered allmulticast mode [ 641.780802][T15577] bridge_slave_1: entered promiscuous mode [ 642.551770][ T5837] Bluetooth: hci2: command tx timeout [ 642.707869][T15577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.733787][T15577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.225551][T15577] team0: Port device team_slave_0 added [ 643.256770][T15577] team0: Port device team_slave_1 added [ 643.287856][T15686] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 643.303079][T15482] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.339863][T15482] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 643.410217][T15482] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 643.456729][T15482] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.673997][T15577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.681157][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.034534][T15577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.461063][T15577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.468040][T15577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.495234][T15577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.627700][ T5837] Bluetooth: hci2: command tx timeout [ 644.972298][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2053'. [ 645.161790][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2053'. [ 645.467838][T15577] hsr_slave_0: entered promiscuous mode [ 645.481189][T15577] hsr_slave_1: entered promiscuous mode [ 645.901908][T15482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.949734][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2060'. [ 645.990983][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2060'. [ 646.032365][T15482] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.075805][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2060'. [ 646.217607][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.224766][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.303090][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.310238][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.685226][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2064'. [ 646.774474][T15756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 646.814443][T15482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.838144][T15577] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 646.870241][T15577] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 646.897217][T15577] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 646.992748][ T29] audit: type=1400 audit(2000000399.290:1259): avc: denied { getopt } for pid=15757 comm="syz.8.2065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 647.312080][T15765] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 647.416921][T15577] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 647.950687][T15756] bond1: (slave macvlan2): Error -95 calling set_mac_address [ 648.702699][T15577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.718460][T15792] dlm: no local IP address has been set [ 648.741901][T15577] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.750283][T15792] dlm: cannot start dlm midcomms -107 [ 648.779445][ T1798] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.786643][ T1798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.873938][ T1798] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.881087][ T1798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.478333][T15577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.558744][T15482] veth0_vlan: entered promiscuous mode [ 649.599398][T15482] veth1_vlan: entered promiscuous mode [ 649.609780][T15808] 9pnet_fd: Insufficient options for proto=fd [ 650.492164][T15482] veth0_macvtap: entered promiscuous mode [ 650.526998][T15482] veth1_macvtap: entered promiscuous mode [ 650.533559][T15826] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2077'. [ 650.544740][T15577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.895510][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.944341][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.965518][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.978261][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.990909][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.003933][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.014993][T15482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.038950][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.060562][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.080672][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.100689][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.118514][T15482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.139201][T15482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.161591][T15482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.186650][T15482] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.200980][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 651.218004][T15482] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.246643][T15482] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.256042][T15482] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.364372][T15577] veth0_vlan: entered promiscuous mode [ 651.380280][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.388381][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.397607][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.412080][T15577] veth1_vlan: entered promiscuous mode [ 651.423376][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.448880][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.478144][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.491162][ T9] usb 9-1: config 0 descriptor?? [ 651.502153][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.515500][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 651.525227][T15577] veth0_macvtap: entered promiscuous mode [ 651.553915][T15577] veth1_macvtap: entered promiscuous mode [ 651.755887][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.877878][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.967435][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.967907][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 652.011316][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 652.018288][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 652.032966][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.033429][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 652.057212][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 652.065289][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.080568][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 652.092396][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.120544][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.131640][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.151630][T15577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.189858][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.210059][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.220305][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.231998][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.250495][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.272762][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.292867][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 652.316818][T15577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.334257][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 652.350965][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 652.360432][T15577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.380050][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 652.388000][T15577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.398935][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 652.409301][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 652.420133][T15877] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2086'. [ 652.430282][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 652.445563][T15878] netdevsim netdevsim5: Direct firmware load for . [ 652.445563][T15878] failed with error -2 [ 652.458080][T15878] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 652.458080][T15878] [ 652.468602][T15577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.485521][T15577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.495610][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 652.503637][T15577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.512539][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 652.530884][ T9] pwc: Registered as video103. [ 652.551221][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input37 [ 652.577255][T15577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.602020][ T9] usb 9-1: USB disconnect, device number 11 [ 652.606618][T15867] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2086'. [ 652.680175][T15885] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2087'. [ 652.927487][T15530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.977169][T15530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.215050][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.247122][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.032539][T15923] input: syz1 as /devices/virtual/input/input38 [ 654.691166][T12758] libceph: connect (1)[c::]:6789 error -101 [ 654.761165][T15929] ceph: No mds server is up or the cluster is laggy [ 654.788488][T12758] libceph: mon0 (1)[c::]:6789 connect error [ 655.225095][T15946] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2098'. [ 655.272696][T11130] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 655.530684][T11130] usb 9-1: Using ep0 maxpacket: 8 [ 655.538815][T11130] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 655.568537][T11130] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.599619][T11130] usb 9-1: Product: syz [ 655.690962][T11130] usb 9-1: Manufacturer: syz [ 655.705660][T11130] usb 9-1: SerialNumber: syz [ 655.713112][T11130] usb 9-1: config 0 descriptor?? [ 656.137816][T15967] Process accounting resumed [ 656.301043][T11130] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 656.418287][T11130] gspca_sunplus: reg_w_riv err -71 [ 656.463847][T11130] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 656.570338][T11130] usb 9-1: USB disconnect, device number 12 [ 656.712284][ T29] audit: type=1400 audit(2000000408.990:1260): avc: denied { node_bind } for pid=15985 comm="syz.2.2108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 656.797740][ T29] audit: type=1400 audit(2000000409.100:1261): avc: denied { connect } for pid=15981 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 656.910575][ T29] audit: type=1400 audit(2000000409.100:1262): avc: denied { read } for pid=15981 comm="syz.5.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 658.101449][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2113'. [ 658.559552][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2116'. [ 658.630296][T16026] loop7: detected capacity change from 0 to 127 [ 658.757504][T16034] Bluetooth: MGMT ver 1.23 [ 660.156662][ T29] audit: type=1400 audit(2000000412.460:1263): avc: denied { accept } for pid=16066 comm="syz.5.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 661.823225][T16104] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 661.842253][ T5160] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 662.266224][ T5160] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.296934][ T5160] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e4.df [ 662.338719][ T5160] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.378393][ T5160] usb 5-1: config 0 descriptor?? [ 662.417119][ T5160] pwc: Philips PCA646VC USB webcam detected. [ 662.828324][ T5160] pwc: recv_control_msg error -32 req 02 val 2b00 [ 662.929583][ T5160] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.019124][ T5160] pwc: recv_control_msg error -32 req 02 val 2c00 [ 663.038341][ T5160] pwc: recv_control_msg error -71 req 04 val 1000 [ 663.051306][ T5160] pwc: recv_control_msg error -71 req 04 val 1300 [ 663.102538][ T5160] pwc: recv_control_msg error -71 req 04 val 1400 [ 663.112908][ T5160] pwc: recv_control_msg error -71 req 02 val 2000 [ 663.127542][ T5160] pwc: recv_control_msg error -71 req 02 val 2100 [ 663.151355][ T5160] pwc: recv_control_msg error -71 req 04 val 1500 [ 663.174658][ T5160] pwc: recv_control_msg error -71 req 02 val 2500 [ 663.174741][T16126] 9pnet_fd: Insufficient options for proto=fd [ 663.185402][ T5160] pwc: recv_control_msg error -71 req 02 val 2400 [ 663.219781][ T5160] pwc: recv_control_msg error -71 req 02 val 2600 [ 663.235821][ T5160] pwc: recv_control_msg error -71 req 02 val 2900 [ 663.273253][ T5160] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.296314][ T5160] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.320162][ T5160] pwc: recv_control_msg error -71 req 04 val 1200 [ 663.344665][T16126] vlan3: entered promiscuous mode [ 663.367198][ T5160] pwc: Registered as video103. [ 663.392488][T16126] vlan3: entered allmulticast mode [ 663.392561][ T5160] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 663.451168][ T5160] usb 5-1: USB disconnect, device number 25 [ 663.651132][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2144'. [ 663.909764][T15321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 663.921388][T15321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 663.933160][T15321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 663.945073][T15321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 663.953009][T15321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 663.962656][T15321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.397912][T16154] chnl_net:caif_netlink_parms(): no params data found [ 664.603544][T16154] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.651419][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.736713][T16154] bridge_slave_0: entered allmulticast mode [ 665.153603][T16154] bridge_slave_0: entered promiscuous mode [ 665.218058][T16154] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.240637][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.248093][T16154] bridge_slave_1: entered allmulticast mode [ 665.255198][T16154] bridge_slave_1: entered promiscuous mode [ 665.391029][T16154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.412598][T16154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.569228][T16154] team0: Port device team_slave_0 added [ 665.580553][T16154] team0: Port device team_slave_1 added [ 665.580671][ T5873] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 666.210737][T15321] Bluetooth: hci0: command tx timeout [ 666.237032][T16154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.244169][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.270558][T16154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.294597][T16154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.307677][T16154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.403832][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 666.425903][T16154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.480949][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 666.552970][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.566939][ T5873] usb 5-1: Product: syz [ 666.578901][T16154] hsr_slave_0: entered promiscuous mode [ 666.584723][ T5873] usb 5-1: Manufacturer: syz [ 666.589296][ T5873] usb 5-1: SerialNumber: syz [ 666.591134][T16154] hsr_slave_1: entered promiscuous mode [ 666.596513][ T5873] usb 5-1: config 0 descriptor?? [ 666.610347][T16154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.622246][T16154] Cannot create hsr debugfs directory [ 667.107406][ T5873] pwc: Logitech/Cisco VT Camera webcam detected. [ 667.315800][ T5873] pwc: Failed to set LED on/off time (-71) [ 667.396760][ T5873] pwc: send_video_command error -71 [ 667.424219][ T5873] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 667.480371][ T5873] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 667.590798][ T5873] usb 5-1: USB disconnect, device number 26 [ 667.719256][ T29] audit: type=1400 audit(2000000420.020:1264): avc: denied { write } for pid=16250 comm="syz.8.2160" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 667.985436][T16270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2164'. [ 667.990573][ T5160] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 668.018622][T16270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 668.160519][ T5160] usb 9-1: Using ep0 maxpacket: 16 [ 668.179463][ T5160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.196091][ T5160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.207765][ T5160] usb 9-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 668.219374][ T5160] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.235415][ T5160] usb 9-1: config 0 descriptor?? [ 668.256310][T15321] Bluetooth: hci0: command tx timeout [ 668.549917][T16154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 668.608651][T16154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 668.634064][T16154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 668.652443][ T5160] dragonrise 0003:0079:0011.000C: item fetching failed at offset 3/5 [ 668.671920][T16154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 668.680978][ T5160] dragonrise 0003:0079:0011.000C: parse failed [ 668.687195][ T5160] dragonrise 0003:0079:0011.000C: probe with driver dragonrise failed with error -22 [ 668.739207][ T29] audit: type=1400 audit(2000000421.040:1265): avc: denied { read } for pid=16296 comm="syz.6.2170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 668.856545][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 669.523516][T16154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.539925][T16154] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.547578][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 669.554476][ T9] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 64 [ 669.585085][ T9] usb 5-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 1024 [ 669.605052][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.611507][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 669.612172][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.620338][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 669.646987][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.654139][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.665019][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.682288][ T9] usb 5-1: Product: syz [ 669.696404][ T9] usb 5-1: Manufacturer: ꉁ╭뫄罘鲏玐⭸᩻鸄椀䗫냮㔃彝戭왋Ꚁ硜㎑顜⏈ꞣ텔堌䊟趛̫ᒨ묘즂坒嘹놀풲藹뉶虖셣좾뗥叢갨쵅 [ 669.734573][ T9] usb 5-1: SerialNumber: syz [ 669.755821][T16288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 669.784088][T16288] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 669.846643][T16317] 9pnet_fd: Insufficient options for proto=fd [ 669.932699][T16322] 9pnet_fd: Insufficient options for proto=fd [ 670.024377][ T9] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 670.083336][T16154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.113371][ T9] usb 5-1: USB disconnect, device number 27 [ 670.330849][T15321] Bluetooth: hci0: command tx timeout [ 670.402914][T16154] veth0_vlan: entered promiscuous mode [ 670.444188][T16154] veth1_vlan: entered promiscuous mode [ 670.521673][T16154] veth0_macvtap: entered promiscuous mode [ 670.665186][T16337] netdevsim netdevsim5: Direct firmware load for . [ 670.665186][T16337] failed with error -2 [ 670.676095][T16337] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 670.676095][T16337] [ 670.871558][T16154] veth1_macvtap: entered promiscuous mode [ 670.889918][T12196] usb 9-1: USB disconnect, device number 13 [ 670.907120][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.929272][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.959303][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.608142][ T29] audit: type=1326 audit(2000000423.370:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 671.640954][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.770605][ T29] audit: type=1326 audit(2000000423.370:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 671.800686][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.811691][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.829464][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.197309][ T29] audit: type=1326 audit(2000000423.370:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.220725][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.224163][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.244048][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.257285][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.341102][ T29] audit: type=1326 audit(2000000423.370:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.365066][ T29] audit: type=1326 audit(2000000423.370:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.388520][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.411879][ T29] audit: type=1326 audit(2000000423.370:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.419786][T15321] Bluetooth: hci0: command tx timeout [ 672.435381][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.468037][T16154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.927508][ T29] audit: type=1326 audit(2000000423.370:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.951009][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.957577][ T29] audit: type=1326 audit(2000000423.380:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 672.999572][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.028312][ T29] audit: type=1326 audit(2000000423.380:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.051834][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.056413][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.093371][ T29] audit: type=1326 audit(2000000423.380:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.117162][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.154620][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.161444][ T29] audit: type=1326 audit(2000000423.380:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.175778][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.187861][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.215982][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.232667][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.243510][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.263912][ T29] audit: type=1326 audit(2000000423.380:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.270512][T16154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.287301][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.335180][ T29] audit: type=1326 audit(2000000423.380:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.385092][T16154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.400630][ T29] audit: type=1326 audit(2000000423.380:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.424100][ C1] vkms_vblank_simulate: vblank timer overrun [ 673.425012][T16154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.455175][ T29] audit: type=1326 audit(2000000423.380:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.485899][ T29] audit: type=1326 audit(2000000423.380:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16342 comm="syz.8.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf878cde9 code=0x7ffc0000 [ 673.533168][T16154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.567946][T16154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.579443][T16154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.607606][T16154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.624759][T16378] 9pnet_fd: Insufficient options for proto=fd [ 673.812971][ T3595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.821650][ T3595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.776426][ T9270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.867192][ T9270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.866071][T16420] 9pnet_fd: Insufficient options for proto=fd [ 676.625292][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 676.792370][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 676.812521][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 676.852354][ T9] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 676.884454][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.904511][ T9] usb 9-1: Product: syz [ 676.912462][ T9] usb 9-1: Manufacturer: syz [ 676.920127][ T9] usb 9-1: SerialNumber: syz [ 676.934716][ T9] usb 9-1: config 0 descriptor?? [ 676.946185][T16422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 676.960777][T16422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 677.004712][T16451] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.196977][T16422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 677.211762][T16422] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 678.209815][ T9] Error reading MAC address [ 678.441937][ T9] usb 9-1: USB disconnect, device number 14 [ 680.412680][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 680.780558][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 680.837295][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 680.865559][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.887402][ T9] usb 9-1: Product: syz [ 680.897515][ T9] usb 9-1: Manufacturer: syz [ 680.906563][ T9] usb 9-1: SerialNumber: syz [ 680.926190][ T9] usb 9-1: config 0 descriptor?? [ 680.967427][ T9] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 682.348640][ T9] pwc: Failed to set LED on/off time (-71) [ 682.497217][ T9] pwc: send_video_command error -71 [ 682.641665][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 682.795669][ T9] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 682.890425][ T9] usb 9-1: USB disconnect, device number 15 [ 683.747034][T15321] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 685.535816][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.715515][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 687.716518][ T29] audit: type=1400 audit(2000000439.980:1311): avc: denied { map } for pid=16654 comm="syz.0.2240" path="socket:[52884]" dev="sockfs" ino=52884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 688.333275][ T29] audit: type=1400 audit(2000000439.980:1312): avc: denied { accept } for pid=16654 comm="syz.0.2240" path="socket:[52884]" dev="sockfs" ino=52884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 689.055728][T16680] FAULT_INJECTION: forcing a failure. [ 689.055728][T16680] name failslab, interval 1, probability 0, space 0, times 0 [ 689.068382][T16680] CPU: 0 UID: 0 PID: 16680 Comm: syz.0.2244 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 689.068395][T16680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 689.068401][T16680] Call Trace: [ 689.068405][T16680] [ 689.068410][T16680] dump_stack_lvl+0x16c/0x1f0 [ 689.068426][T16680] should_fail_ex+0x50a/0x650 [ 689.068442][T16680] ? fs_reclaim_acquire+0xae/0x150 [ 689.068459][T16680] ? tomoyo_encode2+0x100/0x3e0 [ 689.068473][T16680] should_failslab+0xc2/0x120 [ 689.068485][T16680] __kmalloc_noprof+0xcb/0x510 [ 689.068496][T16680] ? __pfx_lock_release+0x10/0x10 [ 689.068510][T16680] ? trace_lock_acquire+0x14e/0x1f0 [ 689.068524][T16680] tomoyo_encode2+0x100/0x3e0 [ 689.068540][T16680] tomoyo_encode+0x29/0x50 [ 689.068553][T16680] tomoyo_mount_acl+0x145/0x880 [ 689.068566][T16680] ? hlock_class+0x4e/0x130 [ 689.068577][T16680] ? __lock_acquire+0x15a9/0x3c40 [ 689.068592][T16680] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 689.068608][T16680] ? __pfx___lock_acquire+0x10/0x10 [ 689.068622][T16680] ? stack_trace_save+0x95/0xd0 [ 689.068633][T16680] ? __pfx_lock_release+0x10/0x10 [ 689.068654][T16680] ? trace_lock_acquire+0x14e/0x1f0 [ 689.068665][T16680] ? tomoyo_mount_permission+0x149/0x420 [ 689.068679][T16680] ? lock_acquire+0x2f/0xb0 [ 689.068692][T16680] ? tomoyo_mount_permission+0x149/0x420 [ 689.068707][T16680] tomoyo_mount_permission+0x16e/0x420 [ 689.068720][T16680] ? tomoyo_mount_permission+0x149/0x420 [ 689.068734][T16680] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 689.068753][T16680] ? get_current_fs_domain+0x184/0x1f0 [ 689.068765][T16680] security_sb_mount+0x9b/0x260 [ 689.068778][T16680] path_mount+0x129/0x1f10 [ 689.068791][T16680] ? kmem_cache_free+0x2e2/0x4d0 [ 689.068800][T16680] ? __pfx_path_mount+0x10/0x10 [ 689.068813][T16680] ? putname+0x13c/0x180 [ 689.068827][T16680] __x64_sys_mount+0x28f/0x310 [ 689.068838][T16680] ? __pfx___x64_sys_mount+0x10/0x10 [ 689.068853][T16680] do_syscall_64+0xcd/0x250 [ 689.068872][T16680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.068894][T16680] RIP: 0033:0x7faebc38cde9 [ 689.068907][T16680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.068920][T16680] RSP: 002b:00007faebd140038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 689.068930][T16680] RAX: ffffffffffffffda RBX: 00007faebc5a6080 RCX: 00007faebc38cde9 [ 689.068936][T16680] RDX: 00004000000002c0 RSI: 0000400000000280 RDI: 0000400000000580 [ 689.068941][T16680] RBP: 00007faebd140090 R08: 0000000000000000 R09: 0000000000000000 [ 689.068947][T16680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.068953][T16680] R13: 0000000000000000 R14: 00007faebc5a6080 R15: 00007fffb4e66af8 [ 689.068965][T16680] [ 689.747925][T16673] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2243'. [ 690.373276][T16673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16673 comm=syz.8.2243 [ 691.470368][T16723] FAULT_INJECTION: forcing a failure. [ 691.470368][T16723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.500544][T16723] CPU: 1 UID: 0 PID: 16723 Comm: syz.4.2253 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 691.500570][T16723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 691.500579][T16723] Call Trace: [ 691.500584][T16723] [ 691.500591][T16723] dump_stack_lvl+0x16c/0x1f0 [ 691.500613][T16723] should_fail_ex+0x50a/0x650 [ 691.500637][T16723] _copy_from_user+0x2e/0xd0 [ 691.500652][T16723] map_update_elem+0x744/0x8f0 [ 691.500675][T16723] ? __pfx_map_update_elem+0x10/0x10 [ 691.500696][T16723] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 691.500723][T16723] ? selinux_bpf+0xee/0x130 [ 691.500741][T16723] __sys_bpf+0x14bb/0x49c0 [ 691.500757][T16723] ? __pfx_lock_release+0x10/0x10 [ 691.500783][T16723] ? __pfx___sys_bpf+0x10/0x10 [ 691.500800][T16723] ? vfs_write+0x306/0x1150 [ 691.500830][T16723] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 691.500865][T16723] ? fput+0x67/0x440 [ 691.500885][T16723] ? ksys_write+0x1ba/0x250 [ 691.500909][T16723] ? __pfx_ksys_write+0x10/0x10 [ 691.500939][T16723] __x64_sys_bpf+0x78/0xc0 [ 691.500957][T16723] ? lockdep_hardirqs_on+0x7c/0x110 [ 691.500975][T16723] do_syscall_64+0xcd/0x250 [ 691.500996][T16723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.501019][T16723] RIP: 0033:0x7f03d7f8cde9 [ 691.501034][T16723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.501050][T16723] RSP: 002b:00007f03d8e10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 691.501067][T16723] RAX: ffffffffffffffda RBX: 00007f03d81a5fa0 RCX: 00007f03d7f8cde9 [ 691.501077][T16723] RDX: 0000000000000020 RSI: 0000400000000080 RDI: 0000000000000002 [ 691.501094][T16723] RBP: 00007f03d8e10090 R08: 0000000000000000 R09: 0000000000000000 [ 691.501104][T16723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.501114][T16723] R13: 0000000000000000 R14: 00007f03d81a5fa0 R15: 00007ffe60edab98 [ 691.501135][T16723] [ 692.103596][T16734] syz.8.2255 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 692.220559][ T901] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 692.573023][ T901] usb 1-1: Using ep0 maxpacket: 16 [ 693.391323][ T901] usb 1-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 693.471224][ T901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.479275][ T901] usb 1-1: Product: syz [ 693.523697][ T901] usb 1-1: Manufacturer: syz [ 693.537257][ T901] usb 1-1: SerialNumber: syz [ 693.554122][ T29] audit: type=1400 audit(2000000445.860:1313): avc: denied { read } for pid=16755 comm="syz.5.2260" path="socket:[53041]" dev="sockfs" ino=53041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 693.579784][ T901] usb 1-1: config 0 descriptor?? [ 693.662889][ T901] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 694.304014][T16720] 9pnet_fd: Insufficient options for proto=fd [ 694.370583][T11128] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 694.640602][T11128] usb 9-1: Using ep0 maxpacket: 16 [ 694.795993][T11128] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 694.860905][T11128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.869441][T11128] usb 9-1: Product: syz [ 694.882563][ T29] audit: type=1400 audit(2000000447.190:1314): avc: denied { setopt } for pid=16770 comm="syz.4.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 694.893486][T16771] overlayfs: missing 'workdir' [ 694.921114][T11128] usb 9-1: Manufacturer: syz [ 694.925756][T11128] usb 9-1: SerialNumber: syz [ 694.956448][T11128] r8152-cfgselector 9-1: Unknown version 0x0000 [ 694.999603][T11128] r8152-cfgselector 9-1: config 0 descriptor?? [ 695.002158][ T901] pwc: Failed to set LED on/off time (-71) [ 695.210058][ T901] pwc: send_video_command error -71 [ 695.234586][ T901] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 695.266650][ T901] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 695.324401][ T901] usb 1-1: USB disconnect, device number 30 [ 695.651068][ T901] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 695.790541][T12196] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 695.810543][ T901] usb 1-1: Using ep0 maxpacket: 32 [ 695.819298][ T901] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 695.903890][ T901] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 695.922551][ T901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 695.932183][ T901] usb 1-1: config 1 has no interface number 0 [ 695.938304][ T901] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 695.951078][ T901] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 695.965579][ T901] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 695.974737][T12196] usb 5-1: Using ep0 maxpacket: 16 [ 695.981807][ T901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.995590][T12196] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.008520][T12196] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1032, setting to 1024 [ 696.027984][ T901] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 696.035727][T12196] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.048835][T12196] usb 5-1: config 1 interface 0 has no altsetting 0 [ 696.061894][T12196] usb 5-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.40 [ 696.076525][T12196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.084695][T12196] usb 5-1: Product: ꙷᦟ訹̤폽౐窊믄꧗鳽鬈駖᭿冹庤Ⅽ㡶统켯䒁ᑾ挺疗ु늙냫쬉咙砰ꪪ쒅㑊텧뒤஧䮜ᖪ蝦煰탵ᰬ땒⤃顤㏳쐅㉶〸䡚ڲ濗귺螜ﳷ⒱ᖧ浳⏝驓鷝䀾䚱ᓦ梙柤ۭ᱊뎱鑱󡂀﷼㈯✡ᮤ䔻㗒㓖꣬⍋ೌ嶫匙ﯼ짊â鈄리⚜ⴰ傄㪱︒ᶑ숿╋ᐠ萳￵걾䢆⣶ᅓ鈡恞 [ 696.128411][T12196] usb 5-1: Manufacturer: 㙏ٶᨗ㡮䞈⊍⸓⨼꧸㐾㥴뵿꒦⾼ᷙ﷒ﶦ럑賊뢯㋳֏딘낆㊮璟螽商甅ꜭ︴뚿꫈㯬ꀗ射箆惞㹢➯〈䒊檩㣪༤鹜ኵ㥙庀謆闚뛴쨚⿦데⇓⺓낊墳Ẳ⹙㸙ꀹ댢뎘鄻⹞ [ 696.156165][T12196] usb 5-1: SerialNumber: ю [ 696.166355][T16793] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 696.186907][T16793] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 696.265640][ T901] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 696.425344][T16793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2269'. [ 696.456402][T16793] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 696.571522][ T29] audit: type=1400 audit(2000000448.840:1315): avc: denied { append } for pid=16792 comm="syz.4.2269" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 696.595578][ T9] r8152-cfgselector 9-1: USB disconnect, device number 16 [ 696.698343][T11128] usb 1-1: USB disconnect, device number 31 [ 696.706588][T11128] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 696.867400][T12196] usbhid 5-1:1.0: can't add hid device: -71 [ 696.883177][T12196] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 696.918532][T12196] usb 5-1: USB disconnect, device number 28 [ 697.376108][T15321] Bluetooth: hci4: unexpected event 0x0b length: 1 < 11 [ 697.420616][ T5160] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 697.604958][ T5160] usb 9-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 697.727487][ T5160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 697.860420][ T5160] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 697.976334][ T5160] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 57923, setting to 1024 [ 698.053822][ T5160] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 698.175334][ T5160] usb 9-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 698.314108][ T5160] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.440896][ T5160] usb 9-1: Product: syz [ 698.445140][ T5160] usb 9-1: Manufacturer: syz [ 698.450230][ T5160] usb 9-1: SerialNumber: syz [ 698.581738][ T5160] usb 9-1: config 0 descriptor?? [ 698.795060][T16832] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 698.803340][ T5160] usb 9-1: ucan: probing device on interface #0 [ 698.809882][ T5160] usb 9-1: ucan: invalid endpoint configuration [ 698.943965][ T5160] usb 9-1: ucan: probe failed; try to update the device firmware [ 699.981702][ T5160] usb 9-1: USB disconnect, device number 17 [ 700.556590][T16892] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 702.816279][T16915] netdevsim netdevsim4: Direct firmware load for . [ 702.816279][T16915] failed with error -2 [ 702.834768][T16915] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 702.834768][T16915] [ 703.248282][T16937] netdevsim netdevsim8: Direct firmware load for . [ 703.248282][T16937] failed with error -2 [ 703.260591][T16937] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 703.260591][T16937] [ 703.320699][T11130] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 703.515465][T11130] usb 1-1: Using ep0 maxpacket: 32 [ 703.549491][T11130] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 703.562717][T11130] usb 1-1: config 0 has no interface number 0 [ 703.587916][T11130] usb 1-1: config 0 interface 184 has no altsetting 0 [ 703.602551][T11130] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 703.614998][T11130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.625409][T11130] usb 1-1: Product: syz [ 703.631442][T11130] usb 1-1: Manufacturer: syz [ 703.636431][T11130] usb 1-1: SerialNumber: syz [ 703.654726][T11130] usb 1-1: config 0 descriptor?? [ 703.666375][T11130] smsc75xx v1.0.0 [ 704.368009][ T29] audit: type=1400 audit(2000000456.520:1316): avc: denied { name_bind } for pid=16962 comm="syz.4.2298" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 705.104595][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 705.119893][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 705.130248][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 705.141747][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 705.152410][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 705.164820][T11130] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 705.175126][T11130] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 705.194299][T11130] usb 1-1: USB disconnect, device number 32 [ 705.280592][ T9] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 705.290531][T12758] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 705.452504][ T9] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 705.465147][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 705.476374][ T9] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 705.479713][T12758] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 705.490502][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.518266][T12758] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 705.519502][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.544412][T12758] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 705.549978][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.563259][ T9] usb 9-1: invalid MIDI out EP 0 [ 705.566166][T12758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 705.586511][T12758] usb 5-1: SerialNumber: syz [ 705.609345][ T9] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 705.665353][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.766703][ T9] usb 9-1: USB disconnect, device number 18 [ 705.885462][T12758] usb 5-1: 0:2 : does not exist [ 705.892340][T12758] usb 5-1: unit 5 not found! [ 705.913813][T17033] netdevsim netdevsim0: Direct firmware load for . [ 705.913813][T17033] failed with error -2 [ 706.026515][T17033] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 706.026515][T17033] [ 706.057605][T12758] usb 5-1: USB disconnect, device number 29 [ 706.710329][T15321] Bluetooth: hci2: command 0x0406 tx timeout [ 707.072382][ T5812] udevd[5812]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 707.165118][ T5837] Bluetooth: hci4: unexpected event 0x0b length: 1 < 11 [ 707.175373][T17044] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2311'. [ 707.357733][T17059] veth0_vlan: entered allmulticast mode [ 707.839480][T17065] dlm: no local IP address has been set [ 707.865904][T17065] dlm: cannot start dlm midcomms -107 [ 708.286071][T17075] netdevsim netdevsim0: Direct firmware load for . [ 708.286071][T17075] failed with error -2 [ 708.296858][T17075] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 708.296858][T17075] [ 708.515454][T12196] hid (null): unknown global tag 0xc [ 708.522101][T12196] hid (null): unknown global tag 0xe [ 708.542939][T12196] hid (null): invalid report_count 1790505731 [ 708.562180][T12196] hid (null): invalid report_size 1450719333 [ 708.582450][T12196] hid (null): unknown global tag 0xe [ 708.628491][ T29] audit: type=1400 audit(2000000460.930:1317): avc: denied { ioctl } for pid=17082 comm="syz.4.2319" path="socket:[53690]" dev="sockfs" ino=53690 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 708.635453][T12196] hid-generic 0004:03FF:7FFFFFFF.000D: unknown global tag 0xc [ 708.657860][T17086] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2319'. [ 708.681767][T17086] macvtap1: entered promiscuous mode [ 708.698867][T17086] vlan0: entered promiscuous mode [ 708.702751][T12196] hid-generic 0004:03FF:7FFFFFFF.000D: item 0 2 1 12 parsing failed [ 708.715051][T12196] hid-generic 0004:03FF:7FFFFFFF.000D: probe with driver hid-generic failed with error -22 [ 708.754571][T17086] team0: Device macvtap1 failed to register rx_handler [ 708.784071][T17086] vlan0: left promiscuous mode [ 710.118712][T17106] netdevsim netdevsim4: Direct firmware load for . [ 710.118712][T17106] failed with error -2 [ 710.198437][T17106] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 710.198437][T17106] [ 710.391128][T17105] block device autoloading is deprecated and will be removed. [ 710.701813][T17114] FAULT_INJECTION: forcing a failure. [ 710.701813][T17114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.755396][ T5837] Bluetooth: hci0: unexpected event 0x0b length: 1 < 11 [ 710.768775][T17114] CPU: 1 UID: 0 PID: 17114 Comm: syz.5.2322 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 710.768799][T17114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 710.768820][T17114] Call Trace: [ 710.768825][T17114] [ 710.768832][T17114] dump_stack_lvl+0x16c/0x1f0 [ 710.768856][T17114] should_fail_ex+0x50a/0x650 [ 710.768884][T17114] _copy_from_user+0x2e/0xd0 [ 710.768900][T17114] core_sys_select+0x2cf/0xb80 [ 710.768926][T17114] ? __pfx_core_sys_select+0x10/0x10 [ 710.768943][T17114] ? get_pid_task+0xfc/0x250 [ 710.768979][T17114] ? set_user_sigmask+0x217/0x2a0 [ 710.768998][T17114] ? __pfx_set_user_sigmask+0x10/0x10 [ 710.769022][T17114] do_pselect.constprop.0+0x1a0/0x1f0 [ 710.769044][T17114] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 710.769073][T17114] __x64_sys_pselect6+0x183/0x240 [ 710.769087][T17114] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 710.769114][T17114] do_syscall_64+0xcd/0x250 [ 710.769132][T17114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.769151][T17114] RIP: 0033:0x7f828b38cde9 [ 710.769162][T17114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.769176][T17114] RSP: 002b:00007f828c234038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 710.769190][T17114] RAX: ffffffffffffffda RBX: 00007f828b5a5fa0 RCX: 00007f828b38cde9 [ 710.769200][T17114] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000040 [ 710.769208][T17114] RBP: 00007f828c234090 R08: 0000000000000000 R09: 0000000000000000 [ 710.769217][T17114] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 710.769226][T17114] R13: 0000000000000000 R14: 00007f828b5a5fa0 R15: 00007fff7d75ae38 [ 710.769245][T17114] [ 710.818254][T17123] vlan0: entered promiscuous mode [ 710.825325][ T29] audit: type=1800 audit(2000000463.130:1318): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.8.2323" name="/newroot/49/bus" dev="tmpfs" ino=304 res=0 errno=0 [ 710.825466][T17124] Invalid ELF header len 8 [ 710.836437][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2325'. [ 711.095378][T17138] dlm: no local IP address has been set [ 711.368595][T17138] dlm: cannot start dlm midcomms -107 [ 712.036705][ T29] audit: type=1326 audit(2000000464.340:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17152 comm="syz.8.2330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bf878cde9 code=0x0 [ 712.067378][T17123] team0 (unregistering): Port device team_slave_0 removed [ 712.807959][T17123] team0 (unregistering): Port device team_slave_1 removed [ 713.359196][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2333'. [ 714.528058][T17196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2339'. [ 714.675696][T17199] dlm: no local IP address has been set [ 714.687816][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 714.696953][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 714.716784][T17199] dlm: cannot start dlm midcomms -107 [ 714.868236][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 714.895151][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 715.127815][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 715.144469][T17208] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 715.747659][T17200] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2340'. [ 715.778871][T17208] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2343'. [ 716.776418][ T5837] Bluetooth: hci0: unexpected event 0x0b length: 1 < 11 [ 716.920648][T12758] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 717.618170][T12758] usb 5-1: device descriptor read/64, error -71 [ 717.916595][T17243] exFAT-fs (nullb0): invalid boot record signature [ 717.923375][T17243] exFAT-fs (nullb0): failed to read boot sector [ 717.929637][T17243] exFAT-fs (nullb0): failed to recognize exfat type [ 718.000699][T12758] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 718.272727][T17245] CIFS: Unable to determine destination address [ 718.430550][T12758] usb 5-1: device descriptor read/64, error -71 [ 718.546301][T17256] dlm: no local IP address has been set [ 718.577249][T17256] dlm: cannot start dlm midcomms -107 [ 718.579296][T12758] usb usb5-port1: attempt power cycle [ 718.694907][T17260] overlayfs: failed to resolve './file1': -2 [ 718.780247][T17261] lo speed is unknown, defaulting to 1000 [ 718.796045][T17261] lo speed is unknown, defaulting to 1000 [ 718.804778][T17261] lo speed is unknown, defaulting to 1000 [ 719.168388][T17261] infiniband sz1: set down [ 719.173303][T17261] infiniband sz1: added lo [ 719.249129][T11130] lo speed is unknown, defaulting to 1000 [ 719.294079][T17261] RDS/IB: sz1: added [ 719.298745][T17261] smc: adding ib device sz1 with port count 1 [ 719.305081][T17261] smc: ib device sz1 port 1 has pnetid [ 719.314627][T17261] lo speed is unknown, defaulting to 1000 [ 719.374327][T17261] lo speed is unknown, defaulting to 1000 [ 719.421790][ T5160] lo speed is unknown, defaulting to 1000 [ 719.428015][T17261] lo speed is unknown, defaulting to 1000 [ 719.473314][T17261] lo speed is unknown, defaulting to 1000 [ 719.512871][T17261] lo speed is unknown, defaulting to 1000 [ 719.556898][T17261] lo speed is unknown, defaulting to 1000 [ 719.596562][T17261] lo speed is unknown, defaulting to 1000 [ 723.482239][T17311] vxcan1: tx drop: invalid sa for name 0x00000000ffef0000 [ 724.337227][ T29] audit: type=1400 audit(2000000476.630:1320): avc: denied { mount } for pid=17317 comm="syz.4.2366" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 724.359941][ C1] vkms_vblank_simulate: vblank timer overrun [ 724.862544][ T29] audit: type=1400 audit(2000000476.630:1321): avc: denied { search } for pid=17317 comm="syz.4.2366" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 725.390542][T17330] dlm: no local IP address has been set [ 725.416135][T17330] dlm: cannot start dlm midcomms -107 [ 725.446195][T17332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2362'. [ 727.573405][ T29] audit: type=1400 audit(2000000479.850:1322): avc: denied { getopt } for pid=17354 comm="syz.8.2374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 728.070708][ T5160] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 728.133666][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 728.721022][ T5160] usb 9-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 728.730113][ T5160] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.863960][ T5160] usb 9-1: config 0 descriptor?? [ 728.965310][ T5160] usb 9-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 729.105072][ T5160] dvb_usb_af9015 9-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 731.270505][ T29] audit: type=1400 audit(2000000482.630:1323): avc: denied { create } for pid=17406 comm="syz.6.2383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 731.282364][T17418] netdevsim netdevsim4: Direct firmware load for . [ 731.282364][T17418] failed with error -2 [ 731.301274][T17418] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 731.301274][T17418] [ 731.633908][ T29] audit: type=1400 audit(2000000482.680:1324): avc: denied { sys_admin } for pid=17406 comm="syz.6.2383" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 731.731938][ T29] audit: type=1400 audit(2000000482.720:1325): avc: denied { associate } for pid=17417 comm="syz.6.2383" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 731.841066][ T29] audit: type=1400 audit(2000000483.970:1326): avc: denied { connect } for pid=17419 comm="syz.6.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 731.860625][ C0] vkms_vblank_simulate: vblank timer overrun [ 731.891188][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2388'. [ 731.900212][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2388'. [ 731.920490][ T29] audit: type=1400 audit(2000000483.970:1327): avc: denied { write } for pid=17419 comm="syz.6.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 732.046467][T17432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2389'. [ 732.086720][T17432] FAULT_INJECTION: forcing a failure. [ 732.086720][T17432] name failslab, interval 1, probability 0, space 0, times 0 [ 732.124777][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2388'. [ 732.140528][T17432] CPU: 0 UID: 0 PID: 17432 Comm: syz.5.2389 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 732.140556][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 732.140566][T17432] Call Trace: [ 732.140571][T17432] [ 732.140578][T17432] dump_stack_lvl+0x16c/0x1f0 [ 732.140605][T17432] should_fail_ex+0x50a/0x650 [ 732.140635][T17432] ? fs_reclaim_acquire+0xae/0x150 [ 732.140655][T17432] should_failslab+0xc2/0x120 [ 732.140670][T17432] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 732.140683][T17432] ? __alloc_skb+0x2b1/0x380 [ 732.140703][T17432] __alloc_skb+0x2b1/0x380 [ 732.140718][T17432] ? __pfx___alloc_skb+0x10/0x10 [ 732.140733][T17432] ? genl_rcv_msg+0x4bd/0x800 [ 732.140755][T17432] netlink_ack+0x15f/0xb80 [ 732.140771][T17432] ? __pfx___lock_acquire+0x10/0x10 [ 732.140793][T17432] netlink_rcv_skb+0x348/0x440 [ 732.140808][T17432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.140826][T17432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.140849][T17432] ? down_read+0xc9/0x330 [ 732.140865][T17432] ? __pfx_down_read+0x10/0x10 [ 732.140880][T17432] ? netlink_deliver_tap+0x1ae/0xd30 [ 732.140898][T17432] genl_rcv+0x28/0x40 [ 732.140913][T17432] netlink_unicast+0x53c/0x7f0 [ 732.140930][T17432] ? __pfx_netlink_unicast+0x10/0x10 [ 732.140950][T17432] netlink_sendmsg+0x8b8/0xd70 [ 732.140968][T17432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.140990][T17432] ____sys_sendmsg+0xaaf/0xc90 [ 732.141003][T17432] ? copy_msghdr_from_user+0x10b/0x160 [ 732.141019][T17432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.141040][T17432] ___sys_sendmsg+0x135/0x1e0 [ 732.141058][T17432] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.141082][T17432] ? __pfx_lock_release+0x10/0x10 [ 732.141098][T17432] ? trace_lock_acquire+0x14e/0x1f0 [ 732.141119][T17432] ? __fget_files+0x206/0x3a0 [ 732.141136][T17432] __sys_sendmsg+0x16e/0x220 [ 732.141153][T17432] ? __pfx___sys_sendmsg+0x10/0x10 [ 732.141181][T17432] do_syscall_64+0xcd/0x250 [ 732.141197][T17432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.141215][T17432] RIP: 0033:0x7f828b38cde9 [ 732.141226][T17432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.141239][T17432] RSP: 002b:00007f828c234038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.141253][T17432] RAX: ffffffffffffffda RBX: 00007f828b5a5fa0 RCX: 00007f828b38cde9 [ 732.141261][T17432] RDX: 0000000000000000 RSI: 0000400000000200 RDI: 0000000000000004 [ 732.141269][T17432] RBP: 00007f828c234090 R08: 0000000000000000 R09: 0000000000000000 [ 732.141277][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.141287][T17432] R13: 0000000000000000 R14: 00007f828b5a5fa0 R15: 00007fff7d75ae38 [ 732.141304][T17432] [ 732.145045][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2388'. [ 732.949217][ T5837] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 733.721651][T12196] usb 9-1: USB disconnect, device number 19 [ 734.074564][ T29] audit: type=1400 audit(2000000486.240:1328): avc: denied { write } for pid=17459 comm="syz.6.2395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 734.094121][ C0] vkms_vblank_simulate: vblank timer overrun [ 734.641608][ T5160] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 734.670676][T12196] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 734.717233][ T5160] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.745061][T17482] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 734.785664][ T5837] Bluetooth: hci3: SCO packet for unknown connection handle 100 [ 734.851718][T12196] usb 5-1: Using ep0 maxpacket: 8 [ 734.894558][T12196] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 734.900611][ T5912] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 734.927535][T12196] usb 5-1: config 0 interface 0 has no altsetting 0 [ 735.080539][ T5912] usb 9-1: device descriptor read/64, error -71 [ 735.117466][T12196] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 735.127582][T12196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.147185][T12196] usb 5-1: Product: syz [ 735.159952][T12196] usb 5-1: Manufacturer: syz [ 735.175111][T12196] usb 5-1: SerialNumber: syz [ 735.187750][T12196] usb 5-1: config 0 descriptor?? [ 735.208497][T12196] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 735.320617][ T5912] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 735.418997][T17473] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 736.008933][ T5912] usb 9-1: device descriptor read/64, error -71 [ 736.393105][ T5912] usb usb9-port1: attempt power cycle [ 737.002669][ T5912] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 737.310775][ T5912] usb 9-1: device not accepting address 22, error -71 [ 737.713316][T12196] snd_usb_toneport 5-1:0.0: set_interface failed [ 737.730550][T12196] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 737.738419][T12196] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 737.880966][ T29] audit: type=1400 audit(2000000490.120:1329): avc: denied { ioctl } for pid=17522 comm="syz.5.2407" path="socket:[55115]" dev="sockfs" ino=55115 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 737.933871][T12196] usb 5-1: USB disconnect, device number 33 [ 738.358432][T17519] netdevsim netdevsim8: Direct firmware load for . [ 738.358432][T17519] failed with error -2 [ 738.369068][T17519] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 738.369068][T17519] [ 739.040059][T17541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.370763][ T5837] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 742.399769][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2419'. [ 742.751160][T17595] bridge_slave_1: left allmulticast mode [ 742.751188][T17595] bridge_slave_1: left promiscuous mode [ 742.751347][T17595] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.840823][T17595] bridge_slave_0: left allmulticast mode [ 742.840848][T17595] bridge_slave_0: left promiscuous mode [ 742.840979][T17595] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.927977][ T5837] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 743.413699][T17603] tty tty20: ldisc open failed (-12), clearing slot 19 [ 743.934698][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 743.952356][T17626] netlink: 1256 bytes leftover after parsing attributes in process `syz.6.2425'. [ 744.662079][T17645] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2429'. [ 745.492749][T17672] lo speed is unknown, defaulting to 1000 [ 745.620692][T15321] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 746.284460][ T5160] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 746.500577][ T5160] usb 9-1: Using ep0 maxpacket: 8 [ 746.623211][ T5160] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.716956][ T5160] usb 9-1: config 0 has no interfaces? [ 746.755736][ T5160] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 746.778652][ T5160] usb 9-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 746.803073][ T5160] usb 9-1: Product: syz [ 746.814574][ T5160] usb 9-1: Manufacturer: syz [ 746.830141][ T5160] usb 9-1: SerialNumber: syz [ 746.928247][ T5160] usb 9-1: config 0 descriptor?? [ 746.976089][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.971469][ T5160] usb 9-1: USB disconnect, device number 24 [ 748.134928][T17721] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2447'. [ 748.161426][T17688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 748.186009][T17721] unsupported nlmsg_type 40 [ 748.258039][T15321] Bluetooth: hci2: unexpected event for opcode 0x080f [ 750.968334][ T29] audit: type=1400 audit(2000000503.270:1330): avc: denied { ioctl } for pid=17798 comm="syz.6.2457" path="socket:[55733]" dev="sockfs" ino=55733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 751.272517][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2458'. [ 751.299702][T17803] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2458'. [ 751.374391][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2458'. [ 751.628488][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2458'. [ 751.810158][T15321] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 752.108805][T15321] Bluetooth: hci3: unexpected event 0x0b length: 1 < 11 [ 752.310587][T15321] Bluetooth: hci3: unexpected event 0x0b length: 1 < 11 [ 752.350705][ T5837] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 752.361169][ T5837] Bluetooth: hci2: Injecting HCI hardware error event [ 752.371427][T15321] Bluetooth: hci2: hardware error 0x00 [ 752.934261][ T5873] libceph: connect (1)[c::]:6789 error -101 [ 752.943934][T17837] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 17837 comm: syz.8.2467) [ 752.987645][ T5873] libceph: mon0 (1)[c::]:6789 connect error [ 753.027185][ T29] audit: type=1800 audit(2000000505.330:1331): pid=17837 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2467" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=56556 res=0 errno=0 [ 753.054454][T17842] ceph: No mds server is up or the cluster is laggy [ 753.170887][T17837] tun0: tun_chr_ioctl cmd 1074025675 [ 753.220783][T17837] tun0: persist disabled [ 754.589605][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 755.105019][T15321] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 755.401804][T15321] Bluetooth: hci0: unexpected event 0x0b length: 1 < 11 [ 755.474211][ T29] audit: type=1400 audit(2000000507.770:1332): avc: denied { ioctl } for pid=17880 comm="syz.4.2477" path="socket:[55851]" dev="sockfs" ino=55851 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 755.622925][T17895] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 755.639886][T17895] macvtap1: entered promiscuous mode [ 755.652754][T17895] macvtap1: entered allmulticast mode [ 755.664247][ T29] audit: type=1400 audit(2000000507.960:1333): avc: denied { write } for pid=17900 comm="syz.5.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 755.695359][T17895] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 755.758048][T17895] mac80211_hwsim hwsim16 wlan0: left allmulticast mode [ 755.776273][T17895] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 755.795881][T12196] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 755.970711][ T5160] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 755.974334][T12196] usb 9-1: Using ep0 maxpacket: 16 [ 756.273000][T12196] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 756.285355][ T29] audit: type=1400 audit(2000000508.510:1334): avc: denied { map } for pid=17910 comm="syz.4.2484" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 756.321536][T12196] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.335306][ T5160] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 756.341809][T12196] usb 9-1: Product: syz [ 756.357498][T12196] usb 9-1: Manufacturer: syz [ 756.372880][T12196] usb 9-1: SerialNumber: syz [ 756.392537][ T29] audit: type=1400 audit(2000000508.520:1335): avc: denied { execute } for pid=17910 comm="syz.4.2484" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 756.393157][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.416537][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.438685][T12196] usb 9-1: config 0 descriptor?? [ 756.446147][T12196] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 756.556479][T12196] usb 9-1: Detected FT-X [ 756.650717][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.662436][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 756.669849][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 756.679940][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 756.691471][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.008496][T17929] lo speed is unknown, defaulting to 1000 [ 757.097740][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.223360][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.255958][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.276098][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.282620][ T29] audit: type=1400 audit(2000000509.580:1336): avc: denied { create } for pid=17936 comm="syz.4.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 757.285761][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.370035][ T5832] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 757.563115][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.653379][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.662488][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.675794][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.686616][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.696289][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.708175][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.716032][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.725108][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.736053][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.743996][ T5160] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 757.756330][ T5160] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 757.767323][ T5160] usb 1-1: config 0 interface 0 has no altsetting 0 [ 757.781156][ T5160] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 757.790227][ T5160] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 757.801223][ T29] audit: type=1400 audit(2000000510.110:1337): avc: denied { append } for pid=17944 comm="syz.4.2492" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 757.821127][ T5160] usb 1-1: Product: syz [ 757.829120][ T5160] usb 1-1: Manufacturer: syz [ 757.835498][ T5160] usb 1-1: SerialNumber: syz [ 757.855299][ T5160] usb 1-1: config 0 descriptor?? [ 757.871474][ T5160] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 757.879692][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2492'. [ 757.928511][ T29] audit: type=1400 audit(2000000510.130:1338): avc: denied { read } for pid=17944 comm="syz.4.2492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 758.086101][T12196] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 758.096811][T12196] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 758.104625][T12196] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 758.114380][T12196] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 758.130809][T12196] usb 9-1: USB disconnect, device number 25 [ 758.150595][T12196] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 758.164821][T12196] ftdi_sio 9-1:0.0: device disconnected [ 758.178600][T17958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.229509][T17958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.422400][ T29] audit: type=1400 audit(2000000510.730:1339): avc: denied { read } for pid=17970 comm="syz.6.2497" name="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 758.444429][ C0] vkms_vblank_simulate: vblank timer overrun [ 758.459629][ T29] audit: type=1400 audit(2000000510.730:1340): avc: denied { open } for pid=17970 comm="syz.6.2497" path="/" dev="configfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 758.514788][T17973] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 758.542994][T17973] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 758.556095][T17973] gretap1: entered promiscuous mode [ 758.599705][T17973] gretap1: entered allmulticast mode [ 758.803193][T17989] lo speed is unknown, defaulting to 1000 [ 759.292737][ T5832] Bluetooth: hci4: command 0x0406 tx timeout [ 759.550776][ C1] usb 1-1: yurex_control_callback - control failed: -2 [ 759.778303][T11130] usb 1-1: USB disconnect, device number 33 [ 759.810106][T11130] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 759.971301][ T29] audit: type=1400 audit(2000000512.270:1341): avc: denied { getopt } for pid=18008 comm="syz.8.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 760.170769][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 760.391809][ T29] audit: type=1400 audit(2000000512.690:1342): avc: denied { setopt } for pid=18008 comm="syz.8.2504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 760.411545][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.490536][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 760.499592][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 760.508552][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 760.521010][ T5874] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 760.533933][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 760.546467][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 760.563958][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 760.571682][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 760.583055][ T5874] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 760.598213][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 760.610303][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 760.622915][ T5874] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 760.630466][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 760.780289][ T5874] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 760.811409][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 760.842668][ T5874] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 761.626097][ T5874] usb 5-1: string descriptor 0 read error: -22 [ 761.640548][ T5874] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 761.681596][T15321] Bluetooth: hci3: unexpected event for opcode 0x080f [ 761.700988][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.775132][ T5874] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 762.115383][ T5874] usb 5-1: USB disconnect, device number 34 [ 762.837536][T11130] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 763.552555][T11130] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 763.569557][T11130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.599768][T11130] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 763.723195][T11130] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 763.731992][T11130] usb 1-1: Manufacturer: syz [ 763.741206][T11130] usb 1-1: config 0 descriptor?? [ 763.855177][T11130] rc_core: IR keymap rc-hauppauge not found [ 764.520556][ T5873] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 764.799139][T11130] Registered IR keymap rc-empty [ 764.807946][T11130] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 764.832771][T11130] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input41 [ 765.130955][ T5873] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 765.146997][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 765.176015][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 765.692374][T15321] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 765.866112][T15321] Bluetooth: hci3: Injecting HCI hardware error event [ 765.870587][ T29] audit: type=1400 audit(2000000517.550:1343): avc: denied { listen } for pid=18088 comm="syz.6.2519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 765.876841][ T5832] Bluetooth: hci3: hardware error 0x00 [ 765.901368][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.240529][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.270893][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.352024][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.372727][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.387372][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.404664][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.413502][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.429402][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.453410][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.469423][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.506115][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.534572][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.553127][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.567843][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.585029][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.593315][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.610190][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.640514][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.665262][ T5873] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 766.677487][ T5873] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 766.694241][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 766.706227][ T5873] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 766.725476][ T5873] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 766.754219][ T5873] usb 5-1: Product: syz [ 766.782556][ T5873] usb 5-1: Manufacturer: syz [ 766.798179][ T5873] usb 5-1: SerialNumber: syz [ 766.811088][ T5873] usb 5-1: config 0 descriptor?? [ 766.818360][ T5873] usb 5-1: can't set config #0, error -71 [ 766.856352][ T5873] usb 5-1: USB disconnect, device number 35 [ 767.440609][ T5873] usb 1-1: USB disconnect, device number 34 [ 767.638097][T18139] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 767.840666][T12196] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 768.020652][T12196] usb 9-1: Using ep0 maxpacket: 8 [ 768.178436][T12196] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 768.192872][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 768.206065][T12196] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.235779][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 768.276544][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 768.316821][T12196] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 768.330798][ T5832] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 768.338002][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 768.360266][T12196] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 768.373959][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 768.385511][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 768.399329][T12196] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 769.116967][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 769.139070][T12196] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 769.150845][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 769.239806][T12196] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 769.312970][T12196] usb 9-1: string descriptor 0 read error: -22 [ 769.337581][T12196] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 769.354006][ T29] audit: type=1400 audit(2000000521.660:1344): avc: denied { getopt } for pid=18162 comm="syz.5.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 769.430191][ T5832] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 769.435696][T12196] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.653346][T12196] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 770.076941][ T5912] usb 9-1: USB disconnect, device number 26 [ 770.348582][T18192] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2535'. [ 771.508194][ T29] audit: type=1400 audit(2000000523.810:1345): avc: denied { ioctl } for pid=18199 comm="syz.0.2538" path="socket:[57004]" dev="sockfs" ino=57004 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 771.757098][T18199] delete_channel: no stack [ 771.916167][ T29] audit: type=1400 audit(2000000523.940:1346): avc: denied { bind } for pid=18199 comm="syz.0.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 774.500530][T11130] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 774.761368][T12196] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 775.690609][T11130] usb 5-1: Using ep0 maxpacket: 8 [ 775.787500][T11130] usb 5-1: no configurations [ 775.802662][T11130] usb 5-1: can't read configurations, error -22 [ 776.000489][T12196] usb 1-1: config 0 has no interfaces? [ 776.006005][T12196] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 776.021781][T12196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.201335][T11130] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 776.230818][T12196] usb 1-1: config 0 descriptor?? [ 776.411518][T11130] usb 5-1: Using ep0 maxpacket: 8 [ 776.485452][T11130] usb 5-1: no configurations [ 776.505070][T11130] usb 5-1: can't read configurations, error -22 [ 776.530964][T11130] usb usb5-port1: attempt power cycle [ 776.602169][T18236] IPVS: stopping backup sync thread 18266 ... [ 776.609540][T18266] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 776.620924][T18236] [ 776.623265][T18236] ====================================================== [ 776.630281][T18236] WARNING: possible circular locking dependency detected [ 776.637301][T18236] 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 Not tainted [ 776.644404][T18236] ------------------------------------------------------ [ 776.651412][T18236] syz.0.2547/18236 is trying to acquire lock: [ 776.657480][T18236] ffffffff8fef6aa8 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x9b/0x290 [ 776.666398][T18236] [ 776.666398][T18236] but task is already holding lock: [ 776.673754][T18236] ffff88801b19f228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 776.683846][T18236] [ 776.683846][T18236] which lock already depends on the new lock. [ 776.683846][T18236] [ 776.694227][T18236] [ 776.694227][T18236] the existing dependency chain (in reverse order) is: [ 776.703380][T18236] [ 776.703380][T18236] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 776.711979][T18236] __mutex_lock+0x19b/0xb10 [ 776.717008][T18236] smc_switch_to_fallback+0x2d/0xa00 [ 776.722806][T18236] smc_sendmsg+0x13d/0x520 [ 776.727730][T18236] __sys_sendto+0x488/0x4f0 [ 776.732740][T18236] __x64_sys_sendto+0xe0/0x1c0 [ 776.738011][T18236] do_syscall_64+0xcd/0x250 [ 776.743017][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.749414][T18236] [ 776.749414][T18236] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 776.757038][T18236] lock_sock_nested+0x3a/0xf0 [ 776.762226][T18236] sockopt_lock_sock+0x54/0x70 [ 776.767501][T18236] do_ip_setsockopt+0x101/0x3680 [ 776.772942][T18236] ip_setsockopt+0x59/0xf0 [ 776.777862][T18236] udp_setsockopt+0x7d/0xd0 [ 776.782867][T18236] do_sock_setsockopt+0x222/0x480 [ 776.788398][T18236] __sys_setsockopt+0x1a0/0x230 [ 776.793752][T18236] __x64_sys_setsockopt+0xbd/0x160 [ 776.799966][T18236] do_syscall_64+0xcd/0x250 [ 776.805014][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.811417][T18236] [ 776.811417][T18236] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 776.818604][T18236] __lock_acquire+0x249e/0x3c40 [ 776.823960][T18236] lock_acquire.part.0+0x11b/0x380 [ 776.829574][T18236] __mutex_lock+0x19b/0xb10 [ 776.834578][T18236] ip_mc_drop_socket+0x9b/0x290 [ 776.839931][T18236] inet_release+0xa3/0x280 [ 776.844849][T18236] sock_release+0x8e/0x1d0 [ 776.849779][T18236] stop_sync_thread+0x285/0x720 [ 776.855127][T18236] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 776.860568][T18236] nf_setsockopt+0x8a/0xf0 [ 776.865486][T18236] ip_setsockopt+0xcb/0xf0 [ 776.870421][T18236] tcp_setsockopt+0xa4/0x100 [ 776.875534][T18236] smc_setsockopt+0x1b4/0xa00 [ 776.880730][T18236] do_sock_setsockopt+0x222/0x480 [ 776.886262][T18236] __sys_setsockopt+0x1a0/0x230 [ 776.891616][T18236] __x64_sys_setsockopt+0xbd/0x160 [ 776.897241][T18236] do_syscall_64+0xcd/0x250 [ 776.902244][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.908643][T18236] [ 776.908643][T18236] other info that might help us debug this: [ 776.908643][T18236] [ 776.918847][T18236] Chain exists of: [ 776.918847][T18236] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 776.918847][T18236] [ 776.932383][T18236] Possible unsafe locking scenario: [ 776.932383][T18236] [ 776.939819][T18236] CPU0 CPU1 [ 776.945170][T18236] ---- ---- [ 776.950509][T18236] lock(&smc->clcsock_release_lock); [ 776.955860][T18236] lock(sk_lock-AF_INET); [ 776.962786][T18236] lock(&smc->clcsock_release_lock); [ 776.970653][T18236] lock(rtnl_mutex); [ 776.974630][T18236] [ 776.974630][T18236] *** DEADLOCK *** [ 776.974630][T18236] [ 776.982763][T18236] 1 lock held by syz.0.2547/18236: [ 776.987858][T18236] #0: ffff88801b19f228 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xa00 [ 776.998370][T18236] [ 776.998370][T18236] stack backtrace: [ 777.004236][T18236] CPU: 1 UID: 0 PID: 18236 Comm: syz.0.2547 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 777.004251][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 777.004260][T18236] Call Trace: [ 777.004265][T18236] [ 777.004271][T18236] dump_stack_lvl+0x116/0x1f0 [ 777.004288][T18236] print_circular_bug+0x490/0x760 [ 777.004308][T18236] check_noncircular+0x31a/0x400 [ 777.004326][T18236] ? __pfx_check_noncircular+0x10/0x10 [ 777.004343][T18236] ? __pfx_lock_release+0x10/0x10 [ 777.004361][T18236] ? lockdep_lock+0xc6/0x200 [ 777.004374][T18236] ? __pfx_lockdep_lock+0x10/0x10 [ 777.004388][T18236] ? __pfx_mark_lock+0x10/0x10 [ 777.004405][T18236] __lock_acquire+0x249e/0x3c40 [ 777.004425][T18236] ? __pfx___lock_acquire+0x10/0x10 [ 777.004442][T18236] ? __lock_acquire+0x15a9/0x3c40 [ 777.004461][T18236] lock_acquire.part.0+0x11b/0x380 [ 777.004478][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004493][T18236] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 777.004511][T18236] ? rcu_is_watching+0x12/0xc0 [ 777.004525][T18236] ? trace_lock_acquire+0x14e/0x1f0 [ 777.004539][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004553][T18236] ? lock_acquire+0x2f/0xb0 [ 777.004569][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004583][T18236] __mutex_lock+0x19b/0xb10 [ 777.004598][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004612][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004625][T18236] ? stop_sync_thread+0x23e/0x720 [ 777.004640][T18236] ? __pfx___mutex_lock+0x10/0x10 [ 777.004653][T18236] ? mark_held_locks+0x9f/0xe0 [ 777.004670][T18236] ? _raw_spin_unlock_irq+0x23/0x50 [ 777.004684][T18236] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 777.004699][T18236] ? ip_mc_drop_socket+0x9b/0x290 [ 777.004712][T18236] ? rtnl_lock+0x9/0x20 [ 777.004731][T18236] ip_mc_drop_socket+0x9b/0x290 [ 777.004745][T18236] inet_release+0xa3/0x280 [ 777.004762][T18236] sock_release+0x8e/0x1d0 [ 777.004775][T18236] stop_sync_thread+0x285/0x720 [ 777.004790][T18236] do_ip_vs_set_ctl+0x4ec/0x11c0 [ 777.004810][T18236] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 777.004828][T18236] ? nf_sockopt_find.constprop.0+0x221/0x290 [ 777.004844][T18236] ? __pfx_lock_release+0x10/0x10 [ 777.004860][T18236] ? rcu_is_watching+0x12/0xc0 [ 777.004873][T18236] ? __mutex_lock+0x1cc/0xb10 [ 777.004887][T18236] ? mark_held_locks+0x9f/0xe0 [ 777.004905][T18236] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 777.004925][T18236] ? nf_setsockopt+0x8a/0xf0 [ 777.004938][T18236] nf_setsockopt+0x8a/0xf0 [ 777.004953][T18236] ip_setsockopt+0xcb/0xf0 [ 777.004971][T18236] tcp_setsockopt+0xa4/0x100 [ 777.004984][T18236] smc_setsockopt+0x1b4/0xa00 [ 777.005000][T18236] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 777.005020][T18236] ? __pfx_smc_setsockopt+0x10/0x10 [ 777.005036][T18236] ? selinux_socket_setsockopt+0x6a/0x80 [ 777.005053][T18236] ? __pfx_smc_setsockopt+0x10/0x10 [ 777.005069][T18236] do_sock_setsockopt+0x222/0x480 [ 777.005089][T18236] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 777.005109][T18236] ? lock_acquire+0x2f/0xb0 [ 777.005129][T18236] __sys_setsockopt+0x1a0/0x230 [ 777.005147][T18236] __x64_sys_setsockopt+0xbd/0x160 [ 777.005166][T18236] ? do_syscall_64+0x91/0x250 [ 777.005181][T18236] ? lockdep_hardirqs_on+0x7c/0x110 [ 777.005194][T18236] do_syscall_64+0xcd/0x250 [ 777.005209][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.005228][T18236] RIP: 0033:0x7faebc38cde9 [ 777.005239][T18236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.005252][T18236] RSP: 002b:00007faebd161038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 777.005265][T18236] RAX: ffffffffffffffda RBX: 00007faebc5a5fa0 RCX: 00007faebc38cde9 [ 777.005273][T18236] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000005 [ 777.005281][T18236] RBP: 00007faebc40e2a0 R08: 0000000000000018 R09: 0000000000000000 [ 777.005289][T18236] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 777.005297][T18236] R13: 0000000000000000 R14: 00007faebc5a5fa0 R15: 00007fffb4e66af8 [ 777.005309][T18236] [ 777.461852][T18272] netdevsim netdevsim8: Direct firmware load for . [ 777.461852][T18272] failed with error -2 [ 777.472626][T18272] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 777.472626][T18272] [ 777.683860][ T5874] usb 1-1: USB disconnect, device number 35 [ 777.710505][T11130] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 777.920557][T11130] usb 5-1: device not accepting address 38, error -71