last executing test programs: 31m7.093421319s ago: executing program 0 (id=1): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x21b5099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=0x0], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 31m6.155536593s ago: executing program 0 (id=6): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) creat(0x0, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f0000000340)=[{}], 0x1, 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000060000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d080003400000011005000d407700000008000c400001"], 0x9c}}, 0x20050800) 31m5.753714151s ago: executing program 0 (id=7): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) connect$tipc(r0, &(0x7f0000000140)=@name, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)=0x689) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r4, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x300) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x26) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x92000, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000440)={0xfff7, [0x80, 0xffffffff], 0xfffe}, 0x10) 31m5.328848291s ago: executing program 32 (id=7): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) connect$tipc(r0, &(0x7f0000000140)=@name, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)=0x689) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r4, 0x12e, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040)=0x300) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x26) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x92000, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000440)={0xfff7, [0x80, 0xffffffff], 0xfffe}, 0x10) 14m6.156836877s ago: executing program 3 (id=4650): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0x1, 0x0, &(0x7f0000000100)="ff", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) 14m5.962582143s ago: executing program 3 (id=4651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 14m4.86844833s ago: executing program 3 (id=4656): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x4) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/92, 0x5c) 14m4.739281533s ago: executing program 3 (id=4658): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000680)={0x2020}, 0x2020) 14m4.512515876s ago: executing program 3 (id=4663): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0) 14m4.391735013s ago: executing program 3 (id=4665): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)='~', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) 14m4.165479285s ago: executing program 33 (id=4665): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$unix(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)='~', 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) 2m44.89860576s ago: executing program 5 (id=7009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') 2m43.501384755s ago: executing program 5 (id=7012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x4000, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 2m42.494948908s ago: executing program 5 (id=7014): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) 2m41.071198298s ago: executing program 5 (id=7017): socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 2m39.620604571s ago: executing program 5 (id=7025): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f0000000040)={0x0, @remote}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) listen(0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40046f41, 0x20000502) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m38.059963855s ago: executing program 5 (id=7028): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40800) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) 2m21.211580277s ago: executing program 34 (id=7028): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sync() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x40800) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) 1m36.804127657s ago: executing program 1 (id=7196): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x458, 0x220, 0x43, 0xa0, 0x220, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x200, 0x220, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c0}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4b8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xfffc, 0x0, @mcast1, 0x5}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) memfd_create(&(0x7f00000004c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00 \x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03&`\xd5\xe7\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x98(\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\f\xeaH\xd8cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\xba\xb4+v\xb7i\a\x7f\v(\x11>\x9b\x1c\xd7', 0x6) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0xa, @pix_mp={0x0, 0x0, 0x33565348, 0x7, 0x0, [{0x8, 0xfffffffd}, {0x9}, {}, {0x10000000, 0x6}, {}, {0x400000, 0xfffffffe}, {0xffffffff, 0xffffffff}], 0x6, 0x0, 0x0, 0x2, 0x7}}) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) 1m34.292502043s ago: executing program 1 (id=7201): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0xfffffff9, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) 1m33.14721711s ago: executing program 1 (id=7204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x7fff, 0x0, 0x4000000000000000, 0xffffffffffffff01, 0x0, 0x0, 0xdb}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181041, 0x0) fchown(r2, 0xee01, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) socket$inet6_udp(0xa, 0x2, 0x0) 1m30.898813654s ago: executing program 1 (id=7208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6a, 0xe8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) 1m28.9867482s ago: executing program 1 (id=7211): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000300)={{0xffffffffffffffff, 0x2, 0x3, 0x2, 0x1}, 0x2, 0xfffffff6, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x7, 0x9, 0x5}) mq_open(0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="da002100", @ANYRES16, @ANYBLOB="0002f7fffffffbdbdf25370000000c009900ffff000014000000050018012200000005001901040000000800a100080000000800a000f2030000080057000300000008005700b0080000"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) connect$pppl2tp(r0, 0x0, 0x0) 1m28.407193044s ago: executing program 1 (id=7216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x4000, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 1m25.809204396s ago: executing program 35 (id=7216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, 0x0, 0x0, 0x4000, 0x0, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') 21.800301043s ago: executing program 7 (id=7345): getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) prlimit64(0x0, 0x3, 0x0, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000a00)=""/102384, 0x18ff0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x64000) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) memfd_create(0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0xd34, 0xfffffffd}) 15.9725971s ago: executing program 7 (id=7353): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r7, &(0x7f0000000140)='./file0\x00') 15.953988948s ago: executing program 2 (id=7354): mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000500)={{0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0xffffffffffffd0c4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000001580)='asymmetric\x00', 0x0, &(0x7f0000000300), 0x0, 0x0) syz_emit_vhci(0x0, 0x13) syz_emit_vhci(0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private1, 0x8}, {0x2, 0x4e23, 0x1, @mcast2}, 0xffffffffffffffff, 0x7}}, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f0000000080)='\xe9`\xc7\xeb\b\xdckD\x8b\xec\xdf\xf9T\xcb\x96\xa5 \xf8c\x05\xe6\x1f\bw&w\xa7\xa1\xcbf\xaa\x12\a\x18\xb6\xfb\xf3\xa8\xeb\x804\x15\x93\xf2\xa8\xbcN\xda\xe5\x1dZV\x9c\xfa\xd8^@\v|S\xa5\x9b\xea\xf7R/}\xf5\xc1\xad^\x9f>5\xa3\x01\x01pf\x1d\x06\xad\xcd><1\x9eXG4,\xfe6\x04\xdc\xaa\x95:\x1fr`\xcf9\xf9\xef\xe6!\xa5\xd6E\xa0\xbac1\x1f\x02\xaf\x7f\xce\xa6\xa4\xcaV\x85\x17\xc7\xce\xca\xb0mT\xe7\xbf&^o\xe9\xd2\xf9W\xd9\xe5\xa8B`m\x8b\xde\xe0\x84\x94\xe7\xc8z2f\xd7\xfcm\xb8\b4\x19\x1d\xf4\\R`k\xd8\'', 0x0) fcntl$setpipe(r1, 0x407, 0x80019c) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000080)=[0x4, 0x10, 0x6, 0x0, 0xf, 0xffffdbae, 0x3, 0x7]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x422c80, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340), &(0x7f0000000400)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000280)={r6, 0x0, &(0x7f00000004c0)}) splice(r1, 0x0, r3, 0x0, 0x200002, 0x0) 13.775233915s ago: executing program 2 (id=7357): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r6, 0x0, 0x2, 0x0) r7 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, 0x0) 13.352597265s ago: executing program 7 (id=7358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x2) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x62040200) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r9, 0x0, 0x1, 0x0, 0x0) 13.103068575s ago: executing program 8 (id=7359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800008000000000000000000000008510000005000000850000000f0000007e00000000002a001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.038933483s ago: executing program 2 (id=7360): stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4607032005000000000000000002003e0000000000012a000038000000000000000f0000000000200001000400010000000000000003000000c0ffffff00000001010000090000100800"/88], 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0xfffffff7) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000443a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006098a300fe800000000000000000000000000000fc0100000000000000000000000000001100000000000000fafb17c103001c193eb4c625"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in=@broadcast, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0x13a) getgroups(0x4, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x5, 0xfffffffa, 0x4, {0x9, @pix_mp={0x5, 0x3, 0x6e066f2b, 0xc, 0xa, [{0x5, 0x80000000}, {0x3, 0xc}, {0x2, 0x4}, {0xb0, 0x10000}, {0x81, 0x5}, {0x4, 0x1}, {0xe5, 0x80000001}, {0x8, 0x9}], 0x2, 0x5, 0x3, 0x0, 0x2}}, 0x3}) 11.936428005s ago: executing program 6 (id=7362): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 11.851875277s ago: executing program 4 (id=7363): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b2319333260e10998974805be5cf48334ebe4dc734f89b56906187f8fa2e1a2a052d141634663115476a2838530b516be3249c93c1100a01c9a60e3d4dffdf2b93b3e8167fbf2fbd70df89b5ee5a972537", @ANYRES16=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44041) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000002140)=ANY=[]) r8 = getpgrp(0xffffffffffffffff) fcntl$setown(r7, 0x8, r8) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000011c0)={0x400, 0x300, 0x1e0, 0x290, 0x0, 0x0, 0x0, 0x1, {0x2, 0xfffffffc}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x9, 0xffffffbd}, {}, 0x3, 0x3f0, 0x0, 0x7, 0x0, 0x2, 0x1, 0x3, 0x761a, 0x0, 0x0, 0x0, 0x11, 0x1, 0x0, 0x1}) 10.762870658s ago: executing program 8 (id=7364): add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000002c0)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000780)={0x2, {{0xa, 0x4e22, 0x1, @mcast2}}}, 0x90) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="004100000000000004002b80"], 0x24}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f0000000240)="1a94b082dd7a8bf089512c94299c04262beca9b2ea2611a9b9402c945c7fdc3d942ba0316bf402a36c1a1c95e6e0c1fb21d524733b1dcb3bcf81efd3b253bd41ebea6f3133b6497692705d988841c333", 0x50, 0x0) 10.545118548s ago: executing program 6 (id=7365): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) write$binfmt_script(r4, 0x0, 0x0) recvmsg(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x9, 0x40400) syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b000"], 0x0) 10.403449051s ago: executing program 2 (id=7366): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20040400) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r7}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) connect$bt_l2cap(r3, &(0x7f0000000680)={0x1f, 0x20, @none, 0x0, 0x2}, 0xe) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x63) name_to_handle_at(r8, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_INO32_GEN={0x8, 0x1, {0x6, 0x7}}, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r9, 0x10e, 0xb, 0x0, &(0x7f0000001100)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x24, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x24}}, 0x0) 10.402908181s ago: executing program 4 (id=7367): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$vim2m(0x0, 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(0x0, 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x64) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x6000, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) 10.251112028s ago: executing program 8 (id=7368): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) semget$private(0x0, 0x3, 0x14) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgctl$IPC_RMID(0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r0, r6, 0x0, 0x2) 9.451709842s ago: executing program 4 (id=7369): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, &(0x7f0000003400)=[{0x0}], 0x1, 0x37, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x400}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000440)}, 0x80010000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\'\b', 0x28, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000000), 0x8080, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000d0918108ac051582588f0000000109022d00010000000009040020030b08000009058d67c8002a00000905050200000000000905"], 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 9.33105726s ago: executing program 2 (id=7370): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000007"], 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0x2) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 8.318410859s ago: executing program 8 (id=7371): syz_emit_ethernet(0x96, &(0x7f00000003c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x60, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "e516c5", 0x0, 0x0, 0x0, @dev, @private1, [@dstopts={0x2f, 0x4, '\x00', [@hao={0xc9, 0x10, @local}, @calipso={0x7, 0x8}, @enc_lim, @padn={0x1, 0x1, [0x0]}]}]}}}}}}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000480)={0x83, 0x29, 0x2, {0x4, [{{0x10, 0x4, 0x7}, 0xfffffffffffffff3, 0xd, 0x5, './bus'}, {{0x8, 0x0, 0x6}, 0x7c4, 0x5, 0x7, './file1'}, {{0x8, 0x2, 0x3}, 0x3, 0x0, 0x5, './bus'}, {{0x20, 0x3, 0x5}, 0x3, 0x6, 0x7, './file0'}]}}, 0x83) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x50ca, &(0x7f00000035c0)={0x0, 0x0, 0x200}, &(0x7f0000000180)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000600)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0) syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000200)="67f08197000000000080b8eb008ec866b9b102000066b8a2e0000066ba000000000f30b866008ec066b9800000c00f326635000800000f300f01c366b9be09000066b871dd000066ba000000000f300f0e0f3036f2e045", 0x57}], 0x1, 0x42, &(0x7f00000002c0)=[@flags={0x3, 0xc00}], 0x1) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) 7.872532359s ago: executing program 4 (id=7372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r9 = socket(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x7, {"a2e3ad21ed0d52f91b5d330987f70e06d038e7ff7fc6e5539b0d47078b089b3907346d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x104b}}, 0x1006) syz_io_uring_submit(r7, r8, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r9, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r6, 0x27e2, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, 0x0, 0x0) 6.844684696s ago: executing program 4 (id=7373): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xaf) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2b, 0x801, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x14, r5, 0xf3d, 0x70bd24, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x40c10) 6.77911183s ago: executing program 6 (id=7374): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x10, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000005c0)={[{@uuid_off}, {@metacopy_on}, {@uuid_off}, {@verity_on}, {@uuid_null}, {@userxattr}, {@volatile}, {@userxattr}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x20004004}, 0x24000804) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ip_tables_targets\x00') preadv(r6, &(0x7f0000001a40)=[{&(0x7f0000000680)=""/214, 0xd6}, {&(0x7f0000000500)=""/99, 0x63}, {&(0x7f0000000840)=""/253, 0xfd}, {&(0x7f0000000940)=""/74, 0x4a}, {&(0x7f00000009c0)=""/4082, 0xff2}, {&(0x7f00000019c0)=""/121, 0x79}, {&(0x7f0000000100)=""/59, 0x3b}], 0x7, 0x97, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000400)=""/109) 6.755578316s ago: executing program 8 (id=7375): socket$kcm(0x10, 0x2, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x6, &(0x7f0000000200)=[{0x2, 0x6, 0x4b, 0x8}, {0xea90, 0x3, 0x7e, 0x9}, {0xff, 0x9, 0x0, 0xcec}, {0xdb53, 0x9, 0x2, 0x800}, {0x7, 0x3, 0x3d, 0xfff}, {0x81, 0x1, 0x2}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4}}}}}]}}]}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x2e000000, 0x8, 0x200003, 0x2, 0x96]}, &(0x7f0000000180)=0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e400", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32], 0xe4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xf, 0x0, 0x0, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x0, 0x6}, [{0x1, 0x6, 0x8000000000000000, 0x10000, 0xffffffffffffffff, 0x6, 0x4, 0xe4}]}, 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 5.640440927s ago: executing program 6 (id=7376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40000, 0x132) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380), 0x648040, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x300a, 0x8}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = accept4$alg(r0, 0x0, 0x0, 0x80000) read$alg(r5, &(0x7f0000001540)=""/4131, 0x1023) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8c1f", 0x2}], 0x1, 0x0, 0x0, 0x4000011}, 0x894) 5.566132342s ago: executing program 4 (id=7377): stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4607032005000000000000000002003e0000000000012a000038000000000000000f0000000000200001000400010000000000000003000000c0ffffff00000001010000090000100800"/88], 0x31) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0xfffffff7) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000443a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006098a300fe800000000000000000000000000000fc0100000000000000000000000000001100000000000000fafb17c103001c193eb4c625"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in=@broadcast, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0x13a) getgroups(0x4, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f00000000c0)={0x5, 0xfffffffa, 0x4, {0x9, @pix_mp={0x5, 0x3, 0x6e066f2b, 0xc, 0xa, [{0x5, 0x80000000}, {0x3, 0xc}, {0x2, 0x4}, {0xb0, 0x10000}, {0x81, 0x5}, {0x4, 0x1}, {0xe5, 0x80000001}, {0x8, 0x9}], 0x2, 0x5, 0x3, 0x0, 0x2}}, 0x3}) 4.524773765s ago: executing program 6 (id=7378): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xee01}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r6, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 4.422180576s ago: executing program 7 (id=7379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005cc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0xc0844123, &(0x7f0000000000)=0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000180)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) pipe2$9p(&(0x7f0000000080), 0x4080) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x34, r10, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x25}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x34}}, 0x40020) 4.192421272s ago: executing program 8 (id=7380): stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4607032005000000000000000002003e0000000000012a000038000000000000000f0000000000200001000400010000000000000003000000c0ffffff00000001010000090000100800"/88], 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000180)=0xfffffff7) syz_emit_ethernet(0x7a, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000443a00fe880000000000000000000000000001ff02000000000000000000000000000102009078000000006098a300fe800000000000000000000000000000fc0100000000000000000000000000001100000000000000fafb17c103001c193eb4c625"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000780)={{{@in=@broadcast, @in6=@initdev}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000300)=0x13a) getgroups(0x4, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004001) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000000c0)={0x5, 0xfffffffa, 0x4, {0x9, @pix_mp={0x5, 0x3, 0x6e066f2b, 0xc, 0xa, [{0x5, 0x80000000}, {0x3, 0xc}, {0x2, 0x4}, {0xb0, 0x10000}, {0x81, 0x5}, {0x4, 0x1}, {0xe5, 0x80000001}, {0x8, 0x9}], 0x2, 0x5, 0x3, 0x0, 0x2}}, 0x3}) 2.610485906s ago: executing program 6 (id=7381): syz_emit_ethernet(0x6e, &(0x7f0000000300)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0xa2, 0x3, 0x9, [{@private=0xa010100, 0xff}, {@broadcast, 0x8000}, {@private=0xa010101, 0xffffffa0}, {@loopback, 0xd502}, {@local, 0x2}]}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x40) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40044160, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="090005000b000000"], 0x24}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6, 0x96, 0xa0, 0x10, 0x1943, 0x2257, 0x91ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x76, 0x54, 0xad}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x2c, 0x0, 0x410, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x24044080) 2.403234565s ago: executing program 7 (id=7382): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x4200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000440)={0x1, {0x0, 0x0, &(0x7f0000000040)=""/34, 0x3, 0x1}}, 0x48) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r5, &(0x7f0000003080)={0x2020}, 0xfffffda3) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x4040}], 0x1, 0x0, 0x0, 0x0) 1.223241ms ago: executing program 7 (id=7383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ppoll(0x0, 0x0, 0x0, &(0x7f0000001d40)={[0x2]}, 0x8) syz_emit_ethernet(0x51b, &(0x7f00000002c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4e5, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x4e5, 0x0, @gue={{0x2, 0x0, 0x0, 0x5}, "5c9259690b4327bb0caf762e6694c6fe829b5770e6935ad4f847223da7f8c0bf2b8fa95f32e617ba9ad8462b60cdb716a0df1691ae43ca709810c090f6386e546fc9e421044c05140bc063d1a4c2fb8e5827115ce0412b194c5b8351e12a2d80e194c8a6b7bba987dd1ba762a8de51477d241dec2295c156a6e886dbadab4c0e88c4a4f17a0b159d2e11b689d627828b76e9c716f46fc922027ee289b5967e82af96236227365d9493c3e8d6b85ae3ef55e773f43e2cd96a31f4cb8b7ee12717512459a59d762e75ce2fdd4c3d6e719ed2711a44b7640d7efa560a62722340d20d1c5a08a3113f8abbb06d32afb2c63d3a1c583554a38131da411a64b896d18a08026e9d95c8a2af372cc6689541e1e8f784f6f2ee35a89337c548688fdc1e261970c34300c53523c5182b019edc13aa97d1274e254d275897a8a20cdc6bc0c2000874f0283c51826ffb8b941e173d2a2ce5966c221545c91a789b5fef83bec8d70b7cf53681b8758ae550131a00c384d45302ae85c6f05662b0f4a6556ee8fe1a96129533efe7e72e640b852ff92d6c5500cabaafd6a6de37ada17a6702f975679d98e227d2e4916f99b2a8da7fffcd41f874b74594321505d0454871a01f082a2006cbfcc47e760e0abb1f0b3cc7974030f7ac816ee8c703375ee2474ad714b1eb8f87d3a16ec111420b9fa44c798ce66b76ebc85eb9a8f6117f03f7c8c1eda381143b24bc19f1e1fc43acc04238d5c85ebad3f46e90cd6ee937c7a942a072aa6ae9dabdb7caf80371eec69d774cd344140b4d9b0a9b61a227510b7c7fd8103927b4b6f7d92fc8b51b14490e0f796d7ebb7b8e5c2b43ac0cbadddae32c049abc864fa1af49d1517990a602f3b58241632e7c63889055b0bdad23f80bdac0ee137db234949c818a2ea8dc55740d8589de3028c1d8fd5f7ff7eef501bd9d4e9c353922ce06b4eab29e9b7e453c6290529c78fa782353eb31edf2ea94d20700e0610a9e2c72ee1c0f31ac32ee27c3e79d2d480c2860bd1a255f95e568ca584b4f5ce52272b8970c16d8b9c13509cad64efe780283f79dc3703ff3cbc03622cf29230ace9e2125f34d6bdee8375edab816d417755368fd274ae5ad88c28de75a8afa2103574923e35ffc4c3675351ae173e4c4aea13ecb35c54e0ed361eade4a5aef9e1dae5eda955711105901be42bc132d915c095a780a090acf7fcde0df9a8270ed581157ffdb7ad8d322731bc415fb1eb2783ed758dd0916c1f836df12dc9bb127727c28bdb41ac8e9aec2d51e8558c03accd882bbf51832d1b4b8c134cf8691522151fd297fcf7b83831318fbc77a81cca644e44b7e052a3afa6dc9fa2b685d196d30f9dcc976173d050494968bd43463b824f263457ebf2553885d10c101333fdd3f1848a449896a1a1562f7c4a04f279fd1485f7544c479332837023f3dec965b2956dc2f330af29ca64035f0102197c21332533bf81db02759d87de2e336dbe27117e6743655a0cd93fe557f9bbaf1ce85c632eae7975b2e7dbf0c2f935e744c8242ad8c47085aad78ad646a31c5658ae50d18828b69911451ca7f2f5f9542cd81c5736aec064e7c401018b563e02ac04d80e8cc4964109accb6bc37c066078c36f6a250e17b048896ad2be520b0bd740d86c41f57421af42a42ae2fbe8074f1c3b1b184ab33471ac3c83ba14e420de17e7c40d58c89595e66401d958301d16d558eb59df795d13ded234b3b8f97da7cf6c1"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) listen(r3, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg(r2, 0x0, 0x4041801) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) close(r5) accept4$tipc(r3, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=7384): r0 = creat(0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3f) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x4, 0x101801) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, 0x0) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) write$qrtrtun(r4, &(0x7f0000000000)='\x00', 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 [ 1519.222116][ T29] audit: type=1326 audit(1739908448.459:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1519.245858][ T29] audit: type=1326 audit(1739908448.459:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1519.273000][ T29] audit: type=1326 audit(1739908448.459:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1519.401747][T25345] /dev/nullb0: Can't lookup blockdev [ 1520.098146][ T29] audit: type=1326 audit(1739908448.469:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1520.495586][ T29] audit: type=1326 audit(1739908448.469:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1522.231093][T25367] »»»»»» speed is unknown, defaulting to 1000 [ 1522.239326][T25367] lo speed is unknown, defaulting to 1000 [ 1522.567900][ T29] audit: type=1326 audit(1739908448.469:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1522.592043][ T29] audit: type=1326 audit(1739908448.469:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1522.898279][ T29] audit: type=1326 audit(1739908448.525:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1522.930390][T19601] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1522.934990][ T29] audit: type=1326 audit(1739908448.525:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1523.002466][ T29] audit: type=1326 audit(1739908448.637:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25337 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2b041bf6a5 code=0x7ffc0000 [ 1523.043110][ T29] audit: type=1326 audit(1739908448.637:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1523.067265][ T29] audit: type=1326 audit(1739908448.637:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1523.100499][ T29] audit: type=1326 audit(1739908448.637:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1523.254206][ T29] audit: type=1326 audit(1739908448.637:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1523.293907][ T29] audit: type=1326 audit(1739908448.637:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25332 comm="syz.4.5872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0418cde9 code=0x7ffc0000 [ 1524.334707][T19601] usb 6-1: Using ep0 maxpacket: 32 [ 1524.843652][T19601] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.875910][T19601] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1525.908465][T19601] usb 6-1: string descriptor 0 read error: -71 [ 1525.915095][T19601] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1525.924191][T19601] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1525.934526][T19601] usb 6-1: can't set config #4, error -71 [ 1525.941477][T19601] usb 6-1: USB disconnect, device number 54 [ 1528.304766][T25413] CIFS mount error: No usable UNC path provided in device string! [ 1528.304766][T25413] [ 1528.320564][T25413] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1531.722701][T25446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1531.731844][T25446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5897'. [ 1532.385842][T25449] »»»»»» speed is unknown, defaulting to 1000 [ 1532.426594][T25449] lo speed is unknown, defaulting to 1000 [ 1532.979845][T25446] xt_policy: output policy not valid in PREROUTING and INPUT [ 1534.547280][T25462] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1534.782505][T25461] netlink: 'syz.1.5901': attribute type 1 has an invalid length. [ 1534.800887][T25461] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5901'. [ 1538.016372][T25490] ALSA: mixer_oss: invalid OSS volume '' [ 1538.109033][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 1538.109047][ T29] audit: type=1326 audit(1739908467.046:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25494 comm="syz.1.5910" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff301b8cde9 code=0x0 [ 1539.260056][T25506] tmpfs: Bad value for 'mpol' [ 1540.865346][T25522] xt_recent: Unsupported userspace flags (000000da) [ 1541.979305][T25528] input: syz0 as /devices/virtual/input/input92 [ 1543.474766][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1543.487783][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5918'. [ 1544.461051][T25540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5917'. [ 1545.606387][T25553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5921'. [ 1545.785931][T25553] team1: entered promiscuous mode [ 1545.817205][T25553] 8021q: adding VLAN 0 to HW filter on device team1 [ 1547.965465][ T29] audit: type=1400 audit(1739908476.241:1053): avc: denied { bind } for pid=25566 comm="syz.5.5926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1548.275933][ T29] audit: type=1400 audit(1739908476.241:1054): avc: denied { write } for pid=25566 comm="syz.5.5926" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1548.756977][T25583] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5927'. [ 1549.916209][ T29] audit: type=1400 audit(1739908478.083:1055): avc: denied { read } for pid=25589 comm="syz.6.5930" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1550.561845][T25593] sp0: Synchronizing with TNC [ 1551.057264][ T29] audit: type=1400 audit(1739908478.093:1056): avc: denied { open } for pid=25589 comm="syz.6.5930" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1551.338214][ T29] audit: type=1400 audit(1739908478.093:1057): avc: denied { ioctl } for pid=25589 comm="syz.6.5930" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1554.311010][T25612] veth0_to_team: entered promiscuous mode [ 1554.316767][T25612] veth0_to_team: entered allmulticast mode [ 1555.776213][T25627] hub 6-0:1.0: USB hub found [ 1555.783000][T25627] hub 6-0:1.0: 1 port detected [ 1556.694617][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5939'. [ 1556.704012][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5939'. [ 1556.951834][T25641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1557.166940][ T29] audit: type=1400 audit(1739908484.865:1058): avc: denied { read } for pid=25642 comm="syz.5.5944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1559.816182][T25660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5948'. [ 1560.126501][T25669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5950'. [ 1560.307262][T25675] »»»»»» speed is unknown, defaulting to 1000 [ 1560.314947][T25675] lo speed is unknown, defaulting to 1000 [ 1561.304885][T25676] »»»»»» speed is unknown, defaulting to 1000 [ 1561.388599][T25676] lo speed is unknown, defaulting to 1000 [ 1561.963968][T19608] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1562.177357][T19608] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1562.185633][T19608] usb 6-1: config 0 has no interface number 0 [ 1562.372874][T19608] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1562.473897][T19608] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1562.510758][T19608] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1562.535719][T19608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.544084][T19608] usb 6-1: Product: syz [ 1562.548434][T19608] usb 6-1: Manufacturer: syz [ 1562.568699][T19608] usb 6-1: SerialNumber: syz [ 1562.592100][T19608] usb 6-1: config 0 descriptor?? [ 1562.613370][T25673] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1562.704767][T19608] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1562.761698][T19608] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1563.141009][T19597] IPVS: starting estimator thread 0... [ 1563.239992][T25703] pim6reg: entered allmulticast mode [ 1563.426557][T25702] IPVS: using max 25 ests per chain, 60000 per kthread [ 1564.010612][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5956'. [ 1564.052293][T25704] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.062036][T25704] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.071022][T25704] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.079808][T25704] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1564.103896][T25704] vxlan0: entered promiscuous mode [ 1564.109259][T25704] vxlan0: entered allmulticast mode [ 1565.392778][T19608] usb 6-1: USB disconnect, device number 55 [ 1565.418533][T19608] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1565.442704][T19608] cyberjack 6-1:0.69: device disconnected [ 1566.653475][T25727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1566.662621][T25727] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1566.671740][T25727] netlink: 'syz.4.5960': attribute type 5 has an invalid length. [ 1566.679664][T25727] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5960'. [ 1567.050841][ T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1567.627254][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5961'. [ 1568.718375][T25748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1569.403875][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1572.079777][T19608] libceph: connect (1)[c::]:6789 error -13 [ 1572.433281][T25769] ceph: No mds server is up or the cluster is laggy [ 1572.449505][T19608] libceph: mon0 (1)[c::]:6789 connect error [ 1572.818038][T25779] overlayfs: failed to clone upperpath [ 1577.160724][ T29] audit: type=1400 audit(1739908503.564:1059): avc: denied { create } for pid=25805 comm="syz.2.5978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1577.277871][T25811] netlink: 'syz.6.5977': attribute type 10 has an invalid length. [ 1578.942590][ T29] audit: type=1400 audit(1739908505.247:1060): avc: denied { append } for pid=25814 comm="syz.5.5980" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1580.125008][T19597] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1584.858577][ T29] audit: type=1400 audit(1739908509.906:1061): avc: denied { listen } for pid=25862 comm="syz.1.5991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1586.173930][ T29] audit: type=1326 audit(1739908509.915:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25862 comm="syz.1.5991" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff301b8cde9 code=0x0 [ 1586.493638][ T29] audit: type=1400 audit(1739908510.888:1063): avc: denied { listen } for pid=25878 comm="syz.2.5994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1586.545617][ T29] audit: type=1400 audit(1739908510.888:1064): avc: denied { ioctl } for pid=25878 comm="syz.2.5994" path="socket:[77003]" dev="sockfs" ino=77003 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1587.621703][T21311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1593.745182][T21311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1595.921082][T25984] bpf: Bad value for 'gid' [ 1596.313669][T25989] »»»»»» speed is unknown, defaulting to 1000 [ 1596.321495][T25989] lo speed is unknown, defaulting to 1000 [ 1599.540642][T26012] netlink: 'syz.1.6021': attribute type 4 has an invalid length. [ 1599.701030][ T29] audit: type=1400 audit(1739908523.806:1065): avc: denied { map } for pid=26001 comm="syz.5.6020" path="socket:[77260]" dev="sockfs" ino=77260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1600.119852][ T7285] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1602.039894][T26037] SELinux: syz.6.6026 (26037) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1603.205474][T26050] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6028'. [ 1603.215973][T26049] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6028'. [ 1603.633970][T26048] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1603.668298][T26048] overlay: ./file1 is not a directory [ 1603.943771][ T29] audit: type=1400 audit(1739908528.614:1066): avc: denied { write } for pid=26057 comm="syz.5.6032" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1604.594983][T26063] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1604.645730][ T29] audit: type=1400 audit(1739908528.614:1067): avc: denied { ioctl } for pid=26057 comm="syz.5.6032" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1604.775086][T26060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6033'. [ 1605.028361][ T29] audit: type=1400 audit(1739908529.633:1068): avc: denied { write } for pid=26057 comm="syz.5.6032" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1605.135378][T19608] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1605.305276][T26073] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1605.314782][T26073] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1605.559297][T19608] usb 7-1: Using ep0 maxpacket: 8 [ 1605.574668][T19608] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1605.601878][T19608] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1605.613730][T19608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1605.632588][T19608] usb 7-1: Product: syz [ 1605.643503][T19608] usb 7-1: Manufacturer: syz [ 1605.648454][T19608] usb 7-1: SerialNumber: syz [ 1606.053362][T21311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.655995][T26083] gfs2: not a GFS2 filesystem [ 1607.875963][T26093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1607.900228][T26093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.603811][T19608] usb 7-1: USB disconnect, device number 11 [ 1609.177854][T26108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.190916][T26108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.929388][T26112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1610.011548][ T29] audit: type=1326 audit(1739908533.768:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26105 comm="syz.1.6042" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff301b8cde9 code=0x0 [ 1611.181282][T26122] can0: slcan on ttyS3. [ 1611.652119][T26127] blktrace: Concurrent blktraces are not allowed on loop12 [ 1611.652509][T26122] can0 (unregistered): slcan off ttyS3. [ 1612.369150][T19608] libceph: connect (1)[c::]:6789 error -101 [ 1612.380144][T19608] libceph: mon0 (1)[c::]:6789 connect error [ 1612.408121][T26130] ceph: No mds server is up or the cluster is laggy [ 1612.895740][T21310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1615.565140][T26165] netlink: 'syz.5.6053': attribute type 1 has an invalid length. [ 1616.169453][T26165] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6053'. [ 1616.524842][T26176] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6055'. [ 1619.051054][T21312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1619.209890][ T9] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1619.986116][ T9] usb 7-1: unable to get BOS descriptor set [ 1620.321876][ T9] usb 7-1: config 1 interface 0 altsetting 129 endpoint 0x1 is Bulk; changing to Interrupt [ 1620.343064][ T9] usb 7-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.382084][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1620.414273][ T9] usb 7-1: string descriptor 0 read error: -22 [ 1620.443121][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1620.501316][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.537652][ T9] usb 7-1: can't set config #1, error -71 [ 1620.609729][ T9] usb 7-1: USB disconnect, device number 12 [ 1620.820528][T26214] overlayfs: failed to clone upperpath [ 1621.435090][T19608] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1622.699135][T26229] IPVS: set_ctl: invalid protocol: 244 224.0.0.2:20000 [ 1622.709492][ T29] audit: type=1400 audit(1739908546.180:1070): avc: denied { setopt } for pid=26224 comm="syz.4.6068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1623.314670][T19608] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1623.411274][T19608] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1623.486476][T19608] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1623.495947][T19608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1623.531651][T26213] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1623.543339][T19608] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1623.780956][T26242] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1623.789375][T26242] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1623.797962][T26242] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1624.791521][T19608] usb 2-1: USB disconnect, device number 52 [ 1625.144747][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1625.378895][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6074'. [ 1625.702694][T21314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1625.784827][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1625.944626][ T9] usb 6-1: config 1 has an invalid interface number: 118 but max is 0 [ 1625.979285][ T9] usb 6-1: config 1 has no interface number 0 [ 1626.020584][ T9] usb 6-1: config 1 interface 118 has no altsetting 0 [ 1626.057147][ T9] usb 6-1: string descriptor 0 read error: -71 [ 1626.063527][ T29] audit: type=1400 audit(1739908549.314:1071): avc: denied { setopt } for pid=26252 comm="syz.1.6073" laddr=::ffff:172.20.20.187 lport=34155 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1626.111393][ T9] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 1626.177491][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.219379][ T9] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1626.228354][ T9] usb 6-1: no configuration chosen from 1 choice [ 1626.255333][ T9] usb 6-1: USB disconnect, device number 56 [ 1627.142061][T26279] /dev/nullb0: Can't lookup blockdev [ 1627.996656][T26278] »»»»»» speed is unknown, defaulting to 1000 [ 1628.011445][T26278] lo speed is unknown, defaulting to 1000 [ 1629.620697][T19612] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1630.264111][T26288] Can't find ip_set type has [ 1630.371009][T19612] usb 7-1: Using ep0 maxpacket: 8 [ 1630.401955][T19612] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1630.432278][T19612] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1630.458197][T19612] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1630.476148][T19612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.489591][T19612] usb 7-1: Product: syz [ 1630.493767][T19612] usb 7-1: Manufacturer: syz [ 1630.501899][T19612] usb 7-1: SerialNumber: syz [ 1630.520216][T19612] cdc_ether 7-1:1.0: invalid descriptor buffer length [ 1630.528527][T19612] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1631.079477][T26308] siw: device registration error -23 [ 1631.745226][T19612] usb 7-1: USB disconnect, device number 13 [ 1632.660588][T26322] veth0_vlan: entered allmulticast mode [ 1632.921469][ T3516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1633.098344][T26322] veth0_vlan: left promiscuous mode [ 1633.104302][T26322] veth0_vlan: entered promiscuous mode [ 1634.832510][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1636.698363][T26331] veth1_macvtap: left promiscuous mode [ 1636.703955][T26331] macsec0: entered promiscuous mode [ 1638.196403][ T29] audit: type=1400 audit(1739908560.109:1072): avc: denied { connect } for pid=26348 comm="syz.5.6101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1638.306817][T26361] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1638.379629][T21295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1638.532336][T19612] libceph: connect (1)[c::]:6789 error -101 [ 1638.564221][T26374] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26374 comm=syz.1.6107 [ 1638.665474][T19612] libceph: mon0 (1)[c::]:6789 connect error [ 1638.770854][T26364] ceph: No mds server is up or the cluster is laggy [ 1639.115532][T26382] overlayfs: failed to resolve './file0': -2 [ 1639.794266][ T5822] Bluetooth: hci4: unexpected event for opcode 0x200b [ 1640.150032][T26403] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26403 comm=syz.1.6120 [ 1644.722583][ T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1644.887762][T26454] ip6tnl1: entered allmulticast mode [ 1645.188218][T19612] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1645.254918][T26464] XFS (nullb0): no-recovery mounts must be read-only. [ 1645.481118][T19612] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1645.501069][T19612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.511669][T19612] usb 2-1: Product: syz [ 1645.515848][T19612] usb 2-1: Manufacturer: syz [ 1645.531378][T19612] usb 2-1: SerialNumber: syz [ 1645.540071][T19612] usb 2-1: config 0 descriptor?? [ 1645.547850][T19612] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1646.062847][T26481] netlink: 'syz.4.6142': attribute type 21 has an invalid length. [ 1646.073954][T26481] netlink: 'syz.4.6142': attribute type 6 has an invalid length. [ 1646.075521][T19612] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1646.082623][T26481] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6142'. [ 1646.128907][T19612] sq905c 2-1:0.0: Get version command failed [ 1646.146269][T19612] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1646.170848][T19612] usb 2-1: USB disconnect, device number 53 [ 1646.777761][T26500] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1647.727665][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1648.522664][T26511] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 1648.522664][T26511] program syz.1.6157 not setting count and/or reply_len properly [ 1649.443737][T19601] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1649.761423][T19601] usb 2-1: Using ep0 maxpacket: 32 [ 1649.772195][T19601] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1649.805082][T19601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.860779][T19601] usb 2-1: config 0 descriptor?? [ 1649.948645][T26540] IPVS: Error connecting to the multicast addr [ 1650.427465][ T29] audit: type=1400 audit(1739908572.110:1073): avc: denied { shutdown } for pid=26510 comm="syz.1.6157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1650.494199][T19601] usb 2-1: string descriptor 0 read error: -71 [ 1650.524322][T21312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1650.529632][T19601] usb 2-1: selecting invalid altsetting 3 [ 1650.552125][T19601] comedi comedi0: could not set alternate setting 3 in high speed [ 1650.560254][ T29] audit: type=1400 audit(1739908572.222:1074): avc: denied { accept } for pid=26544 comm="syz.6.6171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1650.563387][T19601] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1650.805781][T19601] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1650.827663][T19601] usb 2-1: USB disconnect, device number 54 [ 1651.001779][T26552] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6172'. [ 1651.012917][T26551] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6172'. [ 1651.185589][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1651.678688][T26564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1651.700857][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1651.708697][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.835714][T26570] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26570 comm=syz.6.6182 [ 1651.950322][T26574] geneve2: entered promiscuous mode [ 1652.115837][T26580] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 1652.387679][ T29] audit: type=1400 audit(1739908573.943:1075): avc: denied { getopt } for pid=26586 comm="syz.2.6188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1652.575445][T19612] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1652.722692][ T29] audit: type=1326 audit(1739908574.233:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.747340][ T29] audit: type=1326 audit(1739908574.233:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.771122][T19612] usb 7-1: Using ep0 maxpacket: 8 [ 1652.776362][ T29] audit: type=1326 audit(1739908574.233:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.801294][ T29] audit: type=1326 audit(1739908574.233:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.948159][ T29] audit: type=1326 audit(1739908574.233:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.972502][ T29] audit: type=1326 audit(1739908574.233:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1652.997731][T19612] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1653.014719][T19612] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1653.017485][ T29] audit: type=1326 audit(1739908574.233:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26567 comm="syz.5.6179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9657b8cde9 code=0x7fc00000 [ 1653.045767][T19612] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.164890][T19612] usb 7-1: config 0 descriptor?? [ 1653.618006][T19612] usbhid 7-1:0.0: can't add hid device: -71 [ 1653.642963][T19612] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1653.680199][T19612] usb 7-1: USB disconnect, device number 14 [ 1653.978947][T26614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6200'. [ 1653.995135][T26614] netlink: get zone limit has 8 unknown bytes [ 1654.069975][T26616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6203'. [ 1656.266318][T21311] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1656.541567][T26673] bond0: Error: Cannot enslave bond to itself. [ 1656.795916][T26691] xt_hashlimit: max too large, truncated to 1048576 [ 1656.803245][T19601] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1656.854021][T26691] No such timeout policy "syz1" [ 1656.869528][T26697] openvswitch: netlink: IP tunnel dst address not specified [ 1656.958035][T26701] bridge8: entered promiscuous mode [ 1656.963426][T26701] bridge8: entered allmulticast mode [ 1657.000630][T26701] team0: Port device bridge8 added [ 1657.004711][T19601] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1657.016002][T19601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.033702][T19601] usb 2-1: Product: syz [ 1657.057836][T19601] usb 2-1: Manufacturer: syz [ 1657.073502][T19601] usb 2-1: SerialNumber: syz [ 1657.100734][T19601] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1657.126033][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1657.189956][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 1657.189972][ T29] audit: type=1400 audit(1739908578.433:1143): avc: denied { getopt } for pid=26712 comm="syz.4.6243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1657.610883][T19608] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1657.632996][T19601] usb 2-1: USB disconnect, device number 55 [ 1657.781827][T19608] usb 6-1: Using ep0 maxpacket: 32 [ 1657.790278][T19608] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1657.813760][T19608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.839640][T19608] usb 6-1: config 0 descriptor?? [ 1658.221016][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1658.228003][ T9] ath9k_htc: Failed to initialize the device [ 1658.244115][T19601] usb 2-1: ath9k_htc: USB layer deinitialized [ 1658.419702][T26757] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6263'. [ 1658.430762][T26755] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6263'. [ 1658.688643][T19608] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 1658.768867][T19608] aquacomputer_d5next 0003:0C70:F0B6.0018: unknown main item tag 0x0 [ 1658.793084][T19608] aquacomputer_d5next 0003:0C70:F0B6.0018: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.5-1/input0 [ 1658.891563][T19608] usb 6-1: USB disconnect, device number 57 [ 1659.180614][ T5822] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1660.465042][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1660.641717][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1660.651608][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1660.686393][ T9] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1660.710133][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1660.712075][T19608] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1660.751886][ T9] usb 2-1: config 0 descriptor?? [ 1661.025225][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1661.033544][T19608] usb 6-1: Using ep0 maxpacket: 8 [ 1661.053173][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1661.092756][ T9] usb 2-1: USB disconnect, device number 56 [ 1661.671959][T19608] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1661.709421][T19608] usb 6-1: config 0 has no interface number 0 [ 1661.744040][T19608] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1661.778832][T19608] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1661.797529][T19608] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1661.809858][T19608] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1661.824477][T19608] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1661.855636][T19608] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1661.939424][T19608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.957311][T19608] usb 6-1: config 0 descriptor?? [ 1661.966006][T26846] netlink: 'syz.6.6302': attribute type 1 has an invalid length. [ 1661.980253][T26846] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6302'. [ 1661.995712][T19608] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1662.138586][T26857] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1662.153159][T26857] cramfs: wrong magic [ 1662.159983][T21312] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1662.269765][T26810] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 1662.289732][T19608] usb 6-1: USB disconnect, device number 58 [ 1662.306970][T19608] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1662.518006][T26877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1663.965870][T26890] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1663.978857][T26884] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1664.844358][T24744] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1665.021248][T24744] usb 2-1: Using ep0 maxpacket: 16 [ 1665.028216][T24744] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.045206][T24744] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1665.059756][T24744] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1665.075797][T24744] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.087720][T24744] usb 2-1: config 0 descriptor?? [ 1665.158219][T19608] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1665.318885][T19608] usb 7-1: Using ep0 maxpacket: 16 [ 1665.330497][T19608] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1665.339466][T19608] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.357116][T19608] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1665.369850][T19608] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1665.380642][T19608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.389172][T19608] usb 7-1: Product: syz [ 1665.404152][T19608] usb 7-1: Manufacturer: syz [ 1665.414768][T19608] usb 7-1: SerialNumber: syz [ 1665.540770][T24744] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0019/input/input94 [ 1665.623592][T24744] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1665.669069][T19608] usb 7-1: 0:2 : does not exist [ 1665.757199][T19608] usb 7-1: USB disconnect, device number 15 [ 1665.765865][ T9] usb 2-1: USB disconnect, device number 57 [ 1666.152708][T26457] udevd[26457]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1666.973723][T26969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26969 comm=syz.2.6353 [ 1667.061762][T19608] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1667.135924][T24744] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1667.316849][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6357'. [ 1667.340561][T19608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.352174][T19608] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.362205][T19608] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1667.375903][T19608] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1667.385722][T19608] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.414177][T24744] usb 7-1: Using ep0 maxpacket: 32 [ 1667.421886][T19608] usb 6-1: config 0 descriptor?? [ 1667.482346][T26987] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1667.525428][T24744] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1667.852718][T24744] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1667.864244][T24744] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1667.880197][T24744] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1667.891308][T24744] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1667.900009][T24744] usb 7-1: Product: syz [ 1667.904223][T24744] usb 7-1: Manufacturer: syz [ 1667.909381][T24744] usb 7-1: SerialNumber: syz [ 1667.931368][T24744] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input95 [ 1668.135273][T19608] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x3 [ 1668.144085][T19608] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 1668.179396][T19608] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1668.267272][ C1] appletouch 7-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1668.289287][ T9] usb 7-1: USB disconnect, device number 16 [ 1668.325801][T21310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1668.339480][ T9] appletouch 7-1:1.0: input: appletouch disconnected [ 1668.382776][T19608] usb 6-1: USB disconnect, device number 59 [ 1669.031827][T27018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1669.069624][T27020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27020 comm=syz.4.6374 [ 1669.199853][ T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1669.244046][T27031] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1669.314004][T27033] input: syz0 as /devices/virtual/input/input96 [ 1669.371031][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1669.377691][ T9] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1669.404762][ T9] usb 7-1: config 0 has no interface number 0 [ 1669.434165][ T9] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1669.460647][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1669.489041][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.507887][ T9] usb 7-1: Product: syz [ 1669.516996][ T9] usb 7-1: Manufacturer: syz [ 1669.531183][ T9] usb 7-1: SerialNumber: syz [ 1669.539743][ T9] usb 7-1: config 0 descriptor?? [ 1669.568687][ T9] smsc75xx v1.0.0 [ 1669.948105][T19601] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1670.140474][T19601] usb 2-1: Using ep0 maxpacket: 16 [ 1670.147258][T19601] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.158707][T19601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1670.171394][T19601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1670.182039][T19601] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1670.192376][T19601] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1670.215318][T19601] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1670.230936][T19601] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1670.239512][T19601] usb 2-1: Manufacturer: syz [ 1670.246272][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1670.260664][T19601] usb 2-1: config 0 descriptor?? [ 1670.267125][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1670.280163][ T9] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1670.292563][ T9] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1670.310486][ T9] usb 7-1: USB disconnect, device number 17 [ 1670.486456][T27055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1670.497823][T27055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1670.557491][T19601] rc_core: IR keymap rc-hauppauge not found [ 1670.563435][T19601] Registered IR keymap rc-empty [ 1670.571054][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.599688][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.621908][T19601] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1670.637380][T19601] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input97 [ 1670.659614][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.685994][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.717845][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.750687][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.771378][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.803549][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.834885][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.856361][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.872526][T27091] netlink: 'syz.2.6404': attribute type 11 has an invalid length. [ 1670.888986][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.910278][T19601] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1670.954520][T19601] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1670.970460][T19601] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1671.004674][T19601] usb 2-1: USB disconnect, device number 58 [ 1671.422846][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1671.583187][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1671.589672][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1671.599311][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.609341][ T9] usb 7-1: config 0 descriptor?? [ 1671.855460][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1672.834487][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1672.844532][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1672.892644][T27133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6423'. [ 1672.901754][ T9] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1672.919966][ T9] usb 7-1: USB disconnect, device number 18 [ 1673.112920][T27139] »»»»»» speed is unknown, defaulting to 1000 [ 1673.147082][T27139] lo speed is unknown, defaulting to 1000 [ 1673.786477][T21310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1673.976808][T27149] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1675.030051][T27198] 9pnet_fd: Insufficient options for proto=fd [ 1675.717555][T27206] gretap0: entered promiscuous mode [ 1675.734110][T27203] gretap0: left promiscuous mode [ 1676.287120][T19608] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1676.447462][T19608] usb 7-1: Using ep0 maxpacket: 8 [ 1676.474166][T19608] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1676.495037][T19608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.517852][T19608] usb 7-1: Product: syz [ 1676.522126][T19608] usb 7-1: Manufacturer: syz [ 1676.560337][T19608] usb 7-1: SerialNumber: syz [ 1676.573136][T27254] input: syz0 as /devices/virtual/input/input98 [ 1676.587316][T19608] usb 7-1: config 0 descriptor?? [ 1676.615392][T19608] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1677.270739][T19608] gspca_sonixj: reg_w1 err -71 [ 1677.330974][T19608] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1677.394847][T19608] usb 7-1: USB disconnect, device number 19 [ 1677.519711][T27273] rdma_rxe: rxe_newlink: failed to add lo [ 1677.536473][T27273] »»»»»»: renamed from lo [ 1677.934080][T19601] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1677.988891][ T29] audit: type=1400 audit(1739908597.899:1144): avc: denied { read } for pid=27293 comm="syz.6.6495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1678.105212][T19601] usb 6-1: Using ep0 maxpacket: 8 [ 1678.117060][T19601] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 1678.127295][T19601] usb 6-1: config 150 has no interface number 0 [ 1678.136028][T19601] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1678.159828][T19601] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1678.174640][T19601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.187683][T19601] usb 6-1: Product: syz [ 1678.197884][T19601] usb 6-1: Manufacturer: syz [ 1678.206192][T19601] usb 6-1: SerialNumber: syz [ 1678.441321][T19601] xr_serial 6-1:150.204: xr_serial converter detected [ 1679.479285][T19601] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 1679.485726][T19601] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1679.507754][T19601] usb 6-1: USB disconnect, device number 60 [ 1679.514585][T19601] xr_serial 6-1:150.204: device disconnected [ 1679.949982][T21310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.261234][T27342] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27342 comm=syz.6.6514 [ 1683.306245][T27430] input: syz1 as /devices/virtual/input/input99 [ 1684.176271][T27442] »»»»»» speed is unknown, defaulting to 1000 [ 1684.286360][T27442] lo speed is unknown, defaulting to 1000 [ 1684.698868][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6558'. [ 1685.418813][T21314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1685.527957][T27468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1685.603845][T27470] hsr_slave_0: left promiscuous mode [ 1685.649185][T27470] hsr_slave_1: left promiscuous mode [ 1685.690723][ T29] audit: type=1400 audit(1739908605.101:1145): avc: denied { read } for pid=27473 comm="syz.2.6569" lport=53551 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1685.964107][T27477] input: syz1 as /devices/virtual/input/input100 [ 1687.195323][T27499] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27499 comm=syz.4.6578 [ 1687.625563][T27519] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1689.850403][T27580] syzkaller1: entered promiscuous mode [ 1689.859174][T27580] syzkaller1: entered allmulticast mode [ 1690.003845][T19601] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1690.175128][T19601] usb 6-1: Using ep0 maxpacket: 8 [ 1690.186563][T19601] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1690.297084][T19601] usb 6-1: config 179 has no interface number 0 [ 1690.418618][T19601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1690.522345][T19601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1690.538894][T19601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1690.556031][T19601] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1690.583861][T19601] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1690.610605][T19601] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1690.622938][T19601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.650230][T27567] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1691.124836][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1691.124845][T19608] usb 6-1: USB disconnect, device number 61 [ 1691.147082][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1691.599131][ T74] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1691.948984][T19608] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1692.142775][T19608] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1692.161633][T19608] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 1692.203990][T19608] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1692.217392][T19608] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 144, setting to 64 [ 1692.236132][T19608] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1692.269892][T19608] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 1692.279639][T19608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.288464][T19608] usb 7-1: Product: syz [ 1692.293120][T19608] usb 7-1: Manufacturer: syz [ 1692.297826][T19608] usb 7-1: SerialNumber: syz [ 1692.311578][T19608] usb 7-1: config 0 descriptor?? [ 1692.320589][T27603] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1692.350187][T19608] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input101 [ 1692.628092][T19608] imon:send_packet: packet tx failed (-71) [ 1692.667982][T19608] imon 7-1:0.0: panel buttons/knobs setup failed [ 1692.825566][T19608] rc_core: IR keymap rc-imon-pad not found [ 1692.827031][T19601] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1692.850308][T19608] Registered IR keymap rc-empty [ 1692.866434][T19608] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1692.885185][T19608] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1692.923008][T19608] imon:send_packet: packet tx failed (-71) [ 1692.943196][T19608] imon 7-1:0.0: remote input dev register failed [ 1692.950046][T19608] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 1693.011446][T19608] imon 7-1:0.0: unable to initialize intf0, err 0 [ 1693.019780][T19608] imon:imon_probe: failed to initialize context! [ 1693.026194][T19608] imon 7-1:0.0: unable to register, err -19 [ 1693.031658][T19601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1693.041376][T19608] usb 7-1: USB disconnect, device number 20 [ 1693.059232][T19601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.072699][T19601] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1693.090014][T19601] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1693.098462][T19601] usb 2-1: Manufacturer: syz [ 1693.203500][T19601] usb 2-1: config 0 descriptor?? [ 1694.067352][ T29] audit: type=1326 audit(1739908612.940:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27664 comm="syz.2.6637" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x0 [ 1694.469293][T19601] cougar 0003:060B:700A.001B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 1694.653823][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1694.774884][T19612] usb 2-1: USB disconnect, device number 59 [ 1694.816542][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1694.837501][ T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1694.849073][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.850452][T27703] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6649'. [ 1694.868441][ T9] usb 6-1: Product: syz [ 1694.872747][ T9] usb 6-1: Manufacturer: syz [ 1694.885280][ T9] usb 6-1: SerialNumber: syz [ 1694.905757][ T9] usb 6-1: config 0 descriptor?? [ 1694.928452][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1695.143362][ T9] gp8psk: usb in 128 operation failed. [ 1695.162154][ T9] gp8psk: usb in 137 operation failed. [ 1695.178228][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1695.193385][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1695.220780][ T9] usb 6-1: media controller created [ 1695.243508][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1695.295222][ T9] gp8psk_fe: Frontend revision 1 attached [ 1695.301376][ T9] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1695.320537][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1695.541958][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1695.575510][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 1695.869433][ T9] usb 6-1: USB disconnect, device number 62 [ 1695.989368][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1696.034647][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1696.384806][ T29] audit: type=1400 audit(1739908615.101:1147): avc: denied { read } for pid=27767 comm="syz.6.6673" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1696.417586][ T29] audit: type=1400 audit(1739908615.101:1148): avc: denied { open } for pid=27767 comm="syz.6.6673" path="/352/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1696.469781][ T29] audit: type=1400 audit(1739908615.176:1149): avc: denied { write } for pid=27774 comm="syz.1.6676" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1696.725139][T27790] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27790 comm=syz.2.6684 [ 1696.766379][ T29] audit: type=1400 audit(1739908615.456:1150): avc: denied { accept } for pid=27791 comm="syz.6.6683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1697.733963][T21310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1698.270836][T27838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6703'. [ 1698.731409][T27855] ptrace attach of "./syz-executor exec"[20867] was attempted by "./syz-executor exec"[27855] [ 1700.337363][T27888] overlayfs: failed to clone lowerpath [ 1700.345610][T27888] overlayfs: failed to clone lowerpath [ 1700.351728][T19612] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1700.426006][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6721'. [ 1700.472157][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1700.526655][T19612] usb 2-1: Using ep0 maxpacket: 8 [ 1700.555904][T19612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.580538][T19612] usb 2-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1700.592781][T19612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.602260][ T5817] block nbd5: Receive control failed (result -107) [ 1700.614605][T19612] usb 2-1: config 0 descriptor?? [ 1700.704978][T27897] nbd5: detected capacity change from 0 to 67108884 [ 1700.716945][T27568] block nbd5: Dead connection, failed to find a fallback [ 1700.731009][T27568] block nbd5: shutting down sockets [ 1700.736235][T27568] blk_print_req_error: 178 callbacks suppressed [ 1700.736243][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.755704][T27568] buffer_io_error: 138 callbacks suppressed [ 1700.755746][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.776885][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.788919][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.805030][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.832566][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.862434][T19612] usbhid 2-1:0.0: can't add hid device: -71 [ 1700.873487][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.882901][T19612] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1700.891353][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.911861][T19612] usb 2-1: USB disconnect, device number 60 [ 1700.923268][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.948924][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.958334][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.967607][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.978197][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1700.988589][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1700.999394][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.010232][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1701.019184][T27568] ldm_validate_partition_table(): Disk read failed. [ 1701.026272][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.035418][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1701.044331][T27568] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1701.053517][T27568] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1701.072012][T27568] Dev nbd5: unable to read RDB block 0 [ 1701.078307][T27568] nbd5: unable to read partition table [ 1701.105312][T27897] ldm_validate_partition_table(): Disk read failed. [ 1701.127874][T27897] Dev nbd5: unable to read RDB block 0 [ 1701.149664][T27897] nbd5: unable to read partition table [ 1701.157611][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1701.168125][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1701.180456][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1701.186911][T27568] ldm_validate_partition_table(): Disk read failed. [ 1701.196646][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1701.213877][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1701.216094][T27568] Dev nbd5: unable to read RDB block 0 [ 1701.234996][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1701.242050][T27568] nbd5: unable to read partition table [ 1701.249201][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1701.273657][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1701.293017][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1701.304299][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1701.315107][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1701.335992][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1701.346651][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1701.356245][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1701.370522][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1701.381811][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1701.394552][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1701.435671][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1701.452862][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1701.479653][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1701.494237][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1701.523557][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1701.540978][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1701.553963][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1701.584599][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1701.595254][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1701.607151][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1701.618480][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1701.635469][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1701.674282][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1701.694033][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1701.708756][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1701.721315][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1701.733941][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1701.769169][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1701.780197][T19597] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1701.799077][T27897] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1701.809254][T27897] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1701.969453][T19597] usb 7-1: Using ep0 maxpacket: 32 [ 1701.977909][T19597] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1701.986093][T19597] usb 7-1: config 0 has no interface number 0 [ 1702.008563][T19597] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1702.025716][T19597] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1702.041609][T19597] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.049692][T19597] usb 7-1: Product: syz [ 1702.059784][T19597] usb 7-1: Manufacturer: syz [ 1702.067047][T19597] usb 7-1: SerialNumber: syz [ 1702.080726][T19597] usb 7-1: config 0 descriptor?? [ 1702.089075][T19597] smsc75xx v1.0.0 [ 1703.163478][T27964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6752'. [ 1703.233292][T21295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.997293][T19612] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1704.116224][T27991] overlayfs: failed to clone upperpath [ 1704.212488][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 1704.264445][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1704.308316][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1704.308915][T19612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1704.329646][T19612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1704.339364][T19612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1704.349212][T19612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1704.359204][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1704.359375][T19612] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1704.663889][T19612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.875605][T19612] usb 2-1: config 0 descriptor?? [ 1704.892425][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1704.903450][T19597] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1704.913533][T19597] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1704.934152][T19597] usb 7-1: USB disconnect, device number 21 [ 1705.134637][T19612] hdpvr 2-1:0.0: unexpected answer of status request, len -71 [ 1705.148577][T19612] hdpvr 2-1:0.0: device init failed [ 1705.155148][T19612] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 1705.172156][T19612] usb 2-1: USB disconnect, device number 61 [ 1705.365649][T19597] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1705.483726][T19601] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1705.540542][T19597] usb 7-1: Using ep0 maxpacket: 8 [ 1705.548088][T19597] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1705.557135][T19597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.574622][T19597] usb 7-1: config 0 descriptor?? [ 1705.677682][T19601] usb 6-1: config 0 has no interfaces? [ 1705.711130][T19601] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1705.732277][T19601] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1705.744468][T19601] usb 6-1: Product: syz [ 1705.748685][T19601] usb 6-1: Manufacturer: syz [ 1705.756795][T19601] usb 6-1: SerialNumber: syz [ 1705.769566][T19601] usb 6-1: config 0 descriptor?? [ 1705.822587][T19597] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1706.038026][ T9] usb 6-1: USB disconnect, device number 63 [ 1706.466987][T19597] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1706.477017][T19597] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 1706.510038][T19597] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1706.529751][T19597] usb 7-1: USB disconnect, device number 22 [ 1707.284801][T28087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6802'. [ 1707.396863][T19597] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1708.098156][T19597] usb 7-1: Using ep0 maxpacket: 32 [ 1708.107646][T19597] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1708.117776][T19597] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1708.126848][T19597] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1708.136591][T19597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1708.146552][T19597] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1708.158467][T19597] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1708.171827][T19597] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1708.181657][T19597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.193692][T19597] usb 7-1: config 0 descriptor?? [ 1708.439010][T28116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6808'. [ 1708.446382][T19597] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1708.902531][ T29] audit: type=1400 audit(1739908626.812:1151): avc: denied { read write } for pid=28075 comm="syz.6.6797" name="lp0" dev="devtmpfs" ino=3464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1708.945224][ C0] usblp0: nonzero read bulk status received: -71 [ 1708.969899][T19597] usb 7-1: USB disconnect, device number 23 [ 1709.011547][ T29] audit: type=1400 audit(1739908626.812:1152): avc: denied { open } for pid=28075 comm="syz.6.6797" path="/dev/usb/lp0" dev="devtmpfs" ino=3464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1709.067860][ T29] audit: type=1400 audit(1739908626.971:1153): avc: denied { prog_load } for pid=28123 comm="syz.5.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1709.096801][ T29] audit: type=1400 audit(1739908626.971:1154): avc: denied { prog_run } for pid=28123 comm="syz.5.6814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1709.178823][T28077] usblp0: removed [ 1709.520259][T28135] netlink: 340 bytes leftover after parsing attributes in process `syz.4.6818'. [ 1709.738053][T19597] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1710.448983][T19597] usb 2-1: Using ep0 maxpacket: 32 [ 1710.466512][T19597] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1710.483098][ T29] audit: type=1400 audit(1739908628.290:1155): avc: denied { accept } for pid=28142 comm="syz.4.6822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1710.487080][T19597] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1710.694769][T19597] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1710.835200][T28154] virtio-fs: tag <(null)> not found [ 1710.867473][T19597] usb 2-1: config 1 has no interface number 0 [ 1710.891705][T19597] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.961589][T19597] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1710.999499][T19597] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1711.031873][T19597] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1711.075449][T19597] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1711.323283][T19597] snd_usb_pod 2-1:1.1: set_interface failed [ 1711.352862][T19597] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1711.360057][T19597] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1711.479732][T19597] usb 2-1: USB disconnect, device number 62 [ 1712.066176][ T29] audit: type=1400 audit(1739908629.768:1156): avc: denied { mounton } for pid=28168 comm="syz.6.6829" path="/369/file0" dev="tmpfs" ino=1970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1712.151482][ T29] audit: type=1400 audit(1739908629.852:1157): avc: denied { map_create } for pid=28170 comm="syz.1.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1712.192877][ T29] audit: type=1400 audit(1739908629.852:1158): avc: denied { map_read map_write } for pid=28170 comm="syz.1.6830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1712.592870][T19597] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1712.609685][T28185] overlayfs: failed to clone upperpath [ 1712.656925][T28187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1712.665870][T28187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6836'. [ 1712.676115][T28187] ip6gre0: Master is either lo or non-ether device [ 1712.774459][T19597] usb 6-1: Using ep0 maxpacket: 8 [ 1712.781047][T19597] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1712.796964][T19597] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.822378][T19597] usb 6-1: config 0 descriptor?? [ 1713.111394][T28197] overlayfs: failed to clone upperpath [ 1713.447658][T19612] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1713.580325][T28214] 9pnet_fd: Insufficient options for proto=fd [ 1713.610270][T19612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.636372][T19612] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1713.645979][T19612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.663467][T19612] usb 2-1: config 0 descriptor?? [ 1713.688209][T19612] pwc: Askey VC010 type 2 USB webcam detected. [ 1714.131953][T19612] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1714.138992][T19612] pwc: recv_control_msg error -32 req 02 val 2700 [ 1714.146240][T19612] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1714.155651][T19612] pwc: recv_control_msg error -32 req 04 val 1000 [ 1714.162563][T19612] pwc: recv_control_msg error -32 req 04 val 1300 [ 1714.169558][T19612] pwc: recv_control_msg error -32 req 04 val 1400 [ 1714.427554][T19612] pwc: recv_control_msg error -71 req 02 val 2100 [ 1714.435059][T19612] pwc: recv_control_msg error -71 req 04 val 1500 [ 1714.442391][T19612] pwc: recv_control_msg error -71 req 02 val 2500 [ 1714.449298][T19612] pwc: recv_control_msg error -71 req 02 val 2400 [ 1714.456193][T19612] pwc: recv_control_msg error -71 req 02 val 2600 [ 1714.463992][T19612] pwc: recv_control_msg error -71 req 02 val 2900 [ 1714.470968][T19612] pwc: recv_control_msg error -71 req 02 val 2800 [ 1714.478107][T19612] pwc: recv_control_msg error -71 req 04 val 1100 [ 1714.485145][T19612] pwc: recv_control_msg error -71 req 04 val 1200 [ 1714.499204][T19612] pwc: Registered as video103. [ 1714.513696][T19612] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input103 [ 1714.547629][T19612] usb 2-1: USB disconnect, device number 63 [ 1715.221032][T28236] overlayfs: failed to clone upperpath [ 1715.457910][T19597] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1715.480715][T19597] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1715.497477][T19597] asix 6-1:0.0: probe with driver asix failed with error -71 [ 1715.534268][T19597] usb 6-1: USB disconnect, device number 64 [ 1715.801285][ T29] audit: type=1800 audit(1739908633.266:1159): pid=28257 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.6865" name="/" dev="9p" ino=2 res=0 errno=0 [ 1716.647705][T28272] 9pnet_fd: Insufficient options for proto=fd [ 1716.790611][T28274] xt_CT: No such helper "pptp" [ 1716.947730][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1716.993280][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1716.995195][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6877'. [ 1717.013712][T28284] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6876'. [ 1717.023186][T19597] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1717.221565][T28284] nbd0: detected capacity change from 0 to 256 [ 1717.233125][T19597] usb 7-1: Using ep0 maxpacket: 8 [ 1717.263172][T19597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.284279][ T5817] block nbd0: Receive control failed (result -104) [ 1717.307697][T19597] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1717.338331][T19597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.374655][T19597] usb 7-1: config 0 descriptor?? [ 1717.633466][T19597] usbhid 7-1:0.0: can't add hid device: -71 [ 1717.659575][T19597] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1717.704943][T19597] usb 7-1: USB disconnect, device number 24 [ 1720.554801][T19597] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1720.579255][ T29] audit: type=1804 audit(1739908637.737:1160): pid=28327 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.6892" name="file0" dev="tmpfs" ino=7983 res=1 errno=0 [ 1720.781378][T19597] usb 6-1: Using ep0 maxpacket: 16 [ 1720.798683][T19597] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1720.824790][T19597] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1720.941958][T19597] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1721.171282][T19597] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.192375][T19597] usb 6-1: Product: syz [ 1721.209063][T19597] usb 6-1: Manufacturer: syz [ 1721.219510][T19597] usb 6-1: SerialNumber: syz [ 1721.245617][T19597] usb 6-1: config 0 descriptor?? [ 1721.271163][T19597] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1721.299469][T19597] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1721.561915][ T29] audit: type=1400 audit(1739908638.645:1161): avc: denied { read } for pid=28343 comm="syz.1.6898" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1721.592591][ T29] audit: type=1400 audit(1739908638.645:1162): avc: denied { open } for pid=28343 comm="syz.1.6898" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1721.978364][T19597] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1722.062758][T19597] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1724.360268][ T3516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1724.454735][T19597] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1724.470766][T19597] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1724.479230][T19597] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1724.486721][T19597] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1724.493916][T19597] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1724.500618][T19597] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1724.545196][T19597] usb 6-1: USB disconnect, device number 65 [ 1725.661070][ T29] audit: type=1400 audit(1739908642.489:1163): avc: denied { connect } for pid=28381 comm="syz.6.6909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1726.520243][T28398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1726.841114][ T29] audit: type=1400 audit(1739908643.584:1164): avc: denied { node_bind } for pid=28399 comm="syz.5.6915" saddr=127.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1730.653039][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1731.958537][T19597] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1732.232349][T19597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1732.242732][T19597] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1732.253853][T19597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1732.264107][T19597] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1732.275016][T19597] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1732.284318][T19597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.294869][T19597] usb 7-1: config 0 descriptor?? [ 1733.616376][T19597] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 1733.635253][T19597] hdpvr 7-1:0.0: device init failed [ 1733.640772][T19597] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1733.652093][T19597] usb 7-1: USB disconnect, device number 25 [ 1733.732376][ T29] audit: type=1400 audit(1739908650.038:1165): avc: denied { map } for pid=28462 comm="syz.1.6934" path="/1236/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1733.746776][T28463] netfs: Couldn't get user pages (rc=-14) [ 1733.786084][T28466] syzkaller0: entered promiscuous mode [ 1733.799366][T28466] syzkaller0: entered allmulticast mode [ 1733.894290][T28471] sg_write: data in/out 209/8 bytes for SCSI command 0xff-- guessing data in; [ 1733.894290][T28471] program syz.5.6936 not setting count and/or reply_len properly [ 1736.743636][T21314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1739.448902][T28541] netlink: 'syz.5.6957': attribute type 4 has an invalid length. [ 1739.691991][T28536] netlink: 'syz.5.6957': attribute type 4 has an invalid length. [ 1740.239375][T28545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6959'. [ 1740.963940][ T29] audit: type=1400 audit(1739908656.801:1166): avc: denied { write } for pid=28553 comm="syz.1.6961" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1741.518269][T28564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.538783][T28564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.554935][T28564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1742.237893][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1746.219534][T28597] mkiss: ax0: crc mode is auto. [ 1747.439321][T19597] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1748.392290][T28623] Invalid source name [ 1748.396391][T28623] UBIFS error (pid: 28623): cannot open "./file0", error -22 [ 1748.421511][T19597] usb 2-1: device not accepting address 64, error -71 [ 1749.067698][T21314] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1749.750555][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 30 seconds [ 1751.388048][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6988'. [ 1751.701961][T28655] block nbd6: NBD_DISCONNECT [ 1751.790581][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1751.797058][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.804885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.812746][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.820674][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.828535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.836384][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.844220][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.852098][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.859948][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.867832][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.875701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.883662][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.891510][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.899357][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.907198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.915059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.922866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.930744][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.938575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.946455][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.954244][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.962084][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.969888][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.977731][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1751.985535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1751.993380][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.001198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.009094][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.016899][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.024753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.032562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.040426][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.048251][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.056106][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.063920][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.071770][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.079591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.087452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.095262][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.103086][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.110931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.118845][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.126673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1752.134546][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 1752.142404][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 1755.471701][T28684] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1755.482794][T28684] qnx6: wrong signature (magic) in superblock #1. [ 1755.489350][T28684] qnx6: unable to read the first superblock [ 1761.366776][ T29] audit: type=1400 audit(1739908675.874:1167): avc: denied { rename } for pid=28722 comm="syz.6.7007" name="file0" dev="tmpfs" ino=2113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1761.571903][T28728] »»»»»» speed is unknown, defaulting to 1000 [ 1761.609864][T28728] lo speed is unknown, defaulting to 1000 [ 1761.681798][T28731] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1761.690849][T28731] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1762.286687][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7010'. [ 1765.228007][T28756] could not allocate digest TFM handle ghash-ce [ 1765.929044][T28773] tipc: Resetting bearer [ 1766.056188][ T29] audit: type=1326 audit(1739908680.270:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1766.128600][T28778] gre2: entered promiscuous mode [ 1766.168717][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1766.212186][ T29] audit: type=1326 audit(1739908680.270:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1766.326476][ T29] audit: type=1326 audit(1739908680.270:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1766.576435][ T29] audit: type=1326 audit(1739908680.270:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1767.553396][ T29] audit: type=1326 audit(1739908680.270:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1767.636676][ T29] audit: type=1326 audit(1739908680.270:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1767.686406][ T29] audit: type=1326 audit(1739908680.270:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1767.981350][ T29] audit: type=1326 audit(1739908680.270:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.450854][ T29] audit: type=1326 audit(1739908680.270:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.815023][ T29] audit: type=1326 audit(1739908680.307:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.839480][ T29] audit: type=1326 audit(1739908680.307:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.863597][ T29] audit: type=1326 audit(1739908680.326:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.901124][ T29] audit: type=1326 audit(1739908680.326:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1768.984733][ T29] audit: type=1326 audit(1739908680.326:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28777 comm="syz.2.7021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1769.819832][T28816] Bluetooth: MGMT ver 1.23 [ 1773.503533][T28844] »»»»»» speed is unknown, defaulting to 1000 [ 1774.170686][T28844] lo speed is unknown, defaulting to 1000 [ 1776.726411][T28897] bridge0: port 1(netdevsim2) entered blocking state [ 1776.733138][T28897] bridge0: port 1(netdevsim2) entered disabled state [ 1776.739990][T28897] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1776.747972][T28897] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1776.999289][T28898] kvm: kvm [28894]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14af [ 1777.033706][T28898] kvm: kvm [28894]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xcc82 [ 1777.662213][T28904] »»»»»» speed is unknown, defaulting to 1000 [ 1777.781682][T28904] lo speed is unknown, defaulting to 1000 [ 1779.891249][T28940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7064'. [ 1780.194413][T28942] mkiss: ax0: crc mode is auto. [ 1780.886107][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1780.886125][ T29] audit: type=1400 audit(1739908694.151:1207): avc: denied { bind } for pid=28946 comm="syz.4.7067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1781.945483][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 60 seconds [ 1782.080142][ T29] audit: type=1400 audit(1739908695.096:1208): avc: denied { connect } for pid=28946 comm="syz.4.7067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1783.688741][T28965] bridge0: port 1(netdevsim2) entered blocking state [ 1783.695620][T28965] bridge0: port 1(netdevsim2) entered disabled state [ 1783.713309][T28965] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 1784.307527][T28965] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 1784.335138][T28965] bridge0: port 1(netdevsim2) entered blocking state [ 1784.342086][T28965] bridge0: port 1(netdevsim2) entered forwarding state [ 1784.905924][T28962] netlink: 248 bytes leftover after parsing attributes in process `syz.6.7073'. [ 1785.670728][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1785.682932][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1785.697507][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1785.705317][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1785.713551][ T5822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1785.720898][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1785.896236][T28992] »»»»»» speed is unknown, defaulting to 1000 [ 1785.926406][T28992] lo speed is unknown, defaulting to 1000 [ 1787.269630][T28992] chnl_net:caif_netlink_parms(): no params data found [ 1787.821051][T28992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.878764][T28992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.908718][T28992] bridge_slave_0: entered allmulticast mode [ 1787.936960][T28992] bridge_slave_0: entered promiscuous mode [ 1787.954047][T28992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.966712][T28992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.974946][ T5822] Bluetooth: hci5: command tx timeout [ 1787.982686][ T29] audit: type=1326 audit(1739908700.765:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1788.012705][T28992] bridge_slave_1: entered allmulticast mode [ 1788.019908][T28992] bridge_slave_1: entered promiscuous mode [ 1788.030030][ T29] audit: type=1326 audit(1739908700.765:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1788.036126][T19612] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1788.059160][ T29] audit: type=1326 audit(1739908700.765:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee6378b750 code=0x7ffc0000 [ 1788.104468][T28992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.123332][T28992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.133882][ T29] audit: type=1326 audit(1739908700.765:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee6378b750 code=0x7ffc0000 [ 1788.205319][T28992] team0: Port device team_slave_0 added [ 1788.223057][ T29] audit: type=1326 audit(1739908700.765:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1788.311096][T28992] team0: Port device team_slave_1 added [ 1788.449681][ T29] audit: type=1326 audit(1739908700.793:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1788.468523][T19612] usb 2-1: Using ep0 maxpacket: 32 [ 1788.475333][ T29] audit: type=1326 audit(1739908700.793:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee6378b750 code=0x7ffc0000 [ 1788.510370][T19612] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1788.522755][T19612] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1788.522792][T28992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1788.534188][T19612] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1789.131686][T19612] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1789.141474][T19612] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1789.156211][ T29] audit: type=1326 audit(1739908700.793:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1789.189831][T28992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.189923][ T29] audit: type=1326 audit(1739908700.793:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1789.314884][ T29] audit: type=1326 audit(1739908700.811:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29021 comm="syz.2.7088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fee6378cde9 code=0x7ffc0000 [ 1789.408859][T28992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.412721][T19612] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1789.432815][T19612] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1789.482004][T28992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.499964][T28992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1789.702179][T19612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.856199][T19612] usb 2-1: config 0 descriptor?? [ 1789.926150][T28992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1790.008480][T29043] misc userio: Invalid payload size [ 1790.185986][ T5822] Bluetooth: hci5: command tx timeout [ 1790.516523][T19612] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 66 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1790.566270][T28992] hsr_slave_0: entered promiscuous mode [ 1790.590736][T28992] hsr_slave_1: entered promiscuous mode [ 1791.334521][T28992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1791.370369][T28992] Cannot create hsr debugfs directory [ 1791.486542][ C1] usblp0: nonzero read bulk status received: -71 [ 1791.495837][T19612] usb 2-1: USB disconnect, device number 66 [ 1791.504466][T29053] »»»»»» speed is unknown, defaulting to 1000 [ 1791.546385][T29053] lo speed is unknown, defaulting to 1000 [ 1791.629938][T29055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7098'. [ 1791.730341][T29013] usblp0: removed [ 1791.829255][T28992] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1791.887617][T28992] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1791.912237][T28992] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1791.942505][T28992] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1792.467922][ T5822] Bluetooth: hci5: command tx timeout [ 1793.058020][T28992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1793.163022][T28992] 8021q: adding VLAN 0 to HW filter on device team0 [ 1793.365795][ T7285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1793.372956][ T7285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.447764][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.454899][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.963279][T28992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.570530][T19601] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1794.633078][ T5822] Bluetooth: hci5: command tx timeout [ 1794.846090][T19601] usb 2-1: Using ep0 maxpacket: 8 [ 1794.881830][T19601] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1795.149958][T19601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.792310][T19601] usb 2-1: Product: syz [ 1795.796542][T19601] usb 2-1: Manufacturer: syz [ 1795.808722][T19601] usb 2-1: SerialNumber: syz [ 1795.852469][T19601] usb 2-1: config 0 descriptor?? [ 1796.155520][T19601] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1796.217231][T28992] veth0_vlan: entered promiscuous mode [ 1796.423995][T28992] veth1_vlan: entered promiscuous mode [ 1796.606018][T28992] veth0_macvtap: entered promiscuous mode [ 1796.615606][T28992] veth1_macvtap: entered promiscuous mode [ 1797.397394][T28992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1797.409746][T28992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1797.433501][T28992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1798.076265][T28992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.087731][T28992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.133954][T28992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1798.145294][T28992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.159768][T28992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1798.322135][T19601] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1798.351866][T19601] usb 2-1: USB disconnect, device number 67 [ 1798.387807][T28992] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.487595][T28992] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.538297][T28992] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.573944][T28992] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1798.797061][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.805374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1798.831978][T21293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1798.842556][T21293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.917588][T29193] ISOFS: Unable to identify CD-ROM format. [ 1805.723861][ T5193] udevd[5193]: worker [27560] /devices/virtual/block/nbd0 is taking a long time [ 1808.297669][T29233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1808.872576][T29233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.065551][T29233] dummy0: entered promiscuous mode [ 1809.071554][T29233] macsec1: entered promiscuous mode [ 1810.225913][T29233] dummy0: left promiscuous mode [ 1814.410548][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 90 seconds [ 1815.640573][T29287] ipt_ECN: cannot use operation on non-tcp rule [ 1817.664352][T29303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1818.901680][T29327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7173'. [ 1826.073533][T29394] »»»»»» speed is unknown, defaulting to 1000 [ 1826.090108][T29394] lo speed is unknown, defaulting to 1000 [ 1826.745147][T29387] [U]  [ 1827.791306][T29409] Invalid ELF header magic: != ELF [ 1828.761402][T29417] netlink: 3 bytes leftover after parsing attributes in process `syz.6.7192'. [ 1828.771064][T29417] 0ªX¹¦À: renamed from caif0 [ 1829.082314][T29417] 0ªX¹¦À: entered allmulticast mode [ 1829.087528][T29417] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1830.110223][T29433] --map-set only usable from mangle table [ 1830.730402][T29422] »»»»»» speed is unknown, defaulting to 1000 [ 1830.746303][T29422] lo speed is unknown, defaulting to 1000 [ 1830.779100][ T5822] Bluetooth: min 0 < 6 [ 1831.839243][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1832.968707][ T5822] Bluetooth: hci4: command 0x0406 tx timeout [ 1840.193265][T29510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7223'. [ 1844.820488][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1844.864907][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1845.727894][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1845.741953][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1845.831069][ T5817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1845.838428][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1846.165652][T29537] »»»»»» speed is unknown, defaulting to 1000 [ 1847.029935][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 120 seconds [ 1847.182810][T29537] lo speed is unknown, defaulting to 1000 [ 1848.174821][ T5817] Bluetooth: hci0: command tx timeout [ 1850.312871][T29537] chnl_net:caif_netlink_parms(): no params data found [ 1850.393060][T29593] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 1850.400273][ T5817] Bluetooth: hci0: command tx timeout [ 1850.662074][T29598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1850.666836][T29537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1850.681251][T29537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.683877][T29598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1851.279743][T29537] bridge_slave_0: entered allmulticast mode [ 1851.286914][T29537] bridge_slave_0: entered promiscuous mode [ 1851.297940][T29537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1851.342280][T29537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.368647][T29537] bridge_slave_1: entered allmulticast mode [ 1851.481191][T29537] bridge_slave_1: entered promiscuous mode [ 1851.707794][T29537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1851.808393][T29537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1852.628783][ T5817] Bluetooth: hci0: command tx timeout [ 1852.732640][T29537] team0: Port device team_slave_0 added [ 1853.755681][T29537] team0: Port device team_slave_1 added [ 1854.771516][T29642] overlayfs: failed to clone upperpath [ 1854.949207][ T5817] Bluetooth: hci0: command tx timeout [ 1855.016093][T29537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.344137][T29537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.379076][T29537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.428532][T29537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.468145][T29537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.592186][T29537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1857.662384][T29537] hsr_slave_0: entered promiscuous mode [ 1857.782414][T29537] hsr_slave_1: entered promiscuous mode [ 1857.788535][T29537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1857.801479][T29537] Cannot create hsr debugfs directory [ 1860.387239][T29537] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1860.536445][T29537] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1860.554760][T29537] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1860.570007][T29537] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1861.395099][T25940] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1861.673421][T25940] usb 7-1: Using ep0 maxpacket: 8 [ 1861.704681][T25940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1861.733277][T25940] usb 7-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1861.773995][T29537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.781791][T25940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.824343][T25940] usb 7-1: config 0 descriptor?? [ 1861.853888][T29537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1861.914798][T21310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.921921][T21310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.135396][T25940] usbhid 7-1:0.0: can't add hid device: -71 [ 1862.141938][T25940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1862.175670][T25940] usb 7-1: USB disconnect, device number 26 [ 1862.204998][T21310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.212100][T21310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1864.843762][T29537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1865.067365][T29708] sg_write: data in/out 38187/14 bytes for SCSI command 0x0-- guessing data in; [ 1865.067365][T29708] program syz.7.7266 not setting count and/or reply_len properly [ 1867.117526][T29728] overlayfs: failed to clone lowerpath [ 1867.774361][T29537] veth0_vlan: entered promiscuous mode [ 1867.824062][T29537] veth1_vlan: entered promiscuous mode [ 1869.279738][T29537] veth0_macvtap: entered promiscuous mode [ 1870.101940][T29537] veth1_macvtap: entered promiscuous mode [ 1870.280146][T29537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1870.293765][T29537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.899288][T29537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1870.910470][T29537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.928716][T29537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1870.949657][T29537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.961679][T29537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.972207][T29537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1870.983635][T29537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1870.995498][T29537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1871.006834][T29537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1871.023739][T29537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1871.135679][T29537] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.168322][T29537] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.195405][T29537] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1871.224527][T29537] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.105591][ T7422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.146664][ T7422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.233329][ T7422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.277887][ T7422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.713408][T24744] libceph: connect (1)[c::]:6789 error -13 [ 1872.793856][T24744] libceph: mon0 (1)[c::]:6789 connect error [ 1873.280463][T29764] ceph: No mds server is up or the cluster is laggy [ 1876.173192][T29790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7281'. [ 1877.358046][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 1877.358066][ T29] audit: type=1400 audit(1739908784.230:1254): avc: denied { setopt } for pid=29802 comm="syz.2.7285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1879.449371][ T29] audit: type=1800 audit(1739908786.260:1255): pid=29825 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.7288" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1879.874604][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 150 seconds [ 1880.090748][T29831] »»»»»» speed is unknown, defaulting to 1000 [ 1880.101321][T29831] lo speed is unknown, defaulting to 1000 [ 1880.180678][T29832] smc: net device caif0 applied user defined pnetid SYZ2 [ 1880.406450][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7290'. [ 1883.653555][ T29] audit: type=1400 audit(1739908790.264:1256): avc: denied { lock } for pid=29855 comm="syz.7.7296" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1883.787363][T29857] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7296'. [ 1883.799716][T29857] netlink: 80 bytes leftover after parsing attributes in process `syz.7.7296'. [ 1891.157954][ T29] audit: type=1400 audit(1739908797.289:1257): avc: denied { map } for pid=29918 comm="syz.8.7313" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1891.646183][T29928] sp0: Synchronizing with TNC [ 1896.589753][T29966] netlink: 'syz.6.7327': attribute type 8 has an invalid length. [ 1897.520553][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1899.902781][T24744] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1900.084811][T24744] usb 9-1: Using ep0 maxpacket: 32 [ 1900.099470][T24744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1900.141685][T24744] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1900.188314][T24744] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1900.230329][T24744] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.256013][T24744] usb 9-1: Product: syz [ 1900.260254][T24744] usb 9-1: Manufacturer: syz [ 1900.290799][T24744] usb 9-1: SerialNumber: syz [ 1900.317503][T24744] usb 9-1: config 0 descriptor?? [ 1900.325813][T29997] overlayfs: failed to clone upperpath [ 1900.371321][T24744] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1900.799103][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7336'. [ 1900.913438][T30005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7337'. [ 1901.678534][ T7422] usb 9-1: Failed to submit usb control message: -110 [ 1901.713989][ T7422] usb 9-1: unable to send the bmi data to the device: -110 [ 1902.511737][ T7422] usb 9-1: unable to get target info from device [ 1903.508138][T19612] usb 9-1: USB disconnect, device number 2 [ 1903.544331][ T7422] usb 9-1: could not get target info (-110) [ 1903.569780][ T7422] usb 9-1: could not probe fw (-110) [ 1904.687408][T30031] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7341'. [ 1912.784229][T24501] block nbd0: Possible stuck request ffff888025b8e000: control (read@0,4096B). Runtime 180 seconds [ 1912.971066][T30089] »»»»»» speed is unknown, defaulting to 1000 [ 1912.985741][T30092] lo: entered promiscuous mode [ 1912.998204][T30092] tunl0: entered promiscuous mode [ 1913.008807][T30092] gre0: entered promiscuous mode [ 1913.015619][T30092] gretap0: entered promiscuous mode [ 1913.026519][T30092] erspan0: entered promiscuous mode [ 1913.060561][T30092] ip_vti0: entered promiscuous mode [ 1913.087535][T30092] ip6_vti0: entered promiscuous mode [ 1913.932628][T30092] sit0: entered promiscuous mode [ 1913.987348][T30092] ip6tnl0: entered promiscuous mode [ 1914.015893][T30092] ip6gre0: entered promiscuous mode [ 1914.021836][T30092] syz_tun: entered promiscuous mode [ 1914.073863][T30092] ip6gretap0: entered promiscuous mode [ 1914.101119][T30092] bridge0: entered promiscuous mode [ 1914.106967][T30092] vcan0: entered promiscuous mode [ 1914.135804][T30092] bond0: entered promiscuous mode [ 1914.147453][T30092] bond_slave_0: entered promiscuous mode [ 1914.166047][T30092] bond_slave_1: entered promiscuous mode [ 1914.175536][T30092] team0: entered promiscuous mode [ 1914.185888][T30092] team_slave_0: entered promiscuous mode [ 1914.209918][T30092] team_slave_1: entered promiscuous mode [ 1914.216577][T30092] dummy0: entered promiscuous mode [ 1914.238586][T30092] nlmon0: entered promiscuous mode [ 1914.473318][T30092] caif0: entered promiscuous mode [ 1914.485476][T30092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1915.184629][T30089] lo speed is unknown, defaulting to 1000 [ 1915.588921][T30114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30114 comm=syz.8.7364 [ 1916.920922][T30129] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.418157][ T29] audit: type=1400 audit(1739908821.855:1258): avc: denied { append } for pid=30122 comm="syz.6.7365" name="video9" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1917.686195][T25940] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1917.771333][T30143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input104 [ 1917.878317][T25940] usb 7-1: Using ep0 maxpacket: 16 [ 1917.912566][T25940] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.989764][T25940] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1918.870490][T25940] usb 7-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1918.988108][T25940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1919.242081][T25940] usb 7-1: Product: syz [ 1919.246284][T25940] usb 7-1: Manufacturer: syz [ 1919.250887][T25940] usb 7-1: SerialNumber: syz [ 1919.487959][T19602] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1919.584849][T30160] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1919.594002][T30160] overlayfs: conflicting options: userxattr,metacopy=on [ 1919.821211][T19602] usb 9-1: Using ep0 maxpacket: 8 [ 1920.037362][T25940] usb 7-1: config 0 descriptor?? [ 1920.043725][T19602] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.053650][T25940] usb 7-1: can't set config #0, error -71 [ 1920.075421][T19602] usb 9-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 1920.262386][T19602] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.293539][T19602] usb 9-1: config 0 descriptor?? [ 1920.378160][T25940] usb 7-1: USB disconnect, device number 27 [ 1920.641793][T19602] usbhid 9-1:0.0: can't add hid device: -71 [ 1921.245035][T19602] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1921.267541][T19602] usb 9-1: USB disconnect, device number 3 [ 1922.755985][T30163] Bluetooth: hci5: command 0x0406 tx timeout [ 1923.602788][ T29] audit: type=1400 audit(1739908827.635:1259): avc: denied { write } for pid=30189 comm="syz.7.7382" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1925.898348][T25940] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1925.975580][T30198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1926.084285][T25940] usb 7-1: Using ep0 maxpacket: 16 [ 1926.103555][T25940] usb 7-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed [ 1926.124159][T25940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.268086][T25940] usb 7-1: Product: syz [ 1926.272336][T25940] usb 7-1: Manufacturer: syz [ 1926.287067][T25940] usb 7-1: SerialNumber: syz [ 1926.299587][T25940] usb 7-1: config 0 descriptor?? [ 1926.309280][T25940] s2255 7-1:0.0: Could not find bulk-in endpoint [ 1926.341651][T25940] Sensoray 2255 driver load failed: 0xfffffff4 [ 1926.347959][T25940] s2255 7-1:0.0: probe with driver s2255 failed with error -12 [ 1926.776111][T25940] usb 7-1: USB disconnect, device number 28 [ 1926.971881][ T30] INFO: task syz.5.7028:28799 blocked for more than 143 seconds. [ 1926.979638][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1927.016420][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1927.063916][ T30] task:syz.5.7028 state:D stack:27856 pid:28799 tgid:28796 ppid:5919 task_flags:0x400040 flags:0x00004004 [ 1927.078403][ T30] Call Trace: [ 1927.081708][ T30] [ 1927.084653][ T30] __schedule+0xf43/0x5890 [ 1927.142405][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1927.147676][ T30] ? __pfx___schedule+0x10/0x10 [ 1927.152550][ T30] ? schedule+0x298/0x350 [ 1927.249150][ T30] ? __pfx_lock_release+0x10/0x10 [ 1927.254257][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1927.259754][ T30] ? lock_acquire+0x2f/0xb0 [ 1927.281458][ T30] ? schedule+0x1fd/0x350 [ 1927.321307][ T30] schedule+0xe7/0x350 [ 1927.334089][ T30] schedule_preempt_disabled+0x13/0x30 [ 1927.366728][ T30] __mutex_lock+0x6bd/0xb10 [ 1927.371281][ T30] ? sync_bdevs+0xfd/0x360 [ 1927.375711][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1927.441571][ T30] ? sync_bdevs+0xc7/0x360 [ 1927.446033][ T30] ? _atomic_dec_and_lock+0xa2/0x120 [ 1927.451324][ T30] ? iput+0xd3/0x890 [ 1927.505790][ T30] ? sync_bdevs+0xfd/0x360 [ 1927.510251][ T30] sync_bdevs+0xfd/0x360 [ 1927.514501][ T30] ksys_sync+0xb3/0x150 [ 1927.548498][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1927.553305][ T30] ? trace_csd_function_exit+0x17f/0x1f0 [ 1927.558958][ T30] ? do_syscall_64+0x91/0x250 [ 1927.583191][ T30] __do_sys_sync+0xe/0x20 [ 1927.587571][ T30] do_syscall_64+0xcd/0x250 [ 1927.602354][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.608305][ T30] RIP: 0033:0x7f9657b8cde9 [ 1927.623640][ T30] RSP: 002b:00007f965899d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1927.632116][ T30] RAX: ffffffffffffffda RBX: 00007f9657da6080 RCX: 00007f9657b8cde9 [ 1927.643322][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1927.659607][ T30] RBP: 00007f9657da6080 R08: 0000000000000000 R09: 0000000000000000 [ 1927.670943][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1927.684024][ T30] R13: 0000000000000001 R14: 00007f9657da6080 R15: 00007fff0d886928 [ 1927.695272][ T30] [ 1927.719529][ T30] [ 1927.719529][ T30] Showing all locks held in the system: [ 1927.727270][ T30] 1 lock held by khungtaskd/30: [ 1927.762287][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1927.772227][ T30] 2 locks held by getty/5583: [ 1927.784537][ T30] #0: ffff88814d6cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1927.794610][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1927.804763][ T30] 1 lock held by syz.2.2601/15414: [ 1927.815790][ T30] 2 locks held by kworker/1:1/25940: [ 1927.821087][ T30] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1927.839596][ T30] #1: ffffc9000f057d18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1927.855273][ T30] 2 locks held by syz.6.6306/26852: [ 1927.863749][ T30] 1 lock held by udevd/27560: [ 1927.868489][ T30] #0: ffff8881443a94c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe20 [ 1927.911981][ T30] 1 lock held by syz.5.7028/28799: [ 1927.917128][ T30] #0: ffff8881443a94c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 1927.934485][ T30] 2 locks held by kworker/u8:3/28883: [ 1927.939872][ T30] 3 locks held by syz-executor/28992: [ 1927.964736][ T30] #0: ffff88805a52cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1927.975009][ T30] #1: ffff88805a52c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 1927.985148][ T30] #2: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1927.995619][ T30] 4 locks held by syz.8.7380/30190: [ 1928.019013][ T30] #0: ffff888034aacd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1928.028651][ T30] #1: ffff888034aac078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ab/0x11a0 [ 1928.062169][ T30] #2: ffff888036b0bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7f/0x730 [ 1928.071556][ T30] #3: ffffffff8e1c80f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1928.107387][ T30] [ 1928.109742][ T30] ============================================= [ 1928.109742][ T30] [ 1928.128924][ T30] NMI backtrace for cpu 1 [ 1928.128936][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1928.128957][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1928.128968][ T30] Call Trace: [ 1928.128974][ T30] [ 1928.128981][ T30] dump_stack_lvl+0x116/0x1f0 [ 1928.129007][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1928.129034][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1928.129059][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1928.129087][ T30] watchdog+0xf62/0x12b0 [ 1928.129118][ T30] ? __pfx_watchdog+0x10/0x10 [ 1928.129142][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1928.129170][ T30] ? __kthread_parkme+0x148/0x220 [ 1928.129189][ T30] ? __pfx_watchdog+0x10/0x10 [ 1928.129214][ T30] kthread+0x3af/0x750 [ 1928.129235][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.129259][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.129280][ T30] ret_from_fork+0x45/0x80 [ 1928.129300][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.129321][ T30] ret_from_fork_asm+0x1a/0x30 [ 1928.129353][ T30] [ 1928.129361][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1928.243294][ C0] NMI backtrace for cpu 0 [ 1928.243306][ C0] CPU: 0 UID: 0 PID: 30185 Comm: syz.4.7377 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1928.243328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1928.243338][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1928.243372][ C0] Code: bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 <89> f2 89 fe bf 05 00 00 00 e9 2a fe ff ff 66 2e 0f 1f 84 00 00 00 [ 1928.243396][ C0] RSP: 0018:ffffc9000bdef088 EFLAGS: 00000002 [ 1928.243410][ C0] RAX: 1ffffd40002b68a8 RBX: ffffea00015b4540 RCX: ffffffff81f3fa52 [ 1928.243422][ C0] RDX: ffff88802e4d2440 RSI: 0000000000000002 RDI: 00000000ffffffff [ 1928.243434][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1928.243445][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88807e028048 [ 1928.243456][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 1928.243467][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1928.243486][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1928.243497][ C0] CR2: 000055872422b0a8 CR3: 000000007a4e6000 CR4: 00000000003526f0 [ 1928.243510][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1928.243521][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1928.243533][ C0] Call Trace: [ 1928.243539][ C0] [ 1928.243546][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1928.243575][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1928.243598][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1928.243625][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1928.243653][ C0] ? default_do_nmi+0x6a/0x160 [ 1928.243679][ C0] ? exc_nmi+0x170/0x1e0 [ 1928.243703][ C0] ? end_repeat_nmi+0xf/0x53 [ 1928.243732][ C0] ? lru_gen_del_folio.constprop.0+0xa2/0xab0 [ 1928.243762][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1928.243790][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1928.243818][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x20 [ 1928.243847][ C0] [ 1928.243852][ C0] [ 1928.243858][ C0] lru_gen_del_folio.constprop.0+0xa2/0xab0 [ 1928.243888][ C0] ? __pfx_lru_gen_del_folio.constprop.0+0x10/0x10 [ 1928.243917][ C0] ? lruvec_memcg_debug.part.0+0x14/0x1a0 [ 1928.243946][ C0] __page_cache_release.part.0+0x70a/0xb70 [ 1928.243992][ C0] folios_put_refs+0x68e/0x7b0 [ 1928.244020][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1928.244048][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1928.244069][ C0] shmem_undo_range+0x586/0x1170 [ 1928.244099][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1928.244124][ C0] ? kernel_text_address+0x8d/0x100 [ 1928.244160][ C0] ? lock_acquire+0x2f/0xb0 [ 1928.244184][ C0] ? hlock_class+0x4e/0x130 [ 1928.244214][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1928.244238][ C0] ? hlock_class+0x4e/0x130 [ 1928.244259][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1928.244287][ C0] shmem_evict_inode+0x3a3/0xba0 [ 1928.244313][ C0] ? find_held_lock+0x2d/0x110 [ 1928.244333][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1928.244358][ C0] ? evict+0x3c8/0x960 [ 1928.244381][ C0] ? __pfx_lock_release+0x10/0x10 [ 1928.244412][ C0] ? lock_acquire+0x2f/0xb0 [ 1928.244438][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1928.244463][ C0] evict+0x409/0x960 [ 1928.244485][ C0] ? __pfx_evict+0x10/0x10 [ 1928.244512][ C0] iput+0x52a/0x890 [ 1928.244532][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 1928.244561][ C0] dentry_unlink_inode+0x29c/0x480 [ 1928.244582][ C0] __dentry_kill+0x1d0/0x600 [ 1928.244603][ C0] ? shrink_dentry_list+0x11a/0x5d0 [ 1928.244628][ C0] shrink_dentry_list+0x140/0x5d0 [ 1928.244653][ C0] ? shrink_dcache_parent+0x75/0x530 [ 1928.244677][ C0] shrink_dcache_parent+0xe2/0x530 [ 1928.244702][ C0] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 1928.244726][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1928.244744][ C0] ? lock_acquire+0x2f/0xb0 [ 1928.244771][ C0] shrink_dcache_for_umount+0xa1/0x3e0 [ 1928.244798][ C0] generic_shutdown_super+0x6c/0x390 [ 1928.244823][ C0] kill_litter_super+0x70/0xa0 [ 1928.244847][ C0] deactivate_locked_super+0xbe/0x1a0 [ 1928.244873][ C0] deactivate_super+0xde/0x100 [ 1928.244899][ C0] cleanup_mnt+0x222/0x450 [ 1928.244926][ C0] task_work_run+0x14e/0x250 [ 1928.244949][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1928.244977][ C0] do_exit+0xad8/0x2d70 [ 1928.244997][ C0] ? get_signal+0x8f7/0x26c0 [ 1928.245024][ C0] ? __pfx_do_exit+0x10/0x10 [ 1928.245042][ C0] ? do_raw_spin_lock+0x12d/0x2c0 [ 1928.245059][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1928.245079][ C0] do_group_exit+0xd3/0x2a0 [ 1928.245099][ C0] get_signal+0x24ed/0x26c0 [ 1928.245129][ C0] ? __pfx_lock_release+0x10/0x10 [ 1928.245153][ C0] ? __pfx_get_signal+0x10/0x10 [ 1928.245184][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 1928.245206][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1928.245232][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1928.245262][ C0] syscall_exit_to_user_mode+0x150/0x2a0 [ 1928.245283][ C0] do_syscall_64+0xda/0x250 [ 1928.245305][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1928.245330][ C0] RIP: 0033:0x7f2b0418cde9 [ 1928.245343][ C0] Code: Unable to access opcode bytes at 0x7f2b0418cdbf. [ 1928.245351][ C0] RSP: 002b:00007f2b01fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1928.245368][ C0] RAX: 0000000000010106 RBX: 00007f2b043a6080 RCX: 00007f2b0418cde9 [ 1928.245380][ C0] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000004 [ 1928.245399][ C0] RBP: 00007f2b0420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1928.245410][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1928.245421][ C0] R13: 0000000000000000 R14: 00007f2b043a6080 R15: 00007fff3c250f88 [ 1928.245439][ C0] [ 1928.811926][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1928.818790][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1928.829296][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1928.839347][ T30] Call Trace: [ 1928.842613][ T30] [ 1928.845533][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1928.850118][ T30] panic+0x71d/0x800 [ 1928.854001][ T30] ? __pfx_panic+0x10/0x10 [ 1928.858402][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1928.863770][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1928.869744][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1928.875109][ T30] ? watchdog+0xdcc/0x12b0 [ 1928.879514][ T30] ? watchdog+0xdbf/0x12b0 [ 1928.883921][ T30] watchdog+0xddd/0x12b0 [ 1928.888166][ T30] ? __pfx_watchdog+0x10/0x10 [ 1928.892829][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1928.898010][ T30] ? __kthread_parkme+0x148/0x220 [ 1928.903020][ T30] ? __pfx_watchdog+0x10/0x10 [ 1928.907688][ T30] kthread+0x3af/0x750 [ 1928.911743][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.916319][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.920897][ T30] ret_from_fork+0x45/0x80 [ 1928.925299][ T30] ? __pfx_kthread+0x10/0x10 [ 1928.929875][ T30] ret_from_fork_asm+0x1a/0x30 [ 1928.934651][ T30] [ 1928.937859][ T30] Kernel Offset: disabled [ 1928.942176][ T30] Rebooting in 86400 seconds..