last executing test programs: 10m54.249226845s ago: executing program 1 (id=431): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x3, 0x0, 0x6, 0xfffffffa, 0x22}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xe61c6a5c983a3b82}]}}}]}, 0x58}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, 0x0, &(0x7f0000000140)) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="e275addd6a76d8e02984b49a0e34ed7e6d1aba6a76078ff8ec1e03f3db44f349f5034f1f9b369008c87c290a0dd2937aa166d7ee0bbf24f6f7571a77472b1b544e6bb112ab7adba5d9cbd6576231f49c15ba", 0x52, 0xfffffffffffffffa) 10m50.661274853s ago: executing program 1 (id=440): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f00000000c0)={0x4, 0x8000000000000000}, &(0x7f0000000140)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500000000000d000300686173683a6d6163"], 0x5c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000006c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x76, 0x0, 0x0, 0x8, 0x4, 0x14, 0x68, 0xd}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x50, r0, 0x33c97000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000002c0)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000000)={0x8, 0x200, 0x8, 0x5, 0x6, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000100)={&(0x7f0000000740)={{@host, 0x3ff}, {@local, 0x40000040}, 0x400, "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"}, 0x479, 0xffffff90}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x103103, 0x100) socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) open(&(0x7f0000000040)='./file1\x00', 0x0, 0xd2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) socket$inet(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) unshare(0x2060280) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x52, 0x20f, 0x1ff, {0x0, 0x1}, {0x4c, 0xc}, @cond=[{0x5, 0xb, 0x5, 0x3, 0x7, 0x1ff}, {0x103e, 0x101, 0x1, 0x7, 0x100, 0x6}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 10m50.148952476s ago: executing program 1 (id=444): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x0, 0x2, 0x73, {0x73, 0x7, "05a15f1ab1e6bff763ca6d4ea2f544d1e1204e481cabc3d039af1fd3478e2da32b32459375f7c722d0f3cbf3cab6a3290caf123ab25c161a54b5fad859b391ec0329c7eb2db2ef7cd5e9c9b4c47bf97bbbe2d0763bec3e462477955ba2e28fa656d62123ae8801ad1ff91425604f3e41fe"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000000480)={0x0, 0xf, 0x156, {0x5, 0xf, 0x156, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "34a9a0f344e78275c9bc46e49a67e287"}, @generic={0x100, 0x10, 0x1, "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"}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x8000, 0xf0f, 0x4, [0x3fc0, 0x0, 0xc030]}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "bdf3151668f4bfac47b5bcc6c352d16f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x6, 0x2, 0x218}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0x41, 0x4, 0x5, 0xff, "dcae7665", "7ec92f19"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x60, 0x10, 0x7, 0x7, 0x9, 0x9}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000640)={0x40, 0xc, 0x7b, "3b24a8b3eba64b7ca3038130148c26b23fb3eec713e54b8383411be2651ba10930c9718bc0a7981df2eca12d85408d9612ea4d3ead1fc7755314f515c4983cc659325b44541cfd9233db0d6ea01c2b6a44b9813f2359bddd5c7d0f0cabcbe0212e23c743583068a18d7df8f0ce90bcdea485efeb5d35f74c681f98"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000007c0)={0x20, 0x0, 0x8, {0x100, 0x20, [0xf0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0xba}, &(0x7f0000000880)={0x40, 0xb, 0x2, "48fa"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xd540}, &(0x7f0000000900)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000940)={0x40, 0x17, 0x6, @random="1821a4919076"}, &(0x7f0000000980)={0x40, 0x19, 0x2, "4583"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x2}}) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10m46.886070086s ago: executing program 1 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x100) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xa, @pix={0x5, 0x1ec0000, 0x34565348, 0x5, 0x9, 0xddc8, 0x2, 0x2, 0x0, 0x6, 0x2, 0x3}}) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) open_tree(r1, &(0x7f0000000640)='\x00', 0x81101) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 10m46.359676693s ago: executing program 1 (id=453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="20010000100007000000000000000000fc000000000000000000000000000000e00000020000000000000000000000004e2000004e2300000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000002b000000fc0100000000000000000000000000000000000000000000ac32024a00000000020000000000000000000000000100000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000025bd7000000000000a000400340000000000000014000e00fc0100000000000000000000000000001c001700000000002cbd70002cbd700025bd700026bd7000160b1000"], 0x120}}, 0x0) r8 = openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000000100)='-1\x00', 0x2) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi3\x00', 0x400, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa406}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 10m45.872634247s ago: executing program 1 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, 0x0, &(0x7f0000000140)) 10m45.758260246s ago: executing program 32 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) getsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, 0x0, &(0x7f0000000140)) 6m42.595040979s ago: executing program 4 (id=1174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x48, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000880) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e21, 0x200006df, @mcast2, 0x1}], 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x2710, 0x4, 0x0, 0x2000, &(0x7f0000007000/0x2000)=nil}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @redir={{0xa}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20008844) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0xa}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80006, 0x4000000000000e51, 0x102, 0x547b, 0x103d, 0x200000000006, 0x20000000000000, 0x3aa, 0x1, 0x1, 0xf, 0x40000000009, 0x40000000080a8c, 0x800000068], 0x4, 0x4000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000300)=0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x404c831}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m41.715143457s ago: executing program 4 (id=1176): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) statx(r0, &(0x7f0000000040)='./file1\x00', 0x800, 0x800, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6m41.551715949s ago: executing program 4 (id=1177): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 6m41.307915876s ago: executing program 2 (id=1178): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) statx(r0, &(0x7f0000000040)='./file1\x00', 0x800, 0x800, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(0xffffffffffffffff) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6m40.57193811s ago: executing program 4 (id=1180): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0600cd00000000003101330000000000080211000001080211000000"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m40.503840492s ago: executing program 4 (id=1181): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x2, &(0x7f0000000040)=0x80005) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x00I\x00_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e5320a4b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x1f0, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x6, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x1, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x0, 0x4, 0x0, 0xfff, 0xf4, {0x4, 0x7, 0x8c, 0xfffffffffffffff9, 0x0, 0x80000000, 0x8, 0x806, 0x5, 0xa000, 0x33c1bc78, 0x0, r9, 0x1ff}}, {0x4, 0xe6, 0x2, 0x7, 'fd'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x8000, 0x0, r8, r9, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, r5, r9}, 0xc) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x28c00, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4$alg(r10, 0x0, 0x0, 0x80800) sendmmsg(r11, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000001b040)=ANY=[@ANYBLOB="10ddff"], 0x10}}], 0x1, 0x4000000) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 6m40.501990443s ago: executing program 2 (id=1182): syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x7}}) 6m39.196486683s ago: executing program 4 (id=1183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000008e80)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x3, 0x3, 0x1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000001c80)={{0x2, 0x4e21, @broadcast}, {0x1, @random="74c9a89ff022"}, 0x60, {0x2, 0x4e21, @empty}, 'team_slave_0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000001a80)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/99, 0x63}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000012c0)=""/14, 0xe}], 0x1, &(0x7f0000001340)=""/11, 0xb}, 0x2}, {{&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/204, 0xcc}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/224, 0xe0}, {&(0x7f0000001700)=""/153, 0x99}, {&(0x7f0000001880)=""/182, 0xb6}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001980)=""/28, 0x1c}], 0x8, &(0x7f0000001a40)=""/12, 0xc}, 0x200}], 0x3, 0x44000102, 0x0) 6m34.995149937s ago: executing program 2 (id=1191): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="0600cd00000000003101330000000000080211000001080211000000"], 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6m34.809878239s ago: executing program 2 (id=1193): r0 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mlockall(0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r2, 0x11543, 0x50088}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x9005}, 0x0) write$dsp(r1, &(0x7f00000001c0)="04fba5da7e0b09c79068295a655a8b854e142b7f76cdbf8c3d7009fb0ab21379e754c01c9036a2fd295061fcb47a9e", 0x2f) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 6m34.272636505s ago: executing program 2 (id=1197): epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000000c0), 0x10000, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0xe, 0x80000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) 6m33.659624052s ago: executing program 2 (id=1201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x108, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xbb, '\x00', 0xa47, 0x3, 0xfffff27f, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x28, '\x00', 0x6, 0x6, 0x9e, 0x8000}}, @TCA_CBS_PARMS={0x18, 0x1, {0xa5, '\x00', 0x8, 0x2, 0x8001, 0x618}}, @TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0x7, 0x5, 0x4, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x7, 0xa0000, 0x9, 0x80}}, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x6, 0x200, 0x9, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x9, 0x6c0, 0x0, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x794, 0x7, 0x7e8, 0xb}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x9, 0x4, 0x6, 0x6}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r10 = getpgrp(0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) getpid() r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r12, 0x4b49, &(0x7f0000000cc0)={0x9, "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"}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a2743dd77c559979f20b8ad02a00a25c1af5d8e57770f91c309e5606e8df611a4c166692fae523f7d6b17363279413e523f356c76fa375d02a7c6f7c2a033ce90a1fd717384a3e0d5da882b6660953304de375150766c74f96f400079e4fcfa617735aae5f302e87f1dc4c6e02bc1103892bbef3bb4294e5d39d9db5c23bd720d15aca4a64f51cf804df7f0af5aa0784f2994ef4e594e517edb4fa05f5aa3f"], 0x30}, 0x1, 0x0, 0x0, 0x10000040}, 0x45051) mmap(&(0x7f000087d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r13 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, r13, 0x2, 0x0) r14 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r14, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) 6m33.189340613s ago: executing program 33 (id=1201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xe}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newqdisc={0x108, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xdc, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0xbb, '\x00', 0xa47, 0x3, 0xfffff27f, 0xe}}, @TCA_CBS_PARMS={0x18, 0x1, {0x28, '\x00', 0x6, 0x6, 0x9e, 0x8000}}, @TCA_CBS_PARMS={0x18, 0x1, {0xa5, '\x00', 0x8, 0x2, 0x8001, 0x618}}, @TCA_CBS_PARMS={0x18, 0x1, {0x41, '\x00', 0x7, 0x5, 0x4, 0x2}}, @TCA_CBS_PARMS={0x18, 0x1, {0xe, '\x00', 0x7, 0xa0000, 0x9, 0x80}}, @TCA_CBS_PARMS={0x18, 0x1, {0x40, '\x00', 0x6, 0x200, 0x9, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0x9, '\x00', 0x9, 0x6c0, 0x0, 0x1}}, @TCA_CBS_PARMS={0x18, 0x1, {0xd, '\x00', 0x794, 0x7, 0x7e8, 0xb}}, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x9, 0x4, 0x6, 0x6}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x20000000) r10 = getpgrp(0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) getpid() r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r12, 0x4b49, &(0x7f0000000cc0)={0x9, "04ef0d42005ac485d763672693bcd1fabec153475574b17e6f83744d9f9a9c43eb648edefd97d645bcb6a93ea0adb9dbd07faf5a14c3fe9cd569facc2aa012a75483badbbf431f7c21f95bee44e514bac477a372ad7041d44801f7c595537ce9a9d2e3bd2c15aabc387314cb2695642530e7b4f9b0196b74f712ba9caa1f49013c7838ac5ef443f6fb5f80ff86af610170f1844d5ec31696e5d400a6e2013cb393bd947fd149cb99b3420c65b3996b06fce8dcb4aad9842df9bc9f92e555c0b08fff6ceae3db4a7ae62ace1f719d18b929a59d241c31945817f27595631e2f5fcdefb743dc1c393eb885d106f7b77b5f6e562060cb609025def6d9d9af4e110dece1354801f750714b58ef3e5c6da628406b94887a6bcecacb8e84fecba5a34b346839faf29fe677b476f2073dca085f8424637f4b864b348818c374d008165c36d2873d5ed09cbab33e369b86c9299da97d9a9c6db693d2017242bdc0db04c862f54fe3d27f0a0d5d6edf0cf7add1e64ab21b163b2d95f4606233ac3a0d2f9559b43fcb023344aabe17606666b449f148d24942df973186a2f14a0f0ba941af1633c11156f8fd60e215e74f36df48ff84a91e3048505ca09227097d0a037a21ee73763f6d85b47203e4bd2874c06e83511dd24275176e5c7f33806902b1e5a1ccf1ad954f413292bd46ce3364013ac0a546d5d79809268edb05de30773f8d21"}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a2743dd77c559979f20b8ad02a00a25c1af5d8e57770f91c309e5606e8df611a4c166692fae523f7d6b17363279413e523f356c76fa375d02a7c6f7c2a033ce90a1fd717384a3e0d5da882b6660953304de375150766c74f96f400079e4fcfa617735aae5f302e87f1dc4c6e02bc1103892bbef3bb4294e5d39d9db5c23bd720d15aca4a64f51cf804df7f0af5aa0784f2994ef4e594e517edb4fa05f5aa3f"], 0x30}, 0x1, 0x0, 0x0, 0x10000040}, 0x45051) mmap(&(0x7f000087d000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r13 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x5, r13, 0x2, 0x0) r14 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r14, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) 6m24.095919938s ago: executing program 34 (id=1183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000008e40), 0x40, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000008e80)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r3, 0x3, 0x3, 0x1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x801, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000001c80)={{0x2, 0x4e21, @broadcast}, {0x1, @random="74c9a89ff022"}, 0x60, {0x2, 0x4e21, @empty}, 'team_slave_0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000001a80)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000000100)=""/160, 0xa0}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x3, &(0x7f0000001240)=""/99, 0x63}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000012c0)=""/14, 0xe}], 0x1, &(0x7f0000001340)=""/11, 0xb}, 0x2}, {{&(0x7f0000001380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/204, 0xcc}, {&(0x7f0000001540)=""/135, 0x87}, {&(0x7f0000001600)=""/224, 0xe0}, {&(0x7f0000001700)=""/153, 0x99}, {&(0x7f0000001880)=""/182, 0xb6}, {&(0x7f0000001b80)=""/213, 0xd5}, {&(0x7f0000001980)=""/28, 0x1c}], 0x8, &(0x7f0000001a40)=""/12, 0xc}, 0x200}], 0x3, 0x44000102, 0x0) 14.706144158s ago: executing program 6 (id=2302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x40001) sendmsg$802154_dgram(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x24, @long}, 0x14, &(0x7f0000000500)={&(0x7f0000000400)="e316cc6baecf5c13b914a84f5cfd733e70c0f4e424d7555fe87926658cd4ef062ca72d86ecb1210735e8b5031955d3f560cb38cadd353c42abe6ee8241b61e90fda446ab206255ca04109de1060a71fe130ddc32e9436a270236961068a3a7045dcd493b1ad2eb1ac7a14eb9e0504c59b54bbb9dd85709cb4e8dc2e7ffb16e2b5f39c58ec1ab3e26e6bfcad685a852affb6d7f3c5b698006238530ee4a86200a1162e8bc5331dd693deb1fecbd9a427dab4b87bd19197a9835c25928d127066f77b093287b3be18ef412a5d1b5596f199464591e904fbd784787a7c2c479e245fa7cdcde", 0xe4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008800) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x80a0000, 0x1, 0x9, 0x100, 0x0, [{0x3, 0x2, 0x93, '\x00', 0x1}, {0x6, 0xf9, 0x7, '\x00', 0x9}, {0x6, 0xf8, 0x1}, {0xbd, 0xe, 0xff, '\x00', 0x2}, {0x7, 0x2, 0x2, '\x00', 0x8}, {0x17, 0x8, 0x6, '\x00', 0x2}, {0xec, 0x9, 0x55}, {0xf8, 0x0, 0xec, '\x00', 0xa}, {0x9, 0x1, 0x8, '\x00', 0x5}, {0x6, 0x1, 0xfe, '\x00', 0xab}, {0x9, 0x3b, 0x4, '\x00', 0x18}, {0xbe, 0x41, 0x7, '\x00', 0x99}, {0xed, 0x1, 0x5, '\x00', 0x4}, {0x9, 0x7, 0x4, '\x00', 0xd}, {0x0, 0x4f, 0x5, '\x00', 0x1}, {0xf0, 0x3, 0x1, '\x00', 0xa}, {0x4, 0x9, 0x4}, {0x0, 0x5, 0x8, '\x00', 0x2}, {0xfc, 0x1, 0x6, '\x00', 0x7}, {0x5, 0x5, 0xb, '\x00', 0x2}, {0x7f, 0xe, 0x4, '\x00', 0xe2}, {0x8, 0x0, 0x1, '\x00', 0xec}, {0x2, 0x9, 0x2, '\x00', 0xf0}, {0x9, 0xca, 0x5, '\x00', 0x3}]}}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2, 0x7, 0x22}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa68"], 0x28}, 0x40c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x5b, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x80, 0x8000, 0x463a, 0x100}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 12.686678581s ago: executing program 6 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800000000000000000100000a11000300686173683a69702c6d61726b00000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d308000b"], 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x24004090) 10.32870451s ago: executing program 6 (id=2314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r5, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r5, 0x0, 0x0) write$vhost_msg_v2(r5, 0x0, 0x0) write$vhost_msg_v2(r5, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r6 = socket$inet(0x2, 0x3, 0x9) getsockname$tipc(r1, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r6, 0x0) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffb}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000000100)={{'\x00', 0x2}, {0x4}, 0x2, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)="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", 0x1d9, 0x0, 0x0}) 8.995732955s ago: executing program 5 (id=2317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x79, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$gtp(0x0, r1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$nfc_llcp(r3, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r5, 0x0, 0x8800) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x14) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r6, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$GTP_CMD_GETPDP(r1, 0x0, 0x20000110) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "1d99a1b2"}]}}, 0x0}, 0x0) 7.46952951s ago: executing program 6 (id=2321): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x9c388be80c57253b) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) 6.618304292s ago: executing program 7 (id=2322): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) statx(r0, &(0x7f0000000040)='./file1\x00', 0x800, 0x800, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 5.979864195s ago: executing program 6 (id=2323): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblc\x00', 0x0, 0x10001, 0x6f}, 0x2c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="3303120081fd120000007ef52f555f2a0c09000000fd88a8", 0x18, 0xc0f1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f48000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2c}) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x640842, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@ceph_nfs_confh={0x10, 0x2, {0xb, 0x9}}, 0x48cff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timerfd_settime(r6, 0x1, &(0x7f0000000000)={{r7, r8+60000000}, {0x0, 0x989680}}, &(0x7f0000000040)) 5.865518921s ago: executing program 7 (id=2325): r0 = socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (fail_nth: 1) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0xe5, 0xf5, 0x56, 0x20, 0x586, 0x3407, 0xa84d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0xd, 0x0, 0x0, 0xa5, 0xba, 0x28}}]}}]}}, 0x0) 5.772002056s ago: executing program 3 (id=2326): syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = syz_clone3(&(0x7f0000000340)={0x201180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0xf0) recvfrom$inet(r1, &(0x7f00000000c0)=""/39, 0x27, 0x100, &(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000c14010026bd6000fbdbdf2508003d00050000000800010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8060}, 0x4000040) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4fe, {0x2, 0x6, "081331", 0x3f6f, 0xff, 0x0, @private2, @mcast1, [@dstopts={0x2b}]}}}}}}}, 0x0) recvfrom$inet(r6, 0x0, 0x0, 0x2100, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000063c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x101}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000003140)="ebc2340ea5a0436dc0877bcbc25df5801a45733f39b1472e829f126b87f78762cb00d1bf90d03674ad0dbd39e34771d22eba26fb2583e62f11290541c0bc8b01326108370c58e0e710e8585737e6913c30256eac8633810217b5884ca46470dd127ec0d98eaed82e90c39bd7f4ebe499e56c0719a9abf85b98b41ea0045d8b10c0e901177805225338db99cec167a06c05c25ff2109f12ea7fa2e3e14f477081547435e1100d898d711c495208e7ccb8fd953f9f88c83c50301643c04ef31e6ae152890e217b41e67232e482e53a37bcf1a609ce682f832cd5c60cd7f0b3006088c81f0704a4076ce095e410feced24bfa0fd73048f0ffa68709469822a2dcc35fed79007bb4ffc2b07e22ae74a9b9d68ac0f436a7084860525c26f84519c3e4c6d5a4e07cb957b021f7be4bcf9607ea251b33dfd834a39639101cbe0eda5006d7c4923992eb7e275c69193884673274f49143e424acd1c712caa22c8361e343c04cb0195a948adbe72b2c824aaa843caa2ad0809846b314cb60d56e398afdfa30043b8d7a22b0013b33805fefbfa12eaf76781dbc062ce7208fa2fc9f56a9f5e9eb18200b2b017699f7ec027750a95607404f622a762f3940ef4e2b1f0a112865fcd18c19704cf22b582a76a691be173a0819d9df66c2e745ccd150bcf7e2c349274c9fdb0770a6bc7914549368ec976df457fb7a9e49cafa1e7e371179233532678585f71e1c683f400e6df82867c4ceec568b1d0365402791ed984a599752fdec6c5f2ad5199c97f4369204434f8ae66e2a7d186cc6e730b4da38f120e368bf4ca12133d20f42923ad048588404f285293197739e98ea3fd38878769bb01e3728a0e8846819924f8e95658a79e2fd88348ce9caa2c30d7bfa96b379d10c503c7bea6151ceba61228899b8b5ab5d2cb456ff61116151c12b4074401b7bc0d38fb7ad85769ced3ccf79e7dae33193d91a57979e548c2e182b22449166e72dbcd5c719de1003a4bffcdbc6431703a4f6946c167b3711cce5a649f92fd331a27f003b2092de01b9fac3df9b92b75c64e885a81a5d3eeef2f048a05a639b04ea400ba2d66709032bbbe74470871edd3121ca72060e4e346f4d7e82005c611792491657fa77075fead8730b13d2d2811688f907bad48eae02ef62a4cb274605a3d85305752e2120d8a67d14c4d806c46cdd78977de9123378974cd9d3f3eb344864e0ff2aad4c736049686282fc2130713ade2b5f47f1ccc86cee7586db7e4e5da8d22d1409a32252e4053a45654981bc316b705bc395f464f3723f47a89306b234f04790924c9088ae2a4579f8a84eefb565d39bd2314763000772a56b3bc6745426cb71f233de68154358a48e3bea23d8e7a648b124c4176f20d24900cd15fdd4fbd0fa919de713071826a8e9ef746052f57958dc990ae9da8a65db3ae961514dd39ec925883f648ce735a2d2b3455bf1805b0500dd383d6caa356f8f912f05961d9bfe1f7f9a269aa5a9f8a7ee202ecd523030dadeca462fa4445bd0c9b5455fb046a696dcff54bf6876f85f8f329c11cdaa01f0cd6bead3c4fb4bd65129f99e44fe1c75082e9bb7d75a47cc1b53f81650368b48b0b2b387da55facd56b8826f274a8a8a1d0a69606025088b1fced94416fdab2d7669098299df7237862de97b7e0c918f95a537f72d42889f2d98f8375e22df0330e47ac881b2bdf094586c27dd05bc203a4ad9b38f9dd730e41dc4fd88b3b53c94f6ece310da0c1e60473a6053d1089980de253af8ba8bfeab2b41b22afa310cf2efa93e488c67c464af48ef09a3fece788747b8537140be6c7c3a6ca56b3d1db2b75890ae2cc608b9e10230b99a39150382f83a477178869335269a03341736314b7fcde39ed8ccd8919f2f0872c20fdc97c40a0f3fd7132d2e9dcb08caa3e484ceef9d5fc3da94637a72a8b3a3110af4f926d21734826ab3834ac3104b0c6aa9787b193ad8b7a8e3ae9c0f6e4bad92a79a8a2793ed27cc4e6c417c76e21f193820facc042c4c4e90c2a72c4a8c2ccd4d4f0f86975eb778fbf20b6113fcf6a3c20d3c84d0013673d475fcd83688cf2b76912de32a04afde2005934b523d4daded03b6c8281579567e42c6972b9dbc585ee7dbf11d5640569f1c78a6d0af949d8ee4d197793f621e045d5f31f9bb8d7d9d7a9dd383c2850f135464adc3a5752f16dc874e2bf9dc7c85e1d06138165d70fc1acd9be853bb01f3ddb9e9d7014b5dd91bf2180c9071469b900a216bfec5b41e455398f48c87c74139e395a9614e5c19c5714f6fea7ac0747e7b7069d1f02c24e85ad7d202958ddabe6cf303b9a4ef433165d10787c41499b91a685f0f6b8b05d01221c3327fa6c8127cee3f9f268b5ceeca2f6ceebef18194ccf1c21c78fb188ce06343fc8bdc802dd375d74b7cf9383822d382e23409a2f590505f2f71fed25ec514df18cd52c7cd8b4d0fc2d17fdd2a19073824d10597a374ba95dcc76bb8566317ed31a198245787dc94d6ca32c1686a74d08f8dc6838998f7b2623f2a43c6dcffda01de8fb6fd95bd53d8bebd6218421f8640b219687f7b42b37fc5b07af08f16ec0229c19a49df5915ed53f267e8fedd76f5711b492d3d0dbadf9bcc3bff55ead3988f1d71dc43351c9c0ab7a4c7839c245c50ec778929ed38a730c6e3607ec4c1b0a9e73cafeb21dba6eea2e37c790903990a4f6fdcef258e3ccea7723b6bac42800d574ac0541d9c76469dd7859df6bf9bff58376841846102ae022321f8da6f4302eb1f1f5fd4bc6601fcca082a3f261d91ef56f3d58718e95670f35f0b3a08044de88cedb8a19b6c9a1a764d78ffed97c0b00063dcfa99bd54781a6852acf560f02072d81feb9cb5f6ff8bb2226843397f315bcb84d168c0a31881d1ef01d3880889b88febabf3a9060137804bad001075b304b3d6cc462204354f8ffb6d23351fd21efccbcd7f012cb2b331b8b82c6558a80460e10af6d146b2d943da1c33b64b1038c2d30ebc4f7d29b00d96ce2936b6947ad00e3df0a91aa832419b075eaa6b6340dc37ec92add746a26bafa9bd9d2c2ec80d1123383917ebbdb118625cbe9bfe2c28c5c727d99aa8c26454783db4c6a9e854e1c01b622b64e22a1d9182476340911bfdeae6af5ec8c7947068c4ea03776a9b8fc8a5ad9326e525dffc42bcab6baec3e7d840bdd899a2593012c1cc18e6a2a75518b107f8a0eb896e3b326c3d89c37c521b9abf49b167e598bf9bb35272b43ecae20714b10e8c6b166565cf16005f2e405b1ce4badb51a4a472e40792ab7e49df4adb64a7d85ffd952ac5ce623c809000e58e17a2e26069973491f53bb77593b760aa476ce4091749a5e9cdfd7dff8b3c75e0c104081b44b8ababc07dcf9ad0b98670fb79c1f08d0d70d008c56d910f8e6116af677cc07560224810c3d4e3bb1feb6b585e523632829bace75fc678a76626118b2b7ed4bc8e8e57cddae42b6a3580a6c3a5d5a7174f2710ccd138862b89fd5c2619cf2c65c642edd334dbcaba08369216764129465931186ed1402655bc6b6e934f77a25e2fe3964d0b1a479de975150f644bd40d067393cf2463a7f6c4f28ff7a4cf25887f2ed731c575f20401b31d49c26cd25fbf08029e9f72911312864809117c16b6ab3c83f6bf6df334b659447355ad3b5cdead7631ef1f9837ea7bb7767f1e26d7fc82c2857e63a05c8b9aa2e290bc4bb3158d958215ad8f957e5316a046f7972c7f8ddf69ff5849835ca53584da86d90a458b34b44a355e857cac2f76fdb1413b3a0e8045bcca2068dcd4841ae5b70cbbe2845768e2e2d0ae899fec980b1184efeaae00048f642659b15cf7573d05c1aed8c145a3de12a7ff78f2cf24ec56e33de6795dc6604c09946979a777ce4c10c76d25ec593774b701a69be46a5d19add8ef17cf449d994e3879f5a4857e0d28bbc18ba1314b37430d65104fafb827b0298543285a780cb788b7e054ba5b86fa431a02763a725691f0efe7637c11890143c884f20615090d21dbb733db30f6a1f6b3edf92f616d30db0df7171d0cf7076b6f9f7a8f1891c6ee509b82af166aa894132fef000f41e0f3782559ec94f7a2e372b140e7f5c9eb5a778668c7afd363ad91e45df6695e878adf798af0602c2a7e7d2992c660c87e3dd05711d74f5daed66600dce2823c5b214e6aec26fd4620a3f07379931f5876880f34e6587c1429cd94d37cfe818ef062cf921efc60594a7a5a8482c27278e36086e9ee49e5dde4f0aeb6822334f25c97f67f290ef38ec171e9b535b02e1a30d7ed12f342bd944b2f749bfe2f0a1641b45e8b80d00452cab64919597c1677a2798d0bd3f5855f3fff509510f992ff38408613066e8988ecc18508d5aa153c11992682fed9be3ad05a75e0f2c3473c5eca8c4a4b8353d355d0d9493b0449a90b195123077b68e1050ddf036e9ef2bf888be1df92267f3bf327c3ea60b4750146e1a6966f1c58675761eb754fdf5986dcfee1c0907a43c6890fea15db1c635d933ee423ecdf9e9b89092bf35a81e5f80069b887cd91f67535ab5928865a462299e6bbf14d7ce248f9363085f68f41afedf4db26d52c501440a95a743c7c56cb124c080517f88339648f058e38ccf7d0fd5f0db660ecfb26181ffe2efc3eee545a386c7a9a0ec5004aa3f6411e1893ffc9ba76d9aaff53418335de74a08d94316ff31156e3bed6c601a2788fbc388ebd771b6b5d30c04c689d2578ae5c71469b94a1ba2d8bd4ba9a4f59e672620c1fcd3eb8340aec5bf26b13bf7145258f5d9574d8bf31d0ca917b8e165c7b7a863c8cb67029a0d2bfa3180a8a51075de7aaaa473f6b3699eead797e0e2a3924d20b06f136c9091380a559aa1fe5de7b65e967a8b8b5159cc070e5bd3dfde3443d899338a035fb40f9d7a507f8a8a5837313ace750053b37e3fc9f0a48da4828959c2615120c15dde174842b6ce7716ceb582c09647b44ed84ffb3c1d28eb76aa6dbde55f1c692f57724adb7e1b997549995760dceb71f8eaf49a9fd7e1fda117e7a4975a9a258a19754e6a33a1770d53d700987d9ee5c3127147d0f18095a72221c84943f862f52431720405b26fb512eb1721dfd045aa6159d30594bdcfbd29063a2328a20e43c7e637b0c390f1b2290274fa52bca284caaef3d9a875b707430a59f49d2634002d41d5b32d82fb6f790fede06437cfd95581ee2185b206201efe6e3ebce5371a42376993a0417ffe43a0f1da018b8c7e2d1bb76b42000d8a2c3a1483135020099ef93c6b6968638e78ee695ad89c43d77a9dadcb3e6fc174376329c37c92f9762b61fefc7cd323afd9e97e307bca87b313548cce617e13751c672342aeb250bbe314b89c3ace869d4ce036e1c3915b3719313adb6e2d514193a9195e0c65585b084257e5556a7a53557a01430309a", 0xeff}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r5, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000d80)={{0x8, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x9, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x3f, 0x1, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x80000000, 0x3, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0xe, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0xb79, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x12, 0x4, 0x2, 0x7, 0x7fffffff, 0x1, 0x4, 0x10000, 0xe72, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000000, 0x100000001, 0x42, 0x3, 0x9, 0xc5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0x3, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x10]}) 5.405902465s ago: executing program 5 (id=2327): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000004c0)={0x1, 0x28, '\x00', 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delqdisc={0xe8, 0x25, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xf, 0x9}, {0x3, 0xfff2}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x7, 0xfffffff3, 0x0, 0xf, 0x14, 0x3}}, {0xa, 0x2, [0x4, 0x81, 0x6]}}, {{0x1c, 0x1, {0xc, 0x7, 0x3, 0x7, 0x6, 0x0, 0x101, 0x3}}, {0xa, 0x2, [0x4, 0x510, 0x4]}}, {{0x1c, 0x1, {0x8, 0x61, 0x1, 0x400, 0x0, 0xffffc8fe, 0x2, 0x2}}, {0x8, 0x2, [0xd, 0x4b27]}}, {{0x1c, 0x1, {0x8, 0x6, 0xb2, 0x8, 0x1, 0xe, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x6, 0x2, 0x5, 0x42c, 0x1, 0x4294, 0xa4, 0x4}}, {0xc, 0x2, [0x8, 0x9, 0xc, 0x4]}}]}]}, 0xe8}}, 0x20000000) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 5.17368652s ago: executing program 3 (id=2329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f00000004c0)={0x1, 0x28, '\x00', 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x40000007}}, 0x48) r6 = socket(0x11, 0x800000003, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@delqdisc={0xe8, 0x25, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xf, 0x9}, {0x3, 0xfff2}}, [@TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x7, 0xfffffff3, 0x0, 0xf, 0x14, 0x3}}, {0xa, 0x2, [0x4, 0x81, 0x6]}}, {{0x1c, 0x1, {0xc, 0x7, 0x3, 0x7, 0x6, 0x0, 0x101, 0x3}}, {0xa, 0x2, [0x4, 0x510, 0x4]}}, {{0x1c, 0x1, {0x8, 0x61, 0x1, 0x400, 0x0, 0xffffc8fe, 0x2, 0x2}}, {0x8, 0x2, [0xd, 0x4b27]}}, {{0x1c, 0x1, {0x8, 0x6, 0xb2, 0x8, 0x1, 0xe, 0x5, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x6, 0x2, 0x5, 0x42c, 0x1, 0x4294, 0xa4, 0x4}}, {0xc, 0x2, [0x8, 0x9, 0xc, 0x4]}}]}]}, 0xe8}}, 0x20000000) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) connect$rose(r9, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 4.390954682s ago: executing program 5 (id=2330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblc\x00', 0x0, 0x10001, 0x6f}, 0x2c) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="3303120081fd120000007ef52f555f2a0c09000000fd88a8", 0x18, 0xc0f1, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f48000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2c}) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x640842, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@ceph_nfs_confh={0x10, 0x2, {0xb, 0x9}}, 0x48cff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x408cd, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000000)={{}, {0x0, 0x989680}}, &(0x7f0000000040)) 3.971824618s ago: executing program 3 (id=2332): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x84) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0xed8, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x8, 0xf4, &(0x7f0000000300)="cab690a9de3be0c416a05cd7ec78619ca578de5d52d7c31b571b3290fdac14eecee263db30351f6e0243692611654d9c8121ad87b9a68d9e827eb9403e159b7ad0781a3a575e7e23ca7fc3cfc7741578bdb92560b083e18b3c95316441ad1e8794a96d4249bde98d0538bd75dce09e0288480b693c11c73f6dc4cb5ae39181a1168f1a07d2512df934a16ad2b183af447ecfa8f28e6a98ce8ec676e0ff82c3063cb7dd8ddec7b74e949870eabc7321b36090ca6f6fffdecfb7f1ecfe5433155b1fd33a2f95788f988d3b7a24930056f5bbbc3b90db2b46b69dd9aac9c4870d8c8c384e6f752c39a94102898961743d4c1d08be51"}]}) read$msr(r2, &(0x7f0000000080)=""/23, 0x17) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) (async) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x6c}, 0x0, @in=@local}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000000), 0xed8, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x18}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x6}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x8, 0xf4, &(0x7f0000000300)="cab690a9de3be0c416a05cd7ec78619ca578de5d52d7c31b571b3290fdac14eecee263db30351f6e0243692611654d9c8121ad87b9a68d9e827eb9403e159b7ad0781a3a575e7e23ca7fc3cfc7741578bdb92560b083e18b3c95316441ad1e8794a96d4249bde98d0538bd75dce09e0288480b693c11c73f6dc4cb5ae39181a1168f1a07d2512df934a16ad2b183af447ecfa8f28e6a98ce8ec676e0ff82c3063cb7dd8ddec7b74e949870eabc7321b36090ca6f6fffdecfb7f1ecfe5433155b1fd33a2f95788f988d3b7a24930056f5bbbc3b90db2b46b69dd9aac9c4870d8c8c384e6f752c39a94102898961743d4c1d08be51"}]}) (async) read$msr(r2, &(0x7f0000000080)=""/23, 0x17) (async) 3.831726796s ago: executing program 0 (id=2333): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) syz_emit_ethernet(0x6e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) socket(0x2, 0x80805, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) 3.831446961s ago: executing program 3 (id=2334): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000540)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xc, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x7}, {0x0, @remote, 0xe, 0x4, [0x7]}, @esp_ip4_spec={@rand_addr=0x64010101, @broadcast, 0x5, 0x9}, {0x0, @random="5a0a13e659b8", 0x8, 0x5, [0x10001, 0x9]}, 0xff, 0x3}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x6a0, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x28) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f0000000a00)=0x2, 0x5, 0x2, 0x0, &(0x7f0000000ac0)=0x1, 0x616e9570) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000fbffffff0200000005000000010000005aeff92961c3c5cb0e9b14a7af780a58932c2beb8dd0db5bbb1df39b4b0b1f4c37", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005000000050000000d00"/28], 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x8}, 0x8) 3.007056321s ago: executing program 3 (id=2335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x40001) sendmsg$802154_dgram(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x24, @long}, 0x14, &(0x7f0000000500)={&(0x7f0000000400)="e316cc6baecf5c13b914a84f5cfd733e70c0f4e424d7555fe87926658cd4ef062ca72d86ecb1210735e8b5031955d3f560cb38cadd353c42abe6ee8241b61e90fda446ab206255ca04109de1060a71fe130ddc32e9436a270236961068a3a7045dcd493b1ad2eb1ac7a14eb9e0504c59b54bbb9dd85709cb4e8dc2e7ffb16e2b5f39c58ec1ab3e26e6bfcad685a852affb6d7f3c5b698006238530ee4a86200a1162e8bc5331dd693deb1fecbd9a427dab4b87bd19197a9835c25928d127066f77b093287b3be18ef412a5d1b5596f199464591e904fbd784787a7c2c479e245fa7cdcde", 0xe4}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008800) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @ioapic={0x80a0000, 0x1, 0x9, 0x100, 0x0, [{0x3, 0x2, 0x93, '\x00', 0x1}, {0x6, 0xf9, 0x7, '\x00', 0x9}, {0x6, 0xf8, 0x1}, {0xbd, 0xe, 0xff, '\x00', 0x2}, {0x7, 0x2, 0x2, '\x00', 0x8}, {0x17, 0x8, 0x6, '\x00', 0x2}, {0xec, 0x9, 0x55}, {0xf8, 0x0, 0xec, '\x00', 0xa}, {0x9, 0x1, 0x8, '\x00', 0x5}, {0x6, 0x1, 0xfe, '\x00', 0xab}, {0x9, 0x3b, 0x4, '\x00', 0x18}, {0xbe, 0x41, 0x7, '\x00', 0x99}, {0xed, 0x1, 0x5, '\x00', 0x4}, {0x9, 0x7, 0x4, '\x00', 0xd}, {0x0, 0x4f, 0x5, '\x00', 0x1}, {0xf0, 0x3, 0x1, '\x00', 0xa}, {0x4, 0x9, 0x4}, {0x0, 0x5, 0x8, '\x00', 0x2}, {0xfc, 0x1, 0x6, '\x00', 0x7}, {0x5, 0x5, 0xb, '\x00', 0x2}, {0x7f, 0xe, 0x4, '\x00', 0xe2}, {0x8, 0x0, 0x1, '\x00', 0xec}, {0x2, 0x9, 0x2, '\x00', 0xf0}, {0x9, 0xca, 0x5, '\x00', 0x3}]}}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2, 0x7, 0x22}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa68"], 0x28}, 0x40c0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x40, 0x7, 0x5b, 0x8, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x80, 0x8000, 0x463a, 0x100}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.961045654s ago: executing program 7 (id=2336): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) statx(r0, &(0x7f0000000040)='./file1\x00', 0x800, 0x800, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 2.624086198s ago: executing program 7 (id=2337): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r7) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001500b595279d7000ffdbdf250a4002ff", @ANYRES32=r13, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x2004c041}, 0x400c0c0) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@setlink={0x2c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r15, 0x800, 0x80}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3404c045}, 0x10) r17 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x103400, 0x0) readv(r17, &(0x7f0000000240), 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r17, 0x4008550d, &(0x7f0000000340)) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="cc030000", @ANYRES16=r4, @ANYBLOB="000328bd7000fddbdf250e000000600001801400020076657468315f746f5f6873720000000014000200697036677265746170300000000000001400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="d00002800800020007000000c100040021302405aa6bf5b5cbd7d4871ef8db3b7f1ecbc2b5dec6373c5600a972668d1bb470c262e8c3e127442350e6a7ebb3f170ff1445435ac0ace28fd96637ff58e2ee5544728e6dc43850ba3061e2018402f3f4ed5b66ce0c78d22de4bf297063d3b47a8fbabf36d6bc90c868e6220e18d65dbb9fc8c7d28d6e5db70756fdf141c476b8485c741ac8fa658281df160f3228afee0ffa985cd77e7c9b335c612a6f703a66016dcaab2963f1e2818c104b40e1636568e5359546050e8125be7a0000004c0001800800030000000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="14000200776c616e3000000000000000000000001400020069705f7674693000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="3800018008000100", @ANYRES32=r13, @ANYBLOB="0800030001000000140002000000000000000000000000000000000008000100", @ANYRES32=r15, @ANYBLOB="0800030002000000"], 0x3cc}, 0x1, 0x0, 0x0, 0x48c4}, 0x804) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) 2.379103089s ago: executing program 7 (id=2338): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d89}, &(0x7f0000000440)=0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) 1.974405404s ago: executing program 0 (id=2339): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) get_mempolicy(0x0, &(0x7f0000000180), 0x5a, &(0x7f0000ffd000/0x2000)=nil, 0x5) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_opts(r0, 0x29, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x9, 0x13b7, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x68, 0x0, 0xe, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, {[@end, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x0, 0x11, "4e4f3dcb491f2eb9feac163f854969"}, {0x2, 0x2}]}]}}}}}) sendto(r0, &(0x7f0000000340)="c91ff337bfc67ce6386a23e0798a347aeec6fd0cb99843a5338f96274e08406b3269646328505562e8e266d76c44ef109d66a5aa2d70995d15b55072b911914a59f44c9c8baac3533cb691b0586d742697c90b6d0c10b74d7c74ecbc59201afefa196b0bfb356756da018e1ece5a5d4f055e63295e23a7ae648f9988687fd212c7fbfc06710bac167d16135425fd699bea2f977f28ab48423f947e7bc4acebd062d7f9704f6c124f1f6b2186b9307bc1a654ab555e15fa40e9e25816d0690146b08277ecf73a2b1652aa838c0928102c620d026ded80b696204ce631b91adfb436cdc0e47dc78d487ef83e", 0xeb, 0x40040, &(0x7f00000001c0)=@ll={0x11, 0x10, r3, 0x1, 0xda}, 0x80) r4 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000040)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r2, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) sendmmsg(r2, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) prlimit64(0x0, 0x7, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 1.851161397s ago: executing program 6 (id=2340): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) syz_emit_ethernet(0x6e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) 814.438721ms ago: executing program 0 (id=2341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) userfaultfd(0x801) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 812.995929ms ago: executing program 5 (id=2342): mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x15, "00000000000000000000ffff00"}) syz_open_pts(r1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 613.91658ms ago: executing program 0 (id=2343): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc={0x27, r1, 0x0, 0x7}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="59e53d485508972cb8741acaf3f44aa4d6e6e7e20e0b86bfcf94efbf73cb91bddb017f4568d6fd4814e968ac439796f73250c9e4ef81dc2e629a68bc8ee9b0a1c928d6d901d39019189160dba95e83e5a687c13cdacdffa65d57b3a28ecfceda31dfa307f99c64393c9b08f23f2bce362ac03b599f35be4206f84afee72d2c7116560f89f2e32edf38dad64cb9634ef6fc7c1a270bc11493e5ee51edc5feab675d1c0d657134b07357b917b71ec0ae853e79087cc8", 0xb5}], 0x1}, 0x40040) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) 545.816657ms ago: executing program 0 (id=2344): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0xfffffffffffffd44) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_CROP(r1, 0xc0405626, &(0x7f00000000c0)={0x5, {0x21b, 0x8, 0x8b, 0x6}}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8100, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0xb003, 0x20000401, 0x9, 0x3, 0x88d7, 0x80000001, 0x1007, 0xeffffffe, 0x1002, 0xffffffff, 0x7, 0x7, 0x10000006, 0x5, 0x5, 0x7, 0x8, 0x6, 0x9, 0x8e, 0x10d, 0x4005, 0x2, 0x80000001, 0x5, 0x0, 0x49, 0x12, 0xff, 0xfffffff1, 0x4000004]}) 544.665768ms ago: executing program 5 (id=2345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000000090605000000000000000000060000000900020073797a30000000000c000780060004404e2000000500010007000000f6c903b82106f659b7a8"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) 448.891758ms ago: executing program 0 (id=2346): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x18}}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) syz_emit_ethernet(0x6e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001300)=""/102400, 0x19000) syz_open_dev$dri(0x0, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @void}, 0x10) 447.671093ms ago: executing program 3 (id=2347): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_getparam(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = dup(0xffffffffffffffff) sendmsg$inet_sctp(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc015}, 0x4c8d5) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000780)={{0x9, 0x4, 0x2, 0x692d, 'syz1\x00', 0xd0}, 0x6, 0x75291b60fa26fa39, 0x9, 0x0, 0x0, 0x8, 'syz0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x78, &(0x7f0000000600)=""/120}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, 0x0) 377.872513ms ago: executing program 5 (id=2348): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffd, @private2, 0x400}, 0x1c) (async) listen(r1, 0x100101) r2 = accept4(r1, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x400, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x1c) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ff7000/0x4000)=nil, 0x4000}, 0x1}) (async) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7d, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x56a, 0xb3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x97, 0x20, 0x5, [{{0x9, 0x4, 0x0, 0xbf, 0x1, 0x3, 0x1, 0x1, 0xe, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7ab}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x0, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x4, 0xff, 0x3}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0xfd, 0x7, 0x4, 0x40, 0xc4}, 0x78, &(0x7f0000000280)={0x5, 0xf, 0x78, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x8, 0xf00, 0x1, [0xf, 0xff0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "80350a53e8c973db8cd4856766d3aaa8"}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x7ffffc0, 0xf, 0x401}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x40, 0x99, 0x6, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "7f3913dc867aca9c1fa4b7ef915c27fd"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x6, 0xf000, 0x0, [0x3f00, 0xc0c0, 0xc0, 0xc060, 0x1bf07]}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x447}}, {0xce, &(0x7f0000000340)=@string={0xce, 0x3, "526f9804a4fcad1ca956e32bea7a8056db1856e942817aac9e6e73e86a0d8a75590e861615644b1f534d15ae304580983f36663f40233ed92f9b0d01ae21a278926352ef8fc9ad456e939cad80299be57614232923f92f2f336413d911bdb9e33801ebfc7aea644201f6272671fb8d487f3d9e89b1081d4c03327571b92f50bd374d3f95b62be8060d5294ad85bac2cc74fccefde528d53a97c512a9335ea2307aa3806fa17ba3909354812549249c7526143b65ea3d4daafa394c3ed7fcb09cc32eecb6b0bf42fcd6defcd5"}}, {0x8f, &(0x7f0000000440)=@string={0x8f, 0x3, "b8466ec7bfa9b3d4f8cdc7e1bfbb7f676dbeda6cae2caaaca5cfbae3eef5b9bc1d5377d49a0825f770bf76b9e71fff144043956c212bcdd21dd8366d0b8644f9fe97368dc5614358af336f2cb03b3ad6d286ad22e46d05883ed2488e89118a920e7722e0b64c7cbf2a8c33045701e038d78fa8893a65d5dd364f8df951d0946f095e259c5de189993ee346a0cb"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0c}}, {0xf1, &(0x7f0000000540)=@string={0xf1, 0x3, "69eb60b7c02f24055b31adda1cb43758db4c738b359a42d3cf14dd1fc86534208cb3aa7b0d17193113d9131b1e92bbb0b62c5f5ada03087c66780df2b89df08870d9b67b7b452db7c085dd628e8c752b09261717b3f8a62506f40ad5797b71492a9c14968065651e5bdd510ea5a50b7d50259a2484adf6c21294cce8925bc8588ce75e2408bcd8d6bc881000ed06805963db7b5ef712bab78ed54fb62fa04ae40ef5810bf0efbc956b0a11fdb5aa22041d921224227dbe3c6c597d0b23c81a3e99aec54dba5d95132ba843227f08bded1a0bd1b4f54da11cddf683c68a5de11ea76b0b9767eb2b4c695eae331effff"}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) (async) r6 = epoll_create(0xff9) (async) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r7, &(0x7f0000000000)=0x8, r7, 0x0, 0x4, 0x0) (async) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x9000001c}) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x918) (async, rerun: 64) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) (rerun: 64) sched_setscheduler(r9, 0x0, &(0x7f0000000080)=0x8) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) 0s ago: executing program 7 (id=2349): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x8015, 0x3, 'dh\x00', 0x1, 0x4, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0x1, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x10001, 0x4, @fr=0x0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0021}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000094) kernel console output (not intermixed with test programs): c: denied { read } for pid=13027 comm="syz.3.1686" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 641.881432][ T30] audit: type=1400 audit(1768123117.666:1161): avc: denied { open } for pid=13027 comm="syz.3.1686" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 641.973564][ T30] audit: type=1400 audit(1768123117.676:1162): avc: denied { ioctl } for pid=13027 comm="syz.3.1686" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 642.238719][T13049] random: crng reseeded on system resumption [ 643.532709][ T30] audit: type=1400 audit(1768123119.786:1163): avc: denied { bind } for pid=13056 comm="syz.0.1693" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.595783][T10193] Bluetooth: hci2: Unable to find connection for big 0x00 [ 643.613826][ T30] audit: type=1400 audit(1768123119.816:1164): avc: denied { name_bind } for pid=13056 comm="syz.0.1693" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 643.635952][ T30] audit: type=1400 audit(1768123119.816:1165): avc: denied { node_bind } for pid=13056 comm="syz.0.1693" saddr=100::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 643.671661][ T5919] usb 8-1: USB disconnect, device number 11 [ 644.483374][ T24] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 644.492361][T13072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1696'. [ 644.673281][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 644.690599][ T24] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 644.712386][ T24] usb 1-1: config 1 has no interface number 0 [ 644.746128][ T24] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 644.759323][ T24] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 644.771097][ T24] usb 1-1: config 1 interface 214 has no altsetting 0 [ 644.785423][ T24] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 644.796962][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.806139][ T24] usb 1-1: Product: syz [ 644.810406][ T24] usb 1-1: Manufacturer: syz [ 644.831016][ T24] usb 1-1: SerialNumber: syz [ 644.853520][ T912] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 644.864186][T13064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 644.871428][T13064] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 644.881301][ T24] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 644.894421][ T24] scsi host1: usb-storage 1-1:1.214 [ 645.073258][ T912] usb 6-1: Using ep0 maxpacket: 16 [ 645.312708][ T912] usb 6-1: too many endpoints for config 0 interface 0 altsetting 238: 237, using maximum allowed: 30 [ 645.691841][ T912] usb 6-1: config 0 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.711654][ T912] usb 6-1: config 0 interface 0 altsetting 238 has 1 endpoint descriptor, different from the interface descriptor's value: 237 [ 645.726227][ T912] usb 6-1: config 0 interface 0 has no altsetting 0 [ 646.397632][T13091] random: crng reseeded on system resumption [ 646.421743][ T177] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 646.459518][ T912] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 646.471558][ T177] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 646.483125][ T912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.509947][ T912] usb 6-1: config 0 descriptor?? [ 646.564122][ T177] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 646.668567][ T177] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 646.713362][ T2130] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 646.726082][ T24] usb 1-1: USB disconnect, device number 61 [ 646.744893][ T6936] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 646.783338][ T49] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 646.814008][ T6936] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 646.862590][ T2130] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 646.870630][ T6936] sd 1:0:0:1: [sdc] Sense not available. [ 646.898549][ T6936] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 646.919557][ T6936] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 646.939527][ T6936] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 646.956689][ T30] audit: type=1400 audit(1768123123.206:1166): avc: denied { bind } for pid=13098 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 646.973390][ T6936] sd 1:0:0:1: [sdc] Asking for cache data failed [ 647.000241][ T912] hid (null): global environment stack underflow [ 647.007605][ T49] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.042566][ T6936] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 647.042618][ T912] mcp2221 0003:04D8:00DD.0008: global environment stack underflow [ 647.059572][ T49] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 647.076989][ T30] audit: type=1400 audit(1768123123.246:1167): avc: denied { setopt } for pid=13098 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 647.106410][ T912] mcp2221 0003:04D8:00DD.0008: item 0 4 1 11 parsing failed [ 647.118707][ T49] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 647.139482][ T912] mcp2221 0003:04D8:00DD.0008: can't parse reports [ 647.146185][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.162546][ T912] mcp2221 0003:04D8:00DD.0008: probe with driver mcp2221 failed with error -22 [ 647.188867][ T49] usb 7-1: Product: syz [ 647.206486][ T49] usb 7-1: Manufacturer: syz [ 647.229019][ T49] usb 7-1: SerialNumber: syz [ 647.275696][ T49] hub 7-1:1.0: bad descriptor, ignoring hub [ 647.290082][ T49] hub 7-1:1.0: probe with driver hub failed with error -5 [ 647.312533][ T30] audit: type=1400 audit(1768123123.566:1168): avc: denied { create } for pid=13098 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 647.347952][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 647.375240][ T30] audit: type=1400 audit(1768123123.636:1169): avc: denied { listen } for pid=13098 comm="syz.3.1707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 647.413986][ T6936] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 647.525692][T13095] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1705'. [ 647.758190][ T30] audit: type=1400 audit(1768123124.016:1170): avc: denied { read write } for pid=13094 comm="syz.6.1705" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 647.762218][ T8908] udevd[8908]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 647.900309][ T30] audit: type=1400 audit(1768123124.016:1171): avc: denied { open } for pid=13094 comm="syz.6.1705" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 647.953952][ T5943] usb 7-1: USB disconnect, device number 19 [ 648.020662][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1710'. [ 648.050402][ T30] audit: type=1400 audit(1768123124.076:1172): avc: denied { execute } for pid=13094 comm="syz.6.1705" path="/108/cpu.stat" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 648.162683][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 649.116624][ T49] usb 6-1: USB disconnect, device number 47 [ 649.398343][T13134] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1715'. [ 649.410780][ T177] wlan1: Trigger new scan to find an IBSS to join [ 649.486892][ T5920] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 650.013275][ T5920] usb 8-1: Using ep0 maxpacket: 32 [ 650.032441][ T5920] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 650.091229][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 650.133426][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 650.167308][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 650.253243][ T5920] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 650.314946][ T5920] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 650.342041][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.361485][ T5920] usb 8-1: Product: syz [ 650.380780][ T5920] usb 8-1: Manufacturer: syz [ 650.391138][ T5920] usb 8-1: SerialNumber: syz [ 650.508061][ T5920] usb 8-1: config 0 descriptor?? [ 651.008369][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 651.036298][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 651.255734][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.267137][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.277538][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.289362][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.302887][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.319795][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.499468][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.513092][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.526730][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.543095][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.557151][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.575926][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.730043][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.742880][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.757354][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.775885][T13166] tmpfs: Bad value for 'mpol' [ 651.781107][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 651.791103][T13166] futex_wake_op: syz.5.1722 tries to shift op by 144; fix this program [ 651.801321][ T5920] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 652.007439][ T5920] input input17: Timeout waiting for response from device. [ 652.035252][ T5920] usb 8-1: USB disconnect, device number 12 [ 652.247356][ T30] audit: type=1400 audit(1768123128.496:1173): avc: denied { create } for pid=13171 comm="syz.7.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 652.364509][T13180] FAULT_INJECTION: forcing a failure. [ 652.364509][T13180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.386036][ T30] audit: type=1400 audit(1768123128.506:1174): avc: denied { bind } for pid=13171 comm="syz.7.1723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 652.424632][T13180] CPU: 1 UID: 0 PID: 13180 Comm: syz.5.1725 Tainted: G L syzkaller #0 PREEMPT(full) [ 652.424663][T13180] Tainted: [L]=SOFTLOCKUP [ 652.424669][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.424680][T13180] Call Trace: [ 652.424686][T13180] [ 652.424693][T13180] dump_stack_lvl+0x16c/0x1f0 [ 652.424719][T13180] should_fail_ex+0x512/0x640 [ 652.424753][T13180] _copy_from_user+0x2e/0xd0 [ 652.424778][T13180] copy_msghdr_from_user+0x98/0x160 [ 652.424798][T13180] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 652.424828][T13180] ___sys_sendmsg+0xfe/0x1d0 [ 652.424847][T13180] ? __pfx____sys_sendmsg+0x10/0x10 [ 652.424894][T13180] __sys_sendmsg+0x16d/0x220 [ 652.424914][T13180] ? __pfx___sys_sendmsg+0x10/0x10 [ 652.424945][T13180] do_syscall_64+0xcd/0xf80 [ 652.424974][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.424991][T13180] RIP: 0033:0x7fdd7f38f749 [ 652.425005][T13180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.425022][T13180] RSP: 002b:00007fdd8020d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 652.425037][T13180] RAX: ffffffffffffffda RBX: 00007fdd7f5e5fa0 RCX: 00007fdd7f38f749 [ 652.425049][T13180] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 652.425059][T13180] RBP: 00007fdd8020d090 R08: 0000000000000000 R09: 0000000000000000 [ 652.425071][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 652.425082][T13180] R13: 00007fdd7f5e6038 R14: 00007fdd7f5e5fa0 R15: 00007fffd975f3c8 [ 652.425108][T13180] [ 652.810545][ T30] audit: type=1400 audit(1768123129.066:1175): avc: denied { ioctl } for pid=13184 comm="syz.5.1726" path="socket:[39184]" dev="sockfs" ino=39184 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 652.888402][T13195] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1728'. [ 653.552006][ T2997] wlan1: Trigger new scan to find an IBSS to join [ 653.558686][ T5920] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 653.573148][ T30] audit: type=1400 audit(1768123129.826:1176): avc: denied { write } for pid=13199 comm="syz.6.1732" name="ip6_tables_names" dev="proc" ino=4026533651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 653.637886][ T30] audit: type=1400 audit(1768123129.876:1177): avc: denied { ioctl } for pid=13199 comm="syz.6.1732" path="socket:[39195]" dev="sockfs" ino=39195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 653.725396][T13205] geneve2: entered promiscuous mode [ 653.761153][T13205] geneve2: entered allmulticast mode [ 653.774046][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 653.802653][ T5920] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 654.002905][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.016270][ T5920] usb 1-1: Product: syz [ 654.020553][ T5920] usb 1-1: Manufacturer: syz [ 654.025694][ T5920] usb 1-1: SerialNumber: syz [ 654.043307][ T5920] usb 1-1: config 0 descriptor?? [ 654.055408][ T5920] gspca_main: sq905-2.14.0 probing 2770:9120 [ 654.575681][ T5920] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 654.581625][ T2032] wlan1: Creating new IBSS network, BSSID 1a:24:0f:17:2f:96 [ 654.583063][ T5920] sq905 1-1:0.0: probe with driver sq905 failed with error -110 [ 654.903333][T13229] kAFS: unable to lookup cell '/,cL' [ 654.954354][T13230] random: crng reseeded on system resumption [ 655.530535][ T30] audit: type=1400 audit(1768123131.786:1178): avc: denied { create } for pid=13237 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 655.682257][T13238] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 655.716223][ T30] audit: type=1400 audit(1768123131.956:1179): avc: denied { map } for pid=13237 comm="syz.6.1739" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 655.747268][ T30] audit: type=1400 audit(1768123131.956:1180): avc: denied { execute } for pid=13237 comm="syz.6.1739" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 655.803882][ T30] audit: type=1400 audit(1768123131.966:1181): avc: denied { write } for pid=13237 comm="syz.6.1739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 655.914146][ T49] usb 1-1: USB disconnect, device number 62 [ 656.009272][ T30] audit: type=1400 audit(1768123132.266:1182): avc: denied { read } for pid=13246 comm="syz.0.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 656.524722][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1744'. [ 656.562664][T13259] loop2: detected capacity change from 0 to 7 [ 656.584040][T13259] Dev loop2: unable to read RDB block 7 [ 656.596335][T13259] loop2: unable to read partition table [ 656.602206][T13259] loop2: partition table beyond EOD, truncated [ 656.628251][T13259] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 656.712981][T13262] netlink: set zone limit has 4 unknown bytes [ 657.563891][ T5188] Dev loop2: unable to read RDB block 7 [ 657.576319][ T5188] loop2: unable to read partition table [ 657.585985][ T5188] loop2: partition table beyond EOD, truncated [ 659.253429][ T912] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 659.416734][T13294] random: crng reseeded on system resumption [ 660.085622][ T912] usb 6-1: Using ep0 maxpacket: 32 [ 660.232061][ T912] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 660.249597][ T912] usb 6-1: config 0 has no interface number 0 [ 660.394276][ T912] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 660.430379][ T912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.843666][T10579] Bluetooth: hci5: command 0x0c1a tx timeout [ 660.937702][ T912] usb 6-1: Product: syz [ 660.942001][ T912] usb 6-1: Manufacturer: syz [ 660.956286][ T912] usb 6-1: SerialNumber: syz [ 660.990535][ T912] usb 6-1: config 0 descriptor?? [ 661.054178][ T912] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 661.681685][ T912] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 661.852385][ T912] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 662.275461][T13323] bridge_slave_0: left allmulticast mode [ 662.281154][T13323] bridge_slave_0: left promiscuous mode [ 662.287549][T13323] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.435962][T13324] usb usb1: usbfs: process 13324 (syz.6.1758) did not claim interface 0 before use [ 662.455515][T13323] bridge_slave_1: left allmulticast mode [ 662.461190][T13323] bridge_slave_1: left promiscuous mode [ 662.468249][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.499581][T13323] bond0: (slave bond_slave_0): Releasing backup interface [ 662.515971][T13323] bond0: (slave bond_slave_1): Releasing backup interface [ 662.531156][T13323] team0: Port device team_slave_0 removed [ 662.541812][T13323] team0: Port device team_slave_1 removed [ 662.548246][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.555801][T13323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.564367][T13323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.571756][T13323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.580342][T13323] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.943550][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 663.055848][ T5919] usb 6-1: USB disconnect, device number 48 [ 663.126862][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 663.145390][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 663.157153][ T5919] quatech2 6-1:0.51: device disconnected [ 663.563537][ T2997] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.790982][T13340] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1763'. [ 663.867469][T13341] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1761'. [ 664.630257][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1765'. [ 664.670889][T13349] loop2: detected capacity change from 0 to 7 [ 664.701023][T13349] Dev loop2: unable to read RDB block 7 [ 664.707287][T13349] loop2: unable to read partition table [ 664.713618][T13349] loop2: partition table beyond EOD, truncated [ 664.719884][T13349] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 665.041321][T13358] random: crng reseeded on system resumption [ 665.309362][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 665.309376][ T30] audit: type=1400 audit(1768123141.566:1184): avc: denied { write } for pid=13360 comm="syz.7.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 665.403337][T13361] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1769'. [ 666.223557][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1772'. [ 666.334907][T13371] !: renamed from dummy0 (while UP) [ 666.825323][ T30] audit: type=1400 audit(1768123143.046:1185): avc: denied { create } for pid=13372 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 666.847157][ T5919] hid_parser_main: 7 callbacks suppressed [ 666.847170][ T5919] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 666.872150][ T30] audit: type=1400 audit(1768123143.066:1186): avc: denied { read write } for pid=13372 comm="syz.5.1773" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 667.055332][ T5919] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 667.169992][ T30] audit: type=1400 audit(1768123143.066:1187): avc: denied { open } for pid=13372 comm="syz.5.1773" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 667.363009][ T30] audit: type=1400 audit(1768123143.456:1188): avc: denied { bind } for pid=13372 comm="syz.5.1773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 667.571667][T13383] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1775'. [ 667.680537][T13385] usb usb1: usbfs: process 13385 (syz.7.1774) did not claim interface 0 before use [ 668.493303][ T30] audit: type=1400 audit(1768123144.746:1189): avc: denied { shutdown } for pid=13387 comm="syz.6.1776" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 668.764031][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 300 seconds [ 668.774797][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 300 seconds [ 668.796939][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 300 seconds [ 668.808000][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 300 seconds [ 669.153336][ T49] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 669.177571][T13401] random: crng reseeded on system resumption [ 669.443410][ T49] usb 8-1: Using ep0 maxpacket: 16 [ 669.465946][ T49] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 669.494833][ T49] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.516167][ T49] usb 8-1: Product: syz [ 669.530680][ T49] usb 8-1: Manufacturer: syz [ 669.550730][ T49] usb 8-1: SerialNumber: syz [ 669.579438][ T49] usb 8-1: config 0 descriptor?? [ 669.603859][ T49] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 669.898323][ T49] pwc: Warning: more than 1 configuration available. [ 669.905979][ T49] pwc: Failed to set LED on/off time (-71) [ 669.920397][ T49] pwc: send_video_command error -71 [ 669.925859][ T49] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 669.934137][ T49] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 669.950196][ T49] usb 8-1: USB disconnect, device number 13 [ 670.030384][ T30] audit: type=1400 audit(1768123146.286:1190): avc: granted { setsecparam } for pid=13413 comm="syz.3.1784" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 670.162135][ T30] audit: type=1400 audit(1768123146.286:1191): avc: denied { map } for pid=13413 comm="syz.3.1784" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 670.305301][T13418] netlink: 'syz.5.1785': attribute type 4 has an invalid length. [ 670.313044][T13418] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1785'. [ 670.323254][T13418] .`: renamed from bond0 [ 670.701869][ T30] audit: type=1400 audit(1768123146.286:1192): avc: denied { read write } for pid=13413 comm="syz.3.1784" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 670.730870][ T30] audit: type=1400 audit(1768123146.286:1193): avc: denied { open } for pid=13413 comm="syz.3.1784" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 671.083478][T13425] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1787'. [ 671.618555][ T5919] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 671.744377][T13429] usb usb1: usbfs: process 13429 (syz.5.1788) did not claim interface 0 before use [ 672.226314][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 672.239165][ T5919] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 672.818332][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.858200][ T5919] usb 7-1: Product: syz [ 672.881812][ T5919] usb 7-1: Manufacturer: syz [ 672.917361][ T5919] usb 7-1: SerialNumber: syz [ 672.954289][ T5919] usb 7-1: config 0 descriptor?? [ 673.050965][ T5919] usb 7-1: can't set config #0, error -71 [ 673.194139][ T5919] usb 7-1: USB disconnect, device number 20 [ 673.431651][T13444] random: crng reseeded on system resumption [ 674.150981][T13456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1797'. [ 674.202860][ T30] audit: type=1400 audit(1768123150.456:1194): avc: denied { getopt } for pid=13455 comm="syz.0.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.253293][ T5919] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 674.999351][ T30] audit: type=1400 audit(1768123151.206:1195): avc: denied { mounton } for pid=13459 comm="syz.5.1798" path="/271/file0" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 675.253273][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 675.282273][ T30] audit: type=1400 audit(1768123151.206:1196): avc: denied { mount } for pid=13459 comm="syz.5.1798" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 675.354503][ T30] audit: type=1400 audit(1768123151.496:1197): avc: denied { unmount } for pid=7869 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 675.475939][T13470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1799'. [ 675.506705][ T30] audit: type=1400 audit(1768123151.756:1198): avc: denied { bind } for pid=13464 comm="syz.6.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 675.648848][ T30] audit: type=1400 audit(1768123151.796:1199): avc: denied { write } for pid=13468 comm="syz.7.1793" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 675.674427][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 675.682412][ T30] audit: type=1400 audit(1768123151.796:1200): avc: denied { watch watch_reads } for pid=13468 comm="syz.7.1793" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 675.719588][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.855169][ T5919] usb 4-1: Product: syz [ 675.877872][ T5919] usb 4-1: Manufacturer: syz [ 675.885003][ T5919] usb 4-1: SerialNumber: syz [ 675.926298][T13475] usb usb1: usbfs: process 13475 (syz.0.1801) did not claim interface 0 before use [ 676.655098][ T5919] usb 4-1: config 0 descriptor?? [ 676.700325][ T30] audit: type=1400 audit(1768123152.696:1201): avc: denied { write } for pid=13468 comm="syz.7.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 676.730854][ T5919] usb 4-1: can't set config #0, error -71 [ 676.803123][ T30] audit: type=1400 audit(1768123152.706:1202): avc: denied { read } for pid=13468 comm="syz.7.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 676.845223][ T5919] usb 4-1: USB disconnect, device number 53 [ 677.682339][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1803'. [ 678.703336][ T912] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 678.933385][ T912] usb 8-1: Using ep0 maxpacket: 16 [ 678.983280][ T89] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 679.002005][ T912] usb 8-1: config 1 has an invalid interface number: 214 but max is 0 [ 679.114329][ T912] usb 8-1: config 1 has no interface number 0 [ 679.124480][ T912] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 679.136072][ T912] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 679.148401][ T912] usb 8-1: config 1 interface 214 has no altsetting 0 [ 679.166340][ T912] usb 8-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 679.194967][ T912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.203434][ T5919] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 679.211503][ T912] usb 8-1: Product: syz [ 679.223763][ T89] usb 4-1: Using ep0 maxpacket: 16 [ 679.226809][ T912] usb 8-1: Manufacturer: syz [ 679.234827][ T89] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.235958][ T912] usb 8-1: SerialNumber: syz [ 679.353279][ T89] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.363443][T13491] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 679.370620][T13491] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 679.377970][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 679.379356][ T912] ums-alauda 8-1:1.214: USB Mass Storage device detected [ 679.391012][ T7532] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 679.403602][ T89] usb 4-1: config 0 interface 0 has no altsetting 0 [ 679.413305][ T5919] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 679.430765][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.438943][ T89] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 679.449107][ T912] scsi host1: usb-storage 8-1:1.214 [ 679.459084][ T5919] usb 1-1: Product: syz [ 679.465449][ T89] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.475672][ T5919] usb 1-1: Manufacturer: syz [ 679.484570][ T5919] usb 1-1: SerialNumber: syz [ 679.495236][ T89] usb 4-1: config 0 descriptor?? [ 679.509233][ T5919] usb 1-1: config 0 descriptor?? [ 679.563580][ T7532] usb 7-1: Using ep0 maxpacket: 16 [ 679.575944][ T7532] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 679.596541][ T7532] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.604864][ T7532] usb 7-1: Product: syz [ 679.609386][ T7532] usb 7-1: Manufacturer: syz [ 679.614741][ T7532] usb 7-1: SerialNumber: syz [ 679.630646][ T7532] usb 7-1: config 0 descriptor?? [ 679.636886][ T7532] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 679.916584][ T89] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 679.932230][ T89] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 679.948787][ T89] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 679.965469][ T89] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 679.982985][ T89] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0 [ 680.003339][ T5919] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 680.016621][ T89] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 680.044555][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 680.142428][ T5919] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 680.152885][ T89] usb 4-1: USB disconnect, device number 54 [ 680.187093][ T5919] usb 1-1: media controller created [ 680.560000][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.572694][ T13] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 680.603685][T13511] fido_id[13511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 680.618058][ T30] audit: type=1400 audit(1768123156.866:1203): avc: denied { unlink } for pid=13500 comm="syz.0.1808" name="#6e" dev="tmpfs" ino=1990 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 680.669955][ T13] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 680.701896][ T30] audit: type=1400 audit(1768123156.956:1204): avc: denied { mount } for pid=13500 comm="syz.0.1808" name="/" dev="overlay" ino=1985 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 680.796544][ T5919] zl10353_read_register: readreg error (reg=127, ret==0) [ 680.805152][T13501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.975349][ T912] usb 8-1: USB disconnect, device number 14 [ 680.985222][ T5919] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 681.570617][ T5919] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 681.607667][ T13] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 681.616974][ T2968] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 681.635382][T13501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.772972][ T2968] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 681.795184][ T2968] sd 1:0:0:0: [sdb] Sense not available. [ 681.807212][ T2968] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 681.931446][ T6447] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 681.979310][ T6447] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 681.985457][ T13] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 681.990267][ T2968] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 682.071477][T13527] random: crng reseeded on system resumption [ 682.575575][ T6447] sd 1:0:0:1: [sdc] Sense not available. [ 682.585695][ T2968] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 682.762008][ T6447] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 682.766521][ T7532] pwc: Warning: more than 1 configuration available. [ 682.832986][ T2968] sd 1:0:0:0: [sdb] Asking for cache data failed [ 682.848489][ T6447] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 682.963500][ T2968] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 682.971698][ T6447] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 682.979544][ T6447] sd 1:0:0:1: [sdc] Asking for cache data failed [ 682.989316][ T6447] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 683.056513][T13534] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1812'. [ 683.454132][ T7532] pwc: Failed to set LED on/off time (-71) [ 683.505261][ T2968] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 683.514650][ T7532] pwc: send_video_command error -71 [ 683.698253][ T7532] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 683.828486][ T30] audit: type=1400 audit(1768123159.956:1205): avc: denied { ioctl } for pid=13535 comm="syz.3.1815" path="socket:[40760]" dev="sockfs" ino=40760 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 683.863983][ T5996] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 683.893869][ T6447] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 684.002210][ T7532] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 684.123537][ T7532] usb 7-1: USB disconnect, device number 21 [ 684.230279][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1817'. [ 684.257397][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 684.808333][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 685.209746][T13566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1822'. [ 685.604466][ T5933] udevd[5933]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 685.623135][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.630851][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.953353][ T5919] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 686.524882][ T5919] usb 7-1: no configurations [ 686.529590][ T5919] usb 7-1: can't read configurations, error -22 [ 686.683286][ T5919] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 686.887983][ T24] usb 1-1: USB disconnect, device number 63 [ 686.906795][ T30] audit: type=1400 audit(1768123163.166:1206): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 686.991847][ T30] audit: type=1400 audit(1768123163.216:1207): avc: denied { read } for pid=13578 comm="syz.5.1827" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 687.063829][ T5919] usb 7-1: no configurations [ 687.068496][ T5919] usb 7-1: can't read configurations, error -22 [ 687.076206][ T5919] usb usb7-port1: attempt power cycle [ 687.082546][ T30] audit: type=1400 audit(1768123163.216:1208): avc: denied { open } for pid=13578 comm="syz.5.1827" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 687.109187][ T30] audit: type=1400 audit(1768123163.216:1209): avc: denied { ioctl } for pid=13578 comm="syz.5.1827" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 687.134934][ T24] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 687.300287][ T30] audit: type=1400 audit(1768123163.556:1210): avc: denied { create } for pid=13582 comm="syz.0.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 687.523342][ T5919] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 687.736244][ T5919] usb 7-1: no configurations [ 687.764816][ T5919] usb 7-1: can't read configurations, error -22 [ 687.899994][ T6736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 687.967774][ T89] libceph: connect (1)[c::]:6789 error -101 [ 687.974745][ T89] libceph: mon0 (1)[c::]:6789 connect error [ 688.043492][ T5878] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 688.051082][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 688.083324][ T5919] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 688.105035][ T5919] usb 7-1: no configurations [ 688.109671][ T5919] usb 7-1: can't read configurations, error -22 [ 688.116243][ T5919] usb usb7-port1: unable to enumerate USB device [ 688.223347][ T5878] usb 4-1: Using ep0 maxpacket: 16 [ 688.228594][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 688.236278][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 688.255649][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 688.262977][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 688.279234][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.334700][ T24] usb 8-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 688.345336][ T5878] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 688.365641][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.379872][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.389128][ T5878] usb 4-1: Product: syz [ 688.393505][ T5878] usb 4-1: Manufacturer: syz [ 688.403779][ T24] usb 8-1: config 0 descriptor?? [ 688.408811][ T5878] usb 4-1: SerialNumber: syz [ 688.742476][ T5878] usb 4-1: config 0 descriptor?? [ 688.793719][ T5919] libceph: connect (1)[c::]:6789 error -101 [ 688.799880][ T5919] libceph: mon0 (1)[c::]:6789 connect error [ 688.881091][ T5878] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 688.974621][ T24] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 689.055010][ T24] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 689.163033][ T24] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 689.260088][ T24] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 689.296875][ T24] logitech 0003:046D:C298.000B: unknown main item tag 0x0 [ 689.483939][ T30] audit: type=1400 audit(1768123165.746:1211): avc: denied { ioctl } for pid=13609 comm="syz.5.1835" path="socket:[41436]" dev="sockfs" ino=41436 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 689.862206][ T5878] pwc: Warning: more than 1 configuration available. [ 689.884847][ T24] logitech 0003:046D:C298.000B: hidraw0: USB HID v0.09 Device [HID 046d:c298] on usb-dummy_hcd.7-1/input0 [ 689.951496][ T5878] pwc: Failed to set LED on/off time (-71) [ 689.995426][ T24] logitech 0003:046D:C298.000B: no inputs found [ 690.042698][ T5878] pwc: send_video_command error -71 [ 690.110568][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 690.209230][ T5878] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 690.316384][ T5878] usb 4-1: USB disconnect, device number 55 [ 690.743614][T13592] ceph: No mds server is up or the cluster is laggy [ 691.369430][ T30] audit: type=1400 audit(1768123167.626:1212): avc: denied { create } for pid=13629 comm="syz.6.1839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 691.604080][ T5891] usb 8-1: USB disconnect, device number 15 [ 691.820401][T13640] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1841'. [ 692.436528][T13643] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1842'. [ 693.927625][T13629] delete_channel: no stack [ 693.992478][ T5878] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 694.062637][T13668] mmap: syz.6.1849 (13668) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 694.163675][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 694.372833][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 694.393980][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.413504][ T5878] usb 1-1: Product: syz [ 694.419050][T13670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 694.423368][ T5878] usb 1-1: Manufacturer: syz [ 694.453421][ T5878] usb 1-1: SerialNumber: syz [ 694.479362][ T5878] usb 1-1: config 0 descriptor?? [ 694.497255][ T5878] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 695.283471][ T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 695.643423][ T6380] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.663326][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 695.692586][ T24] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 695.704930][ T24] usb 7-1: config 0 has no interface number 0 [ 695.855010][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 695.901530][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.929655][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1854'. [ 696.030701][ T24] usb 7-1: Product: syz [ 696.264431][ T24] usb 7-1: Manufacturer: syz [ 696.280389][ T24] usb 7-1: SerialNumber: syz [ 696.288543][ T24] usb 7-1: config 0 descriptor?? [ 696.334289][ T5878] pwc: Warning: more than 1 configuration available. [ 696.452248][ T5878] pwc: Failed to set LED on/off time (-71) [ 696.465270][ T5878] pwc: send_video_command error -71 [ 696.476908][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 696.493872][ T5878] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 697.006329][ T24] radio-si470x 7-1:0.35: this is not a si470x device. [ 697.060850][ T5878] usb 1-1: USB disconnect, device number 64 [ 697.069333][ T24] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 697.133126][ T24] usb 7-1: USB disconnect, device number 26 [ 697.379870][T13710] usb usb1: usbfs: process 13710 (syz.3.1856) did not claim interface 0 before use [ 698.290980][ T30] audit: type=1400 audit(1768123174.546:1213): avc: denied { connect } for pid=13717 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 699.474370][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 330 seconds [ 699.485202][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 330 seconds [ 699.503397][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 330 seconds [ 699.514475][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 330 seconds [ 699.670436][T13734] random: crng reseeded on system resumption [ 700.549258][T13740] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1865'. [ 700.902261][T13752] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1866'. [ 700.942786][T13752] loop2: detected capacity change from 0 to 7 [ 701.004842][T13754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1867'. [ 701.403721][T13752] Dev loop2: unable to read RDB block 7 [ 701.409565][T13752] loop2: unable to read partition table [ 701.419577][T13752] loop2: partition table beyond EOD, truncated [ 701.425851][T13752] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 701.496746][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1869'. [ 701.677003][T13758] loop2: detected capacity change from 0 to 7 [ 701.685148][T13758] Dev loop2: unable to read RDB block 7 [ 701.690730][T13758] loop2: unable to read partition table [ 701.895948][T13758] loop2: partition table beyond EOD, truncated [ 702.523388][T13758] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 702.583387][ T5878] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 702.813905][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 702.839912][ T5878] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 703.193334][ T5878] usb 4-1: config 0 has no interface number 0 [ 703.284212][ T5878] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 703.325887][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.385800][ T5878] usb 4-1: Product: syz [ 703.433804][ T5878] usb 4-1: Manufacturer: syz [ 703.440493][ T5878] usb 4-1: SerialNumber: syz [ 703.493257][ T5919] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 703.511039][ T5878] usb 4-1: config 0 descriptor?? [ 703.546175][ T5878] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 703.603386][ T6500] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 703.643361][ T5919] usb 7-1: Using ep0 maxpacket: 16 [ 703.650023][ T5919] usb 7-1: config 1 has an invalid interface number: 214 but max is 0 [ 703.671254][ T5919] usb 7-1: config 1 has no interface number 0 [ 703.698867][ T5919] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 703.719040][ T5919] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 703.767278][ T6500] usb 6-1: Using ep0 maxpacket: 16 [ 703.779939][ T6500] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 703.793929][ T5919] usb 7-1: config 1 interface 214 has no altsetting 0 [ 703.806856][ T6500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.820759][ T5919] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 703.834511][ T6500] usb 6-1: Product: syz [ 703.838677][ T6500] usb 6-1: Manufacturer: syz [ 703.856700][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.871875][ T6500] usb 6-1: SerialNumber: syz [ 703.879974][ T5919] usb 7-1: Product: syz [ 703.892098][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 703.898924][ T6500] usb 6-1: config 0 descriptor?? [ 703.906437][ T5919] usb 7-1: Manufacturer: syz [ 703.921587][ T5919] usb 7-1: SerialNumber: syz [ 703.933051][ T6500] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 703.946980][T13772] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 703.954351][T13772] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 703.962637][ T5919] ums-alauda 7-1:1.214: USB Mass Storage device detected [ 704.005943][ T5919] scsi host1: usb-storage 7-1:1.214 [ 704.055073][ T5878] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 704.123242][T10579] Bluetooth: hci5: command 0x0c1a tx timeout [ 704.148611][ T6500] pwc: Warning: more than 1 configuration available. [ 704.204497][ T6500] pwc: Failed to set LED on/off time (-71) [ 704.206334][T13778] syzkaller0: entered promiscuous mode [ 704.206354][T13778] syzkaller0: entered allmulticast mode [ 704.206790][ T6500] pwc: send_video_command error -71 [ 704.206803][ T6500] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 704.206880][ T6500] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 704.272989][ T6500] usb 6-1: USB disconnect, device number 49 [ 705.057482][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 705.131173][ T5919] usb 4-1: USB disconnect, device number 56 [ 705.152250][ T5919] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 705.367323][ T5919] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 705.383471][ T5919] quatech2 4-1:0.51: device disconnected [ 705.396552][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1876'. [ 705.419258][ T6447] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 705.431225][T13795] loop2: detected capacity change from 0 to 7 [ 705.439463][ T6447] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 705.449863][T13795] Dev loop2: unable to read RDB block 7 [ 705.455817][T13795] loop2: unable to read partition table [ 705.462650][T13795] loop2: partition table beyond EOD, truncated [ 705.504360][T13795] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 705.535699][ T6447] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 705.580248][ T6447] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 706.362225][ T66] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 706.369069][ T2130] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 706.376476][ T5919] usb 7-1: USB disconnect, device number 27 [ 706.468368][ T66] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 706.538575][ T5933] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 706.538706][ T2130] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 706.601349][T13808] futex_wake_op: syz.3.1881 tries to shift op by 144; fix this program [ 706.960551][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 707.359728][ T5933] udevd[5933]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 710.116137][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 710.132623][ T5933] udevd[5933]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 711.763313][ T5919] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 711.770908][ T6500] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 712.273311][ T6500] usb 6-1: Using ep0 maxpacket: 16 [ 712.278472][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 712.287816][ T5919] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 712.296379][ T5919] usb 4-1: config 0 has no interface number 0 [ 712.305664][ T6500] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 712.315323][ T5919] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 712.324481][ T6500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.333111][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.341398][ T6500] usb 6-1: Product: syz [ 712.345921][ T5919] usb 4-1: Product: syz [ 712.350243][ T6500] usb 6-1: Manufacturer: syz [ 712.354936][ T5919] usb 4-1: Manufacturer: syz [ 712.359659][ T6500] usb 6-1: SerialNumber: syz [ 712.365344][ T5919] usb 4-1: SerialNumber: syz [ 712.371470][ T6500] usb 6-1: config 0 descriptor?? [ 712.379411][ T5919] usb 4-1: config 0 descriptor?? [ 712.387545][ T6500] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 712.398403][ T5919] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 712.593342][ T6500] pwc: Warning: more than 1 configuration available. [ 712.635676][ T6500] pwc: Failed to set LED on/off time (-71) [ 712.641851][ T5919] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 712.651924][ T6500] pwc: send_video_command error -71 [ 712.661341][ T6500] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 712.679122][ T6500] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 712.746481][ T6500] usb 6-1: USB disconnect, device number 50 [ 712.754359][ T5919] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 712.845824][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 714.088753][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 714.137477][ T5878] usb 4-1: USB disconnect, device number 57 [ 714.348326][T13869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1897'. [ 714.398539][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 714.468559][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 714.569287][T13877] futex_wake_op: syz.5.1896 tries to shift op by 144; fix this program [ 714.629586][ T5878] quatech2 4-1:0.51: device disconnected [ 715.555278][T13891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1903'. [ 715.567751][T13891] loop2: detected capacity change from 0 to 7 [ 716.160558][T13891] Dev loop2: unable to read RDB block 7 [ 716.172182][T13891] loop2: unable to read partition table [ 716.178266][T13891] loop2: partition table beyond EOD, truncated [ 716.184870][T13891] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 716.335541][ T5188] Dev loop2: unable to read RDB block 7 [ 716.359004][ T5188] loop2: unable to read partition table [ 716.383337][ T5930] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 716.414887][ T5188] loop2: partition table beyond EOD, truncated [ 716.573228][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 716.606265][ T5930] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 716.630121][ T5930] usb 7-1: config 0 has no interface number 0 [ 716.767808][ T5930] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 716.821047][ T5930] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.179594][ T5930] usb 7-1: Product: syz [ 717.201949][ T5930] usb 7-1: Manufacturer: syz [ 717.223445][ T5930] usb 7-1: SerialNumber: syz [ 717.271502][ T5930] usb 7-1: config 0 descriptor?? [ 717.313709][ T5930] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 717.560074][ T5930] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 717.733080][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 718.082793][ T5930] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 718.233347][ T5878] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 718.373328][ T6500] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 718.393355][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 718.419061][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 718.440024][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.477318][ T5878] usb 6-1: Product: syz [ 718.490134][ T5878] usb 6-1: Manufacturer: syz [ 718.497956][ T5878] usb 6-1: SerialNumber: syz [ 718.522856][ T5878] usb 6-1: config 0 descriptor?? [ 718.537068][ T6500] usb 4-1: Using ep0 maxpacket: 16 [ 718.553587][ T6500] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 718.570985][ T6500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.577783][ T5878] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 718.589380][ T6500] usb 4-1: Product: syz [ 718.599104][ T6500] usb 4-1: Manufacturer: syz [ 718.608955][ T6500] usb 4-1: SerialNumber: syz [ 718.628751][ T6500] usb 4-1: config 0 descriptor?? [ 718.647886][ T6500] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 718.785680][ T5878] pwc: Warning: more than 1 configuration available. [ 718.798913][ T5878] pwc: Failed to set LED on/off time (-71) [ 718.808549][ T5878] pwc: send_video_command error -71 [ 718.814487][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 718.824406][ T5878] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 718.871198][ T6500] pwc: Warning: more than 1 configuration available. [ 718.892980][ T6500] pwc: Failed to set LED on/off time (-71) [ 718.910578][ T6500] pwc: send_video_command error -71 [ 718.911699][ T5878] usb 6-1: USB disconnect, device number 51 [ 718.923456][ T6500] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 718.951095][ T6500] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 718.995200][ T6500] usb 4-1: USB disconnect, device number 58 [ 719.104699][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 719.150867][ T5920] usb 7-1: USB disconnect, device number 28 [ 719.178163][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 719.201596][T13917] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1909'. [ 719.215256][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 719.230175][ T5920] quatech2 7-1:0.51: device disconnected [ 719.887821][ T6444] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 721.893510][ T5920] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 722.157262][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 722.168891][ T5920] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 722.180647][ T5920] usb 1-1: config 0 has no interface number 0 [ 722.198488][ T5920] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 722.208973][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.228038][ T5920] usb 1-1: Product: syz [ 722.235360][ T5920] usb 1-1: Manufacturer: syz [ 722.251684][ T5920] usb 1-1: SerialNumber: syz [ 722.261528][ T5920] usb 1-1: config 0 descriptor?? [ 722.276426][ T5920] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 722.696871][T13959] random: crng reseeded on system resumption [ 722.901299][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 722.961742][ T5920] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 722.989877][ T5920] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 724.291238][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 724.334614][ T5878] usb 1-1: USB disconnect, device number 65 [ 724.361658][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 724.536801][T13974] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1925'. [ 724.550890][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 724.563003][ T5878] quatech2 1-1:0.51: device disconnected [ 724.583366][ T5929] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 725.047994][T13974] loop2: detected capacity change from 0 to 7 [ 725.653347][ T5929] usb 6-1: Using ep0 maxpacket: 16 [ 725.656074][T13987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1927'. [ 725.769672][ T5929] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 725.783372][ T5929] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.793747][ T5929] usb 6-1: Product: syz [ 725.798954][ T5929] usb 6-1: Manufacturer: syz [ 725.803719][ T5929] usb 6-1: SerialNumber: syz [ 725.819073][ T5929] usb 6-1: config 0 descriptor?? [ 725.828403][ T5929] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 725.843094][T13974] Dev loop2: unable to read RDB block 7 [ 725.848874][T13974] loop2: unable to read partition table [ 725.858120][T13974] loop2: partition table beyond EOD, truncated [ 726.053477][ T5929] pwc: Warning: more than 1 configuration available. [ 726.060615][ T5929] pwc: Failed to set LED on/off time (-71) [ 726.066948][T13974] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 726.083671][ T5929] pwc: send_video_command error -71 [ 726.111017][ T5929] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 726.138916][ T5929] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 726.323049][ T5929] usb 6-1: USB disconnect, device number 52 [ 726.408688][ T5188] Dev loop2: unable to read RDB block 7 [ 726.427117][ T5188] loop2: unable to read partition table [ 726.433544][ T5188] loop2: partition table beyond EOD, truncated [ 727.225296][T14015] 9p: Bad value for 'rfdno' [ 728.876431][ T2927] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 728.943399][ T5930] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 729.683207][ T5930] usb 7-1: Using ep0 maxpacket: 16 [ 730.065220][ T5930] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 730.073848][ T5930] usb 7-1: can't read configurations, error -71 [ 730.123400][ T5929] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 730.153119][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 360 seconds [ 730.164059][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 360 seconds [ 730.175612][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 360 seconds [ 730.187556][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 360 seconds [ 731.173300][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 731.180353][ T5929] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 731.199080][ T5929] usb 4-1: config 0 has no interface number 0 [ 731.338362][ T5929] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 731.351172][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.361276][ T5929] usb 4-1: Product: syz [ 731.365868][ T5929] usb 4-1: Manufacturer: syz [ 731.373179][ T5929] usb 4-1: SerialNumber: syz [ 731.383714][ T5878] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 731.885534][ T5929] usb 4-1: config 0 descriptor?? [ 731.891520][ T5929] usb 4-1: can't set config #0, error -71 [ 731.899146][ T5929] usb 4-1: USB disconnect, device number 59 [ 731.953574][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 732.069975][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1953'. [ 732.085713][T14081] loop2: detected capacity change from 0 to 7 [ 732.101189][T14081] Dev loop2: unable to read RDB block 7 [ 732.107616][T14081] loop2: unable to read partition table [ 732.168703][T14081] loop2: partition table beyond EOD, truncated [ 732.176805][T14081] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 732.193686][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 732.231306][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.277469][ T5878] usb 1-1: Product: syz [ 732.314163][ T5878] usb 1-1: Manufacturer: syz [ 732.333457][ T5878] usb 1-1: SerialNumber: syz [ 732.378358][ T5878] usb 1-1: config 0 descriptor?? [ 732.414968][ T5878] usb 1-1: can't set config #0, error -71 [ 732.474875][ T5878] usb 1-1: USB disconnect, device number 66 [ 733.590874][T14098] 9p: Bad value for 'source' [ 734.547383][ T5920] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 734.558580][ T30] audit: type=1400 audit(1768123210.816:1214): avc: denied { map } for pid=14106 comm="syz.0.1960" path="/dev/vmci" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 734.692214][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1961'. [ 735.193308][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 735.222707][ T5920] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 735.234548][ T5920] usb 6-1: config 0 has no interface number 0 [ 735.247590][ T5920] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 735.265549][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.274427][ T5920] usb 6-1: Product: syz [ 735.280589][ T5920] usb 6-1: Manufacturer: syz [ 735.288333][ T5920] usb 6-1: SerialNumber: syz [ 735.350943][ T5920] usb 6-1: config 0 descriptor?? [ 735.374301][ T5920] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 736.238815][ C0] usb-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 736.249645][ T5920] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 736.311087][ T5920] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 736.803368][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 739.030869][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 739.072239][ T6192] usb 6-1: USB disconnect, device number 53 [ 739.091259][ T6192] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 739.193993][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 739.218566][ T24] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 739.756473][ T6192] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 739.773040][ T24] usb 1-1: config 0 has no interface number 0 [ 739.810235][ T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 739.826162][ T6192] quatech2 6-1:0.51: device disconnected [ 739.832424][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.858918][ T24] usb 1-1: Product: syz [ 739.870052][ T24] usb 1-1: Manufacturer: syz [ 739.884209][ T24] usb 1-1: SerialNumber: syz [ 739.916648][ T24] usb 1-1: config 0 descriptor?? [ 739.934732][ T24] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 740.093242][ T24] usb 1-1: qt2_attach - failed to power on unit: -71 [ 740.100261][ T24] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 740.192039][T14143] random: crng reseeded on system resumption [ 740.226312][ T24] usb 1-1: USB disconnect, device number 67 [ 741.681716][T14171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1977'. [ 743.269779][T14183] 9p: Bad value for 'source' [ 745.016750][ T5930] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 745.173490][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 745.204020][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 745.213357][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.221523][ T5930] usb 4-1: Product: syz [ 745.226681][ T5930] usb 4-1: Manufacturer: syz [ 745.240905][ T5930] usb 4-1: SerialNumber: syz [ 745.353699][ T5930] usb 4-1: config 0 descriptor?? [ 745.363855][ T5919] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 745.534298][ T5930] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 745.552629][ T5930] pwc: Warning: more than 1 configuration available. [ 745.587995][ T5930] pwc: Failed to set LED on/off time (-71) [ 745.601560][ T5930] pwc: send_video_command error -71 [ 745.612262][ T5930] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 745.624587][ T5930] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 745.636074][ T5930] usb 4-1: USB disconnect, device number 60 [ 745.773326][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 745.813769][T14210] random: crng reseeded on system resumption [ 745.835631][ T5919] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 745.846189][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.873648][ T5919] usb 1-1: Product: syz [ 746.629574][ T5919] usb 1-1: Manufacturer: syz [ 746.635476][ T5919] usb 1-1: SerialNumber: syz [ 746.746239][ T5919] usb 1-1: config 0 descriptor?? [ 746.769182][ T5919] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 746.792367][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.800032][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.890001][ T5919] pwc: Warning: more than 1 configuration available. [ 747.913705][ T5919] pwc: Failed to set LED on/off time (-71) [ 747.935316][ T5919] pwc: send_video_command error -71 [ 747.960963][ T5919] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 748.012212][ T5919] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 748.063849][ T5919] usb 1-1: USB disconnect, device number 68 [ 748.625010][T14249] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2000'. [ 749.376209][T14258] 9p: Bad value for 'source' [ 749.594444][ T8799] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 749.779846][ T8799] usb 8-1: Using ep0 maxpacket: 16 [ 749.814857][ T8799] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 749.901223][ T8799] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.969096][ T8799] usb 8-1: Product: syz [ 749.984501][ T8799] usb 8-1: Manufacturer: syz [ 749.989158][ T8799] usb 8-1: SerialNumber: syz [ 749.996836][ T8799] usb 8-1: config 0 descriptor?? [ 750.025669][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 750.355133][ T8799] pwc: Warning: more than 1 configuration available. [ 750.632986][ T8799] pwc: Failed to set LED on/off time (-71) [ 750.642893][ T8799] pwc: send_video_command error -71 [ 750.648282][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 750.665063][ T8799] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 750.690124][ T8799] usb 8-1: USB disconnect, device number 16 [ 752.763299][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 752.863931][ T6736] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 753.843267][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 753.900213][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 753.969582][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.986424][ T24] usb 4-1: Product: syz [ 753.992877][ T24] usb 4-1: Manufacturer: syz [ 754.009294][ T24] usb 4-1: SerialNumber: syz [ 754.028856][ T24] usb 4-1: config 0 descriptor?? [ 754.046631][ T24] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 754.457731][ T24] pwc: Warning: more than 1 configuration available. [ 754.479433][ T24] pwc: Failed to set LED on/off time (-71) [ 755.083956][ T24] pwc: send_video_command error -71 [ 755.091176][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 755.274127][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 755.435050][ T24] usb 4-1: USB disconnect, device number 61 [ 758.681700][T14343] netlink: 'syz.7.2022': attribute type 27 has an invalid length. [ 759.225742][ T6500] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 759.685808][T14297] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 759.723679][ T6500] usb 4-1: Using ep0 maxpacket: 32 [ 759.733849][ T6500] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 759.741917][ T6500] usb 4-1: config 0 has no interface number 0 [ 759.779114][ T6500] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 759.823467][ T6500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.835185][ T6500] usb 4-1: Product: syz [ 759.839365][ T6500] usb 4-1: Manufacturer: syz [ 759.844917][ T6500] usb 4-1: SerialNumber: syz [ 759.852013][ T6500] usb 4-1: config 0 descriptor?? [ 759.858566][ T6500] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 759.878599][T14297] usb 1-1: Using ep0 maxpacket: 16 [ 759.889300][T14297] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 759.900996][T14297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.914237][T14297] usb 1-1: Product: syz [ 759.927218][T14297] usb 1-1: Manufacturer: syz [ 759.932009][T14297] usb 1-1: SerialNumber: syz [ 759.938450][T14297] usb 1-1: config 0 descriptor?? [ 759.957866][T14297] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 760.085329][ T6500] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 760.098196][ T6500] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 760.158496][T14297] pwc: Warning: more than 1 configuration available. [ 760.183747][T14297] pwc: Failed to set LED on/off time (-71) [ 760.210825][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 390 seconds [ 760.222074][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 390 seconds [ 760.233369][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 390 seconds [ 760.244489][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 390 seconds [ 760.256008][T14297] pwc: send_video_command error -71 [ 760.261213][T14297] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 760.272718][T14297] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 760.291656][T14297] usb 1-1: USB disconnect, device number 69 [ 760.302189][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7 [ 760.853946][T10579] Bluetooth: hci5: command 0x0c1a tx timeout [ 761.672994][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 761.723829][T14297] usb 4-1: USB disconnect, device number 62 [ 761.735314][T14297] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 761.750857][T14297] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 761.781659][T14297] quatech2 4-1:0.51: device disconnected [ 762.765040][ T6444] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 764.073264][ T5816] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 764.233946][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 764.309733][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 764.329038][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.343288][ T5816] usb 1-1: Product: syz [ 764.349234][ T5816] usb 1-1: Manufacturer: syz [ 764.360919][ T5816] usb 1-1: SerialNumber: syz [ 764.378345][ T5816] usb 1-1: config 0 descriptor?? [ 764.401050][ T5816] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 764.653344][T14297] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 764.768325][ T5816] pwc: Warning: more than 1 configuration available. [ 764.784000][ T5816] pwc: Failed to set LED on/off time (-71) [ 764.790741][ T5816] pwc: send_video_command error -71 [ 764.799109][ T5816] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 764.807000][ T5816] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 764.824339][ T5816] usb 1-1: USB disconnect, device number 70 [ 764.868062][T14297] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 764.881412][T14297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.894345][T14297] usb 8-1: Product: syz [ 764.899968][T14297] usb 8-1: Manufacturer: syz [ 764.907877][T14297] usb 8-1: SerialNumber: syz [ 765.171326][ T30] audit: type=1400 audit(1768123241.426:1215): avc: denied { getopt } for pid=14393 comm="syz.7.2038" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 765.204574][T14297] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 765.353301][T14297] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 765.385010][T14297] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 765.394663][T14404] 9p: Bad value for 'rfdno' [ 765.529949][T14297] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 765.567793][T14297] usb 8-1: USB disconnect, device number 17 [ 767.607712][T14435] random: crng reseeded on system resumption [ 768.735180][T14446] futex_wake_op: syz.6.2053 tries to shift op by 144; fix this program [ 768.751594][T14451] overlayfs: failed to resolve './file1': -2 [ 769.434261][T14463] futex_wake_op: syz.5.2058 tries to shift op by 144; fix this program [ 769.543473][ T24] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 769.743341][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 769.753006][ T24] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 769.771599][ T24] usb 1-1: config 1 has no interface number 0 [ 769.799308][ T24] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 769.852623][ T24] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 770.154141][ T24] usb 1-1: config 1 interface 214 has no altsetting 0 [ 770.163663][ T24] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 770.176083][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.244285][ T24] usb 1-1: Product: syz [ 770.303253][T14485] random: crng reseeded on system resumption [ 770.437079][ T24] usb 1-1: Manufacturer: syz [ 770.441815][ T24] usb 1-1: SerialNumber: syz [ 770.471876][T14462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 770.479255][T14462] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 770.501823][ T24] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 770.795405][ T24] scsi host1: usb-storage 1-1:1.214 [ 771.370605][T14503] overlayfs: failed to resolve './file1': -2 [ 771.822039][ T24] usb 1-1: USB disconnect, device number 71 [ 772.293749][T14513] futex_wake_op: syz.6.2073 tries to shift op by 144; fix this program [ 773.227291][T14529] random: crng reseeded on system resumption [ 776.957561][T14581] random: crng reseeded on system resumption [ 779.752128][T14619] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2098'. [ 779.953559][T14620] overlayfs: failed to resolve './file0': -2 [ 780.701716][T14633] random: crng reseeded on system resumption [ 781.963361][T14297] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 782.623254][T14297] usb 6-1: Using ep0 maxpacket: 16 [ 782.689556][T14297] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 783.243439][T14297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.284546][T14297] usb 6-1: Product: syz [ 783.288994][T14297] usb 6-1: Manufacturer: syz [ 783.299205][T14297] usb 6-1: SerialNumber: syz [ 783.310838][T14297] usb 6-1: config 0 descriptor?? [ 783.329315][T14297] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 783.442588][T14669] tmpfs: Unknown parameter 'tmpfs' [ 783.639376][T14669] futex_wake_op: syz.0.2112 tries to shift op by 144; fix this program [ 783.649818][T14297] pwc: Warning: more than 1 configuration available. [ 783.676399][T14297] pwc: Failed to set LED on/off time (-71) [ 783.722681][T14297] pwc: send_video_command error -71 [ 783.744824][T14297] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 783.772203][T14297] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 783.800293][T14297] usb 6-1: USB disconnect, device number 54 [ 783.829652][T14677] overlayfs: failed to resolve './file0': -2 [ 783.837054][ T30] audit: type=1400 audit(1768123260.096:1216): avc: denied { map } for pid=14678 comm="syz.6.2114" path="pipe:[45358]" dev="pipefs" ino=45358 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 784.127377][T14218] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 784.316877][T14694] futex_wake_op: syz.7.2117 tries to shift op by 144; fix this program [ 784.393275][T14218] usb 7-1: Using ep0 maxpacket: 16 [ 784.405111][T14218] usb 7-1: config 192 has an invalid interface number: 25 but max is 0 [ 784.434699][T14218] usb 7-1: config 192 has no interface number 0 [ 784.440980][T14218] usb 7-1: config 192 interface 25 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 784.466435][T14218] usb 7-1: config 192 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 784.477884][T14218] usb 7-1: config 192 interface 25 has no altsetting 0 [ 784.488168][T14218] usb 7-1: New USB device found, idVendor=12d1, idProduct=1c07, bcdDevice=fc.31 [ 784.503283][T14218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.972199][T14218] usb 7-1: Product: syz [ 784.997754][T14218] usb 7-1: Manufacturer: ꨤ浖蝧㞏劀飱혽䧻엍磧ᬲﶺ筩ឤ샆⻵骥年໻瓢鍑ṽ⬔뜘瓃䳗쁕鷿뎗륀蓕NJ攮膨抌淜쐝鮫挑믧匳㟙楣愔∜⒰ꎽƓꛠ틠夔퀦몦耪뜺涾띔ℽ븲声ҡ픏钍䯥걍ꗟ퀟 [ 785.114693][T14701] random: crng reseeded on system resumption [ 785.198696][T14218] usb 7-1: SerialNumber: syz [ 786.033186][ T2032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 786.072255][T14218] option 7-1:192.25: GSM modem (1-port) converter detected [ 786.130804][T14218] usb 7-1: USB disconnect, device number 31 [ 786.183309][T14218] option 7-1:192.25: device disconnected [ 786.734963][T14737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2125'. [ 787.721887][T14746] overlayfs: failed to resolve './file0': -2 [ 789.140493][T14297] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 789.343267][T14297] usb 6-1: Using ep0 maxpacket: 32 [ 789.380766][T14297] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 789.409558][T14297] usb 6-1: config 0 has no interface number 0 [ 789.433598][T14297] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 789.462336][T14297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.486856][T14297] usb 6-1: Product: syz [ 789.499685][T14297] usb 6-1: Manufacturer: syz [ 789.514304][T14297] usb 6-1: SerialNumber: syz [ 789.543787][T14297] usb 6-1: config 0 descriptor?? [ 789.574792][T14297] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 789.698452][T14766] random: crng reseeded on system resumption [ 789.779617][T14297] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 789.818088][T14297] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 790.432909][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 420 seconds [ 790.445364][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 420 seconds [ 790.456602][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 420 seconds [ 790.468573][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 420 seconds [ 790.959410][T14782] tmpfs: Unknown parameter 'tmpfs' [ 791.208718][T14782] futex_wake_op: syz.3.2135 tries to shift op by 144; fix this program [ 791.247602][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 791.318862][ T6192] usb 6-1: USB disconnect, device number 55 [ 791.336977][ T6192] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 791.462483][ T6192] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 791.597613][ T6192] quatech2 6-1:0.51: device disconnected [ 793.094101][ T6192] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 793.224887][T14812] netlink: 'syz.5.2140': attribute type 27 has an invalid length. [ 793.263372][T14812] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 793.313280][ T6192] usb 1-1: Using ep0 maxpacket: 16 [ 793.321274][ T6192] usb 1-1: config 1 has an invalid interface number: 214 but max is 0 [ 793.339159][ T6192] usb 1-1: config 1 has no interface number 0 [ 793.346467][ T6192] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 793.363103][ T6192] usb 1-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 793.374739][ T6192] usb 1-1: config 1 interface 214 has no altsetting 0 [ 793.386448][ T6192] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 793.468456][ T6192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.508967][ T6192] usb 1-1: Product: syz [ 793.528066][ T6192] usb 1-1: Manufacturer: syz [ 793.543976][ T6192] usb 1-1: SerialNumber: syz [ 793.583024][T14807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 793.590485][T14807] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 793.602907][ T6192] ums-alauda 1-1:1.214: USB Mass Storage device detected [ 793.629536][ T6192] scsi host1: usb-storage 1-1:1.214 [ 794.686608][ T3905] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 794.728069][ T3905] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 794.811182][ T140] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.873052][ T3905] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 794.926772][ T6192] usb 1-1: USB disconnect, device number 72 [ 794.945598][ T140] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 794.995329][ T3578] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 795.101855][ T3905] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 795.175923][ T3578] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 795.289096][ T3578] sd 1:0:0:1: [sdc] Sense not available. [ 795.388638][ T3578] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 795.405019][ T140] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 795.562442][ T3578] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 796.073717][ T3578] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 796.091086][ T3578] sd 1:0:0:1: [sdc] Asking for cache data failed [ 796.113244][ T3578] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 796.268021][ T5812] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 796.279482][ T3578] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 796.293333][ T5816] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 796.483183][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 796.600244][ T5816] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 796.717809][T14850] random: crng reseeded on system resumption [ 797.108839][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.141690][ T5816] usb 4-1: Product: syz [ 797.160562][ T5816] usb 4-1: Manufacturer: syz [ 797.185520][ T5816] usb 4-1: SerialNumber: syz [ 797.218369][ T5816] usb 4-1: config 0 descriptor?? [ 797.276896][ T5816] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 797.282398][ T5933] udevd[5933]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 798.794212][ T5816] pwc: Warning: more than 1 configuration available. [ 798.811968][ T5816] pwc: Failed to set LED on/off time (-71) [ 798.933421][ T5816] pwc: send_video_command error -71 [ 798.983532][ T5816] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 799.013209][ T5816] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 799.044839][T14868] tipc: Enabling of bearer rejected, failed to enable media [ 799.154214][ T5816] usb 4-1: USB disconnect, device number 63 [ 799.170951][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 800.103440][ T6192] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 800.315490][ T6192] usb 4-1: Using ep0 maxpacket: 32 [ 800.344008][ T6192] usb 4-1: config index 0 descriptor too short (expected 4370, got 18) [ 800.356942][ T6192] usb 4-1: config 0 has an invalid interface number: 131 but max is 0 [ 800.480290][ T6192] usb 4-1: config 0 has no interface number 0 [ 800.774395][ T6192] usb 4-1: config 0 interface 131 has no altsetting 0 [ 800.825476][ T6192] usb 4-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=b2.13 [ 800.852759][ T6192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.995392][ T6192] usb 4-1: Product: syz [ 800.999613][ T6192] usb 4-1: Manufacturer: syz [ 801.005333][ T6192] usb 4-1: SerialNumber: syz [ 801.036079][ T6192] usb 4-1: config 0 descriptor?? [ 801.130828][ T5816] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 801.164486][ T6192] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 801.681801][ T6192] dvb-usb: bulk message failed: -22 (2/0) [ 801.693384][ T6192] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 801.708480][ T6192] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 801.725567][ T5816] usb 8-1: Using ep0 maxpacket: 16 [ 801.744562][ T6192] usb 4-1: media controller created [ 801.771078][ T5816] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 801.786769][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.787100][ T6192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 801.829568][ T5816] usb 8-1: Product: syz [ 801.839157][ T5816] usb 8-1: Manufacturer: syz [ 801.843647][ T6192] usb 4-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 801.953102][ T5816] usb 8-1: SerialNumber: syz [ 801.956798][ T6192] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 801.986394][ T5816] usb 8-1: config 0 descriptor?? [ 802.002409][ T5816] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 803.543470][ T6192] rc_core: IR keymap rc-dtt200u not found [ 803.557380][ T6192] Registered IR keymap rc-empty [ 803.588520][ T6192] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 803.933872][ T6192] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input18 [ 803.969266][ T6192] dvb-usb: schedule remote query interval to 300 msecs. [ 803.999128][ T30] audit: type=1400 audit(1768123280.226:1217): avc: denied { read } for pid=5173 comm="acpid" name="event4" dev="devtmpfs" ino=4260 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.046377][ T6192] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 804.072573][ T6192] usb 4-1: USB disconnect, device number 64 [ 804.093190][ T30] audit: type=1400 audit(1768123280.226:1218): avc: denied { open } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4260 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.140846][ T30] audit: type=1400 audit(1768123280.226:1219): avc: denied { ioctl } for pid=5173 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4260 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 804.159624][ T5816] pwc: Warning: more than 1 configuration available. [ 804.320299][ T5816] pwc: Failed to set LED on/off time (-71) [ 804.347492][ T6192] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 804.389105][ T5816] pwc: send_video_command error -71 [ 804.451486][ T5816] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 804.515596][ T5816] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 804.891808][ T5816] usb 8-1: USB disconnect, device number 18 [ 807.513241][ T5929] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 807.685982][ T5929] usb 8-1: Using ep0 maxpacket: 32 [ 807.727767][ T5929] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 807.803296][ T5929] usb 8-1: config 0 has no interface number 0 [ 807.811705][ T5929] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 807.835139][ T5929] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.854408][ T5929] usb 8-1: Product: syz [ 807.858782][ T5929] usb 8-1: Manufacturer: syz [ 807.864085][ T5929] usb 8-1: SerialNumber: syz [ 807.979272][ T5929] usb 8-1: config 0 descriptor?? [ 808.002260][ T5929] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 808.409375][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.416872][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.452002][ T5929] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 808.512008][ T5929] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 809.680076][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 809.720924][ T5929] usb 8-1: USB disconnect, device number 19 [ 809.753961][ T5929] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 809.791338][ T5929] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 809.828376][ T5929] quatech2 8-1:0.51: device disconnected [ 810.345732][ T8799] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 810.943277][ T8799] usb 4-1: Using ep0 maxpacket: 16 [ 810.953828][ T8799] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 810.962866][ T8799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.993252][ T8799] usb 4-1: Product: syz [ 811.000790][ T8799] usb 4-1: Manufacturer: syz [ 811.010151][ T8799] usb 4-1: SerialNumber: syz [ 811.021934][ T8799] usb 4-1: config 0 descriptor?? [ 811.034737][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 811.164825][T14177] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 811.237579][ T8799] pwc: Warning: more than 1 configuration available. [ 811.253855][ T8799] pwc: Failed to set LED on/off time (-71) [ 811.269031][ T8799] pwc: send_video_command error -71 [ 811.493030][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 811.549458][ T8799] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 811.563306][T14177] usb 1-1: Using ep0 maxpacket: 16 [ 811.585501][ T8799] usb 4-1: USB disconnect, device number 65 [ 811.613886][T14177] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 811.632693][T14177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.641816][T14177] usb 1-1: Product: syz [ 811.656099][T14177] usb 1-1: Manufacturer: syz [ 811.663838][T14177] usb 1-1: SerialNumber: syz [ 811.694464][T14177] usb 1-1: config 0 descriptor?? [ 811.732188][T14177] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 813.022498][ T6192] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 813.059215][T14177] pwc: Warning: more than 1 configuration available. [ 813.224221][T14177] pwc: Failed to set LED on/off time (-71) [ 813.224244][ T6192] usb 4-1: Using ep0 maxpacket: 16 [ 813.249469][ T6192] usb 4-1: config 1 has an invalid interface number: 214 but max is 0 [ 813.262950][T14177] pwc: send_video_command error -71 [ 813.273167][T14177] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 813.301345][T14177] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 813.318676][ T6192] usb 4-1: config 1 has no interface number 0 [ 813.331632][ T6192] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 813.342680][ T6192] usb 4-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 813.360138][ T6192] usb 4-1: config 1 interface 214 has no altsetting 0 [ 813.379561][ T6192] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 813.393985][ T6192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.417037][ T6192] usb 4-1: Product: syz [ 813.423285][ T6192] usb 4-1: Manufacturer: syz [ 813.448188][T14177] usb 1-1: USB disconnect, device number 73 [ 813.545826][ T6192] usb 4-1: SerialNumber: syz [ 813.568797][T15041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.576108][T15041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.585443][ T6192] ums-alauda 4-1:1.214: USB Mass Storage device detected [ 814.248028][ T6192] scsi host1: usb-storage 4-1:1.214 [ 815.347110][ T6192] usb 4-1: USB disconnect, device number 66 [ 815.564154][ T5962] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 816.247622][ T5962] usb 1-1: Using ep0 maxpacket: 16 [ 816.320004][ T5962] usb 1-1: device descriptor read/all, error -71 [ 816.515125][T15080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2191'. [ 817.820802][ T5929] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 817.836950][ T3483] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 818.462906][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 818.469772][ T5929] usb 7-1: config 1 has an invalid interface number: 214 but max is 0 [ 818.478016][ T5929] usb 7-1: config 1 has no interface number 0 [ 818.484329][ T5929] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 818.494502][ T5929] usb 7-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 818.504686][ T5929] usb 7-1: config 1 interface 214 has no altsetting 0 [ 818.529195][ T5929] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 818.555354][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.575087][ T5929] usb 7-1: Product: syz [ 818.579275][ T5929] usb 7-1: Manufacturer: syz [ 818.613312][ T5929] usb 7-1: SerialNumber: syz [ 818.639013][T15092] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 818.646312][T15092] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 818.654572][ T5929] ums-alauda 7-1:1.214: USB Mass Storage device detected [ 818.667901][T15106] netlink: 'syz.7.2198': attribute type 27 has an invalid length. [ 818.808456][ T5929] scsi host1: usb-storage 7-1:1.214 [ 818.998056][T15106] netlink: 'syz.7.2198': attribute type 1 has an invalid length. [ 819.160273][T15117] 9p: Bad value for 'rfdno' [ 820.193943][ T2968] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 820.266069][ T5929] usb 7-1: USB disconnect, device number 32 [ 820.282014][ T2968] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 820.540408][ T12] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 820.589708][ T2968] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 820.597825][ T12] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 820.659398][ T30] audit: type=1400 audit(1768123296.856:1220): avc: denied { accept } for pid=15136 comm="syz.5.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 820.703401][ T12] sd 1:0:0:0: [sdb] Sense not available. [ 820.720284][ T12] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 820.762010][ T8555] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 820.772797][ T2968] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 820.814352][ T12] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 820.833560][ T12] sd 1:0:0:0: [sdb] Write Protect is off [ 820.839273][ T12] sd 1:0:0:0: [sdb] Asking for cache data failed [ 820.915479][ T8555] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 820.936104][ T12] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 820.979077][ T8555] sd 1:0:0:1: [sdc] Sense not available. [ 820.980844][T15150] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2209'. [ 820.988462][ T8555] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 821.008296][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 450 seconds [ 821.019765][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 450 seconds [ 821.022402][ T8555] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 821.031230][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 450 seconds [ 821.051102][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 450 seconds [ 821.144743][ T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 821.146089][ T8555] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 821.263865][ T8555] sd 1:0:0:1: [sdc] Asking for cache data failed [ 821.543493][ T8555] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 821.661062][ T5933] udevd[5933]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 821.663478][ T5878] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 821.718593][ T8555] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 821.874621][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2211'. [ 822.014122][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 822.052169][ T5878] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 822.107160][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.166357][ T5878] usb 6-1: Product: syz [ 822.179029][ T5878] usb 6-1: Manufacturer: syz [ 822.202947][ T5878] usb 6-1: SerialNumber: syz [ 822.342247][ T5878] usb 6-1: config 0 descriptor?? [ 822.387542][ T5878] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 823.421316][ T5878] pwc: Warning: more than 1 configuration available. [ 823.453174][ T5878] pwc: Failed to set LED on/off time (-71) [ 823.473449][ T5878] pwc: send_video_command error -71 [ 823.486056][ T5878] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 823.502998][ T5878] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 823.526337][T15182] netlink: 'syz.3.2216': attribute type 27 has an invalid length. [ 823.560400][ T5878] usb 6-1: USB disconnect, device number 56 [ 823.574326][T15182] netlink: 'syz.3.2216': attribute type 1 has an invalid length. [ 825.169489][T15198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2221'. [ 825.213370][ T5891] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 825.453298][ T5891] usb 8-1: Using ep0 maxpacket: 16 [ 825.461165][ T5891] usb 8-1: config 1 has an invalid interface number: 214 but max is 0 [ 825.469487][ T5891] usb 8-1: config 1 has no interface number 0 [ 825.479161][ T5891] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 825.490660][ T5891] usb 8-1: config 1 interface 214 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 64 [ 825.502278][ T5891] usb 8-1: config 1 interface 214 has no altsetting 0 [ 825.522788][ T5891] usb 8-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 825.601073][ T5891] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.616079][ T5891] usb 8-1: Product: syz [ 825.621431][ T5891] usb 8-1: Manufacturer: syz [ 825.627649][ T5891] usb 8-1: SerialNumber: syz [ 825.648498][T15194] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.655956][T15194] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 825.664903][ T5891] ums-alauda 8-1:1.214: USB Mass Storage device detected [ 825.726157][T15208] random: crng reseeded on system resumption [ 825.736388][ T5891] scsi host1: usb-storage 8-1:1.214 [ 826.065477][ T8799] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 826.233557][ T8799] usb 1-1: Using ep0 maxpacket: 16 [ 826.273423][ T8799] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 826.304895][ T8799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.332493][ T8799] usb 1-1: Product: syz [ 826.370946][ T8799] usb 1-1: Manufacturer: syz [ 826.384232][ T8799] usb 1-1: SerialNumber: syz [ 826.411013][ T8799] usb 1-1: config 0 descriptor?? [ 826.440052][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 826.766057][ T2032] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 826.802228][ T2032] scsi 1:0:0:1: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 826.911077][ T2032] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 826.988677][ T2032] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 827.073555][ T5878] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 827.123573][ T8799] pwc: Warning: more than 1 configuration available. [ 827.142108][ T8799] pwc: Failed to set LED on/off time (-71) [ 827.155516][ T8799] pwc: send_video_command error -71 [ 827.168076][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 827.192702][ T8799] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 827.220644][ T8799] usb 1-1: USB disconnect, device number 76 [ 827.253556][ T5878] usb 7-1: Using ep0 maxpacket: 16 [ 827.264783][ T5878] usb 7-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 1975, setting to 1024 [ 827.283833][ T5878] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1024 [ 827.297143][ T5891] usb 8-1: USB disconnect, device number 20 [ 827.303742][ T2927] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 827.338228][ T2130] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 827.367898][ T5878] usb 7-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.412213][ T7715] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.437016][ T2927] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 827.456758][ T5878] usb 7-1: config 1 interface 0 has no altsetting 0 [ 827.659012][ T2130] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 827.670059][ T5878] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 827.670242][ T5933] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 827.680093][ T5878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.698407][ T5878] usb 7-1: Product: syz [ 827.702580][ T5878] usb 7-1: Manufacturer: Ȃ⛧諷湢䍖綇橂緎圕倨च斬霼ឰ⎠㛜⡉萖੊瘦ꟿ膩䄜핦嚀薡鮔庥莒⚐๧Ỽ㕍鰙⣋ᙕ䈞鿘ꉸ꾟獥页颌 [ 827.760482][ T5878] usb 7-1: SerialNumber: syz [ 827.773608][T15219] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 827.786810][T15219] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 827.795643][T15229] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2227'. [ 827.847358][T15231] overlayfs: failed to resolve './file0': -2 [ 827.935527][T15234] openvswitch: netlink: IP tunnel dst address not specified [ 828.224913][ T5878] usb 7-1: USB disconnect, device number 33 [ 828.243551][T15234] selinux_netlink_send: 55 callbacks suppressed [ 828.243572][T15234] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15234 comm=syz.5.2230 [ 828.398714][T15242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2230'. [ 828.412477][ T30] audit: type=1400 audit(1768123304.656:1221): avc: denied { bind } for pid=15228 comm="syz.5.2230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 829.163035][ T5812] udevd[5812]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 829.339777][T15266] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2233'. [ 830.513737][ T30] audit: type=1400 audit(1768123306.766:1222): avc: denied { mount } for pid=15277 comm="syz.7.2237" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 831.169507][T15298] overlayfs: failed to resolve './file0': -2 [ 831.290959][ T30] audit: type=1400 audit(1768123307.546:1223): avc: denied { unmount } for pid=11074 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 831.622921][T15307] tmpfs: Unknown parameter 'tmpfs' [ 831.828172][T15307] futex_wake_op: syz.7.2243 tries to shift op by 144; fix this program [ 831.884238][T15313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2245'. [ 832.378902][T15317] tmpfs: Bad value for 'mpol' [ 832.892249][T15326] random: crng reseeded on system resumption [ 833.163343][ T30] audit: type=1400 audit(1768123309.416:1224): avc: denied { append } for pid=15311 comm="syz.6.2246" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 833.223340][ T30] audit: type=1400 audit(1768123309.416:1225): avc: denied { map } for pid=15311 comm="syz.6.2246" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 833.248182][ T30] audit: type=1400 audit(1768123309.416:1226): avc: denied { write execute } for pid=15311 comm="syz.6.2246" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 833.845098][ T30] audit: type=1400 audit(1768123310.086:1227): avc: denied { create } for pid=15338 comm="syz.3.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 834.594547][ T30] audit: type=1400 audit(1768123310.856:1228): avc: denied { map } for pid=15338 comm="syz.3.2252" path="socket:[48192]" dev="sockfs" ino=48192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 834.694476][ T30] audit: type=1400 audit(1768123310.886:1229): avc: denied { read } for pid=15338 comm="syz.3.2252" path="socket:[48192]" dev="sockfs" ino=48192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 834.769089][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2257'. [ 835.873210][ T8799] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 836.033319][ T8799] usb 7-1: Using ep0 maxpacket: 16 [ 836.072161][ T8799] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 836.123923][ T8799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.132004][ T8799] usb 7-1: Product: syz [ 836.138726][ T8799] usb 7-1: Manufacturer: syz [ 836.153003][ T8799] usb 7-1: SerialNumber: syz [ 836.174567][ T8799] usb 7-1: config 0 descriptor?? [ 836.201291][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 836.433510][ T8799] pwc: Warning: more than 1 configuration available. [ 836.483090][ T8799] pwc: Failed to set LED on/off time (-71) [ 836.534303][ T8799] pwc: send_video_command error -71 [ 836.542128][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 836.555417][ T8799] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 836.602366][ T8799] usb 7-1: USB disconnect, device number 34 [ 837.147622][T15399] overlayfs: failed to resolve './file0': -2 [ 837.519036][T15406] random: crng reseeded on system resumption [ 837.823761][T15412] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2268'. [ 838.071417][ T30] audit: type=1400 audit(1768123314.326:1230): avc: denied { setattr } for pid=15419 comm="syz.7.2271" name="RFCOMM" dev="sockfs" ino=48324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 838.188727][ T30] audit: type=1400 audit(1768123314.396:1231): avc: denied { connect } for pid=15419 comm="syz.7.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 838.378468][ T30] audit: type=1400 audit(1768123314.406:1232): avc: denied { create } for pid=15419 comm="syz.7.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 838.451139][ T30] audit: type=1400 audit(1768123314.406:1233): avc: denied { ioctl } for pid=15419 comm="syz.7.2271" path="socket:[48329]" dev="sockfs" ino=48329 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 838.548978][ T30] audit: type=1400 audit(1768123314.406:1234): avc: denied { accept } for pid=15419 comm="syz.7.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 840.083217][T14297] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 840.243729][T14297] usb 8-1: Using ep0 maxpacket: 16 [ 840.268711][T14297] usb 8-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 840.321966][T14297] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.358304][T14297] usb 8-1: Product: syz [ 840.362471][T14297] usb 8-1: Manufacturer: syz [ 840.411014][T14297] usb 8-1: SerialNumber: syz [ 840.448833][T14297] usb 8-1: config 0 descriptor?? [ 840.507216][T14297] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 840.681576][T14297] pwc: Warning: more than 1 configuration available. [ 840.715133][T14297] pwc: Failed to set LED on/off time (-71) [ 840.735434][T14297] pwc: send_video_command error -71 [ 840.740649][T14297] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 840.769758][T14297] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 840.807030][T14297] usb 8-1: USB disconnect, device number 21 [ 840.903205][ T8799] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 841.083228][ T8799] usb 7-1: Using ep0 maxpacket: 16 [ 841.112457][ T8799] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 841.121979][ T8799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.133140][ T8799] usb 7-1: Product: syz [ 841.137314][ T8799] usb 7-1: Manufacturer: syz [ 841.141934][ T8799] usb 7-1: SerialNumber: syz [ 841.151014][ T8799] usb 7-1: config 0 descriptor?? [ 841.171248][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 841.973474][ T8799] pwc: Warning: more than 1 configuration available. [ 841.990551][ T30] audit: type=1400 audit(1768123317.696:1235): avc: denied { mount } for pid=15478 comm="syz.5.2283" name="/" dev="ramfs" ino=47708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 841.992620][ T8799] pwc: Failed to set LED on/off time (-71) [ 842.169128][ T8799] pwc: send_video_command error -71 [ 842.174982][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 842.183424][ T8799] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 842.196187][ T8799] usb 7-1: USB disconnect, device number 35 [ 842.382497][T15490] random: crng reseeded on system resumption [ 842.955589][T15501] netlink: 'syz.0.2288': attribute type 1 has an invalid length. [ 843.889487][T15527] netlink: 'syz.7.2296': attribute type 2 has an invalid length. [ 844.136796][ T30] audit: type=1400 audit(1768123320.396:1236): avc: denied { ioctl } for pid=15531 comm="syz.6.2297" path="socket:[48473]" dev="sockfs" ino=48473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 844.573364][T14297] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 844.743190][T14297] usb 1-1: Using ep0 maxpacket: 16 [ 844.761718][T14297] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 844.791152][T14297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.810144][T14297] usb 1-1: Product: syz [ 844.821722][T14297] usb 1-1: Manufacturer: syz [ 844.869054][T15547] random: crng reseeded on system resumption [ 844.975921][T14297] usb 1-1: SerialNumber: syz [ 845.011449][T14297] usb 1-1: config 0 descriptor?? [ 845.068280][T14297] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 845.471250][T14297] pwc: Warning: more than 1 configuration available. [ 845.517864][T14297] pwc: Failed to set LED on/off time (-71) [ 845.554091][T14297] pwc: send_video_command error -71 [ 845.559323][T14297] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 845.843336][T14297] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 845.857470][T14297] usb 1-1: USB disconnect, device number 77 [ 847.122954][T15577] tipc: Enabling of bearer rejected, failed to enable media [ 849.273280][ T5943] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 849.855271][ T140] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 850.033412][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 850.104437][T15595] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2316'. [ 850.204980][T15596] nftables ruleset with unbound chain [ 850.223565][ T5943] usb 4-1: device descriptor read/all, error -71 [ 851.112799][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 480 seconds [ 851.124352][ T11] block nbd0: Possible stuck request ffff888026850200: control (read@1024,1024B). Runtime 480 seconds [ 851.135453][ T11] block nbd0: Possible stuck request ffff888026850400: control (read@2048,1024B). Runtime 480 seconds [ 851.146717][ T11] block nbd0: Possible stuck request ffff888026850600: control (read@3072,1024B). Runtime 480 seconds [ 851.157869][ T5962] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 851.333187][ T5962] usb 6-1: Using ep0 maxpacket: 32 [ 851.344988][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.436222][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.453824][ T5962] usb 6-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 851.564488][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.616865][ T5962] usb 6-1: config 0 descriptor?? [ 852.545669][ T5962] hid_mf 0003:0079:1801.000C: item fetching failed at offset 0/2 [ 852.566604][ T5962] hid_mf 0003:0079:1801.000C: HID parse failed. [ 852.572930][ T5962] hid_mf 0003:0079:1801.000C: probe with driver hid_mf failed with error -22 [ 853.070925][ T5891] usb 6-1: USB disconnect, device number 57 [ 854.952241][ T30] audit: type=1400 audit(1768123331.206:1237): avc: denied { read } for pid=5483 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 855.795206][ T5891] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 856.029017][ T5891] usb 6-1: Using ep0 maxpacket: 16 [ 856.039459][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 856.053599][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.068903][ T5891] usb 6-1: Product: syz [ 856.079035][ T5891] usb 6-1: Manufacturer: syz [ 856.084527][ T5891] usb 6-1: SerialNumber: syz [ 856.101501][ T5891] usb 6-1: config 0 descriptor?? [ 856.116363][ T5891] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 856.153202][ T8799] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 856.343261][ T8799] usb 7-1: Using ep0 maxpacket: 16 [ 856.362809][ T8799] usb 7-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 856.402687][ T8799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.419735][ T8799] usb 7-1: Product: syz [ 856.435548][ T8799] usb 7-1: Manufacturer: syz [ 856.450825][ T8799] usb 7-1: SerialNumber: syz [ 856.487933][ T8799] usb 7-1: config 0 descriptor?? [ 856.505126][ T8799] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 856.712046][ T8799] pwc: Warning: more than 1 configuration available. [ 856.735489][T15682] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.2337'. [ 856.754990][ T8799] pwc: Failed to set LED on/off time (-71) [ 856.765461][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2337'. [ 856.798436][ T8799] pwc: send_video_command error -71 [ 856.821396][ T8799] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 856.861230][ T8799] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 856.917468][ T8799] usb 7-1: USB disconnect, device number 36 [ 857.410577][ T30] audit: type=1400 audit(1768123333.646:1238): avc: denied { connect } for pid=15686 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 858.205908][ T5891] pwc: Warning: more than 1 configuration available. [ 858.221508][ T5891] pwc: Failed to set LED on/off time (-71) [ 858.227841][ T5891] pwc: send_video_command error -71 [ 858.233044][ T5891] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 858.243240][ T5891] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 858.264329][ T5891] usb 6-1: USB disconnect, device number 58 [ 858.705451][T15702] comedi comedi0: dt2801: I/O port conflict (0xb003,2) [ 859.242387][ T30] audit: type=1400 audit(1768123335.486:1239): avc: denied { listen } for pid=15709 comm="syz.5.2348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 860.225086][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 965.273075][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 965.280467][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5188/1:b..l P15713/1:b..l [ 965.290087][ C0] rcu: (detected by 0, t=10502 jiffies, g=68273, q=105 ncpus=2) [ 965.297799][ C0] task:syz.5.2348 state:R running task stack:27544 pid:15713 tgid:15709 ppid:7869 task_flags:0x40044c flags:0x00080000 [ 965.312119][ C0] Call Trace: [ 965.315409][ C0] [ 965.318334][ C0] ? __schedule+0x10b9/0x6150 [ 965.323099][ C0] __schedule+0x1139/0x6150 [ 965.327616][ C0] ? __pfx___schedule+0x10/0x10 [ 965.332466][ C0] ? mark_held_locks+0x49/0x80 [ 965.337227][ C0] preempt_schedule_irq+0x51/0x90 [ 965.342250][ C0] irqentry_exit+0x1d8/0x8c0 [ 965.346844][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 965.352905][ C0] RIP: 0010:unwind_next_frame+0x572/0x20b0 [ 965.358709][ C0] Code: c1 ee 03 48 c1 ea 03 0f b6 14 02 0f b6 04 06 4c 89 c6 83 e6 07 40 38 f2 40 0f 9e c6 84 d2 0f 95 c2 40 84 d6 0f 85 ae 14 00 00 <41> 83 e7 07 44 38 f8 0f 9e c2 84 c0 0f 95 c0 84 c2 0f 85 97 14 00 [ 965.378486][ C0] RSP: 0018:ffffc9000ed57518 EFLAGS: 00000246 [ 965.384546][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff912245ba [ 965.392506][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff909e6fd8 [ 965.400473][ C0] RBP: ffffc9000ed575d0 R08: ffffffff912245be R09: 000000002d64dbdc [ 965.408438][ C0] R10: 0000000000000002 R11: 000000000000810b R12: ffffc9000ed575d8 [ 965.416407][ C0] R13: ffffc9000ed57588 R14: ffffc9000ed575bd R15: ffffffff912245bf [ 965.424383][ C0] ? unwind_next_frame+0x2ec/0x20b0 [ 965.429595][ C0] ? get_signal+0x2671/0x26d0 [ 965.434286][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 965.440458][ C0] arch_stack_walk+0x94/0x100 [ 965.445598][ C0] ? get_signal+0x2671/0x26d0 [ 965.450288][ C0] stack_trace_save+0x8e/0xc0 [ 965.454962][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 965.460333][ C0] ? __lock_acquire+0x436/0x2890 [ 965.465268][ C0] ? kasan_save_stack+0x33/0x60 [ 965.470111][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 965.475495][ C0] kasan_save_stack+0x33/0x60 [ 965.480168][ C0] ? kasan_save_stack+0x33/0x60 [ 965.485013][ C0] ? kasan_save_track+0x14/0x30 [ 965.489856][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 965.494611][ C0] ? kmem_cache_free+0x147/0x770 [ 965.499544][ C0] ? exit_mmap+0x507/0xb60 [ 965.503957][ C0] ? __mmput+0x12a/0x410 [ 965.508195][ C0] ? mmput+0x62/0x70 [ 965.512098][ C0] ? do_exit+0x7d7/0x2bd0 [ 965.516419][ C0] ? do_group_exit+0xd3/0x2a0 [ 965.521085][ C0] ? get_signal+0x2671/0x26d0 [ 965.525795][ C0] kasan_save_track+0x14/0x30 [ 965.530469][ C0] __kasan_kmalloc+0xaa/0xb0 [ 965.535055][ C0] kmem_cache_free+0x147/0x770 [ 965.539811][ C0] ? exit_mmap+0x507/0xb60 [ 965.544227][ C0] ? exit_mmap+0x507/0xb60 [ 965.548640][ C0] exit_mmap+0x507/0xb60 [ 965.552881][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 965.557650][ C0] ? __lock_acquire+0x436/0x2890 [ 965.562596][ C0] ? arch_uprobe_clear_state+0x16/0x150 [ 965.568140][ C0] __mmput+0x12a/0x410 [ 965.572219][ C0] mmput+0x62/0x70 [ 965.575939][ C0] do_exit+0x7d7/0x2bd0 [ 965.580091][ C0] ? __pfx_do_exit+0x10/0x10 [ 965.584671][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 965.589690][ C0] ? find_held_lock+0x2b/0x80 [ 965.594372][ C0] do_group_exit+0xd3/0x2a0 [ 965.598874][ C0] get_signal+0x2671/0x26d0 [ 965.603383][ C0] ? putname+0xf5/0x1a0 [ 965.607541][ C0] ? __pfx_get_signal+0x10/0x10 [ 965.612392][ C0] ? do_futex+0x122/0x350 [ 965.616721][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 965.622271][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 965.628427][ C0] ? __x64_sys_openat+0x174/0x210 [ 965.633449][ C0] ? __pfx___x64_sys_futex+0x10/0x10 [ 965.638736][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 965.644031][ C0] do_syscall_64+0x4ee/0xf80 [ 965.648627][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.654513][ C0] RIP: 0033:0x7fdd7f38f749 [ 965.658918][ C0] RSP: 002b:00007fdd801cb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 965.667324][ C0] RAX: 0000000000000000 RBX: 00007fdd7f5e6188 RCX: 00007fdd7f38f749 [ 965.675291][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdd7f5e6188 [ 965.683253][ C0] RBP: 00007fdd7f5e6180 R08: 0000000000000000 R09: 0000000000000000 [ 965.691225][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.699208][ C0] R13: 00007fdd7f5e6218 R14: 00007fffd975f2e0 R15: 00007fffd975f3c8 [ 965.707197][ C0] [ 965.710215][ C0] task:udevd state:R running task stack:23608 pid:5188 tgid:5188 ppid:1 task_flags:0x400140 flags:0x00080000 [ 965.723703][ C0] Call Trace: [ 965.726979][ C0] [ 965.729986][ C0] ? __schedule+0x10b9/0x6150 [ 965.734665][ C0] __schedule+0x1139/0x6150 [ 965.739165][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 965.744375][ C0] ? __pfx___schedule+0x10/0x10 [ 965.749228][ C0] ? mark_held_locks+0x49/0x80 [ 965.753999][ C0] preempt_schedule_irq+0x51/0x90 [ 965.759021][ C0] irqentry_exit+0x1d8/0x8c0 [ 965.763608][ C0] ? rcu_is_watching+0x12/0xc0 [ 965.768366][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 965.773818][ C0] RIP: 0010:__page_table_check_zero+0x362/0x4a0 [ 965.780055][ C0] Code: e9 69 ff ff ff e8 ae cf 89 ff 90 0f 0b e8 a6 cf 89 ff 90 0f 0b e8 9e cf 89 ff e8 89 f8 6d ff 31 ff 89 c5 89 c6 e8 ce c9 89 ff <40> 84 ed 0f 85 97 fd ff ff e8 80 cf 89 ff e8 eb 1d 43 09 31 ff 89 [ 965.799653][ C0] RSP: 0018:ffffc900035a7a78 EFLAGS: 00000293 [ 965.805710][ C0] RAX: 0000000000000000 RBX: ffffea0000db1e00 RCX: ffffffff82351962 [ 965.813671][ C0] RDX: ffff88807bbac980 RSI: 0000000000000000 RDI: 0000000000000001 [ 965.821639][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 965.829622][ C0] R10: 0000000000000001 R11: ffff88807bbad4b0 R12: ffffffff8dd74560 [ 965.837606][ C0] R13: ffffea0000db1e00 R14: 0000000000000003 R15: 0000000000000000 [ 965.845580][ C0] ? __page_table_check_zero+0x362/0x4a0 [ 965.851220][ C0] ? __page_table_check_zero+0x362/0x4a0 [ 965.856854][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 965.862839][ C0] ? __reset_page_owner+0x137/0x1a0 [ 965.868045][ C0] __free_frozen_pages+0x7d0/0x1170 [ 965.873254][ C0] __put_partials+0x130/0x170 [ 965.877935][ C0] qlist_free_all+0x4c/0xf0 [ 965.882437][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 965.887895][ C0] __kasan_slab_alloc+0x69/0x90 [ 965.892746][ C0] kmem_cache_alloc_noprof+0x25e/0x770 [ 965.898197][ C0] ? ktime_get+0x1a7/0x310 [ 965.902610][ C0] ? getname_flags.part.0+0x4c/0x550 [ 965.907900][ C0] ? getname_flags.part.0+0x4c/0x550 [ 965.913178][ C0] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 965.919332][ C0] getname_flags.part.0+0x4c/0x550 [ 965.924440][ C0] getname_flags+0x93/0xf0 [ 965.928851][ C0] vfs_fstatat+0xe1/0xf0 [ 965.933083][ C0] __do_sys_newfstatat+0x97/0x120 [ 965.938094][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 965.943742][ C0] ? xfd_validate_state+0x61/0x180 [ 965.948870][ C0] do_syscall_64+0xcd/0xf80 [ 965.953383][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.959277][ C0] RIP: 0033:0x7f6bead11b0a [ 965.963703][ C0] RSP: 002b:00007fffbd4a2208 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 965.972109][ C0] RAX: ffffffffffffffda RBX: 0000563b33e62400 RCX: 00007f6bead11b0a [ 965.980108][ C0] RDX: 00007fffbd4a2210 RSI: 0000563b33e50296 RDI: 00000000ffffff9c [ 965.988074][ C0] RBP: 0000563b71c23668 R08: 0000000033457ba7 R09: 00007f6beb516000 [ 965.996033][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.003998][ C0] R13: 00007fffbd4a2210 R14: 0000000000000000 R15: 0000000000000000 [ 966.011975][ C0] [ 966.015000][ C0] rcu: rcu_preempt kthread starved for 10337 jiffies! g68273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 966.026202][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 966.036158][ C0] rcu: RCU grace-period kthread stack dump: [ 966.042029][ C0] task:rcu_preempt state:R running task stack:27144 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 966.055516][ C0] Call Trace: [ 966.058806][ C0] [ 966.061737][ C0] ? __schedule+0x10b9/0x6150 [ 966.066413][ C0] __schedule+0x1139/0x6150 [ 966.070930][ C0] ? __pfx___schedule+0x10/0x10 [ 966.075773][ C0] ? find_held_lock+0x2b/0x80 [ 966.080453][ C0] ? schedule+0x2d7/0x3a0 [ 966.084781][ C0] schedule+0xe7/0x3a0 [ 966.088855][ C0] schedule_timeout+0x123/0x290 [ 966.093707][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 966.099332][ C0] ? __pfx_process_timeout+0x10/0x10 [ 966.104615][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 966.110415][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 966.115890][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 966.120664][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 966.125945][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.131144][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 966.136079][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 966.140931][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 966.146734][ C0] rcu_gp_kthread+0x26d/0x380 [ 966.151411][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 966.156606][ C0] ? rcu_is_watching+0x12/0xc0 [ 966.161360][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 966.166552][ C0] ? __kthread_parkme+0x19e/0x250 [ 966.171577][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 966.176779][ C0] kthread+0x3c5/0x780 [ 966.180842][ C0] ? __pfx_kthread+0x10/0x10 [ 966.185430][ C0] ? rcu_is_watching+0x12/0xc0 [ 966.190183][ C0] ? __pfx_kthread+0x10/0x10 [ 966.194778][ C0] ret_from_fork+0x983/0xb10 [ 966.199361][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 966.204466][ C0] ? __switch_to+0x7af/0x10d0 [ 966.209145][ C0] ? __pfx_kthread+0x10/0x10 [ 966.213729][ C0] ret_from_fork_asm+0x1a/0x30 [ 966.218508][ C0] [ 966.221518][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 966.227830][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 966.238322][ C0] Tainted: [L]=SOFTLOCKUP [ 966.242629][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 966.252678][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 966.258310][ C0] Code: a6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 19 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 966.277908][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c6 [ 966.283965][ C0] RAX: 00000000041714e7 RBX: 0000000000000000 RCX: ffffffff8b7846d9 [ 966.291929][ C0] RDX: 0000000000000000 RSI: ffffffff8dacea71 RDI: ffffffff8bf2b400 [ 966.299889][ C0] RBP: fffffbfff1c12f68 R08: 0000000000000001 R09: ffffed101708673d [ 966.307851][ C0] R10: ffff8880b84339eb R11: ffffffff8e098670 R12: 0000000000000000 [ 966.315818][ C0] R13: ffffffff8e097b40 R14: ffffffff9088b9d0 R15: 0000000000000000 [ 966.323784][ C0] FS: 0000000000000000(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 966.332712][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 966.339310][ C0] CR2: 0000000000000000 CR3: 0000000076697000 CR4: 00000000003526f0 [ 966.347275][ C0] Call Trace: [ 966.350544][ C0] [ 966.353463][ C0] default_idle+0x13/0x20 [ 966.357795][ C0] default_idle_call+0x6c/0xb0 [ 966.362554][ C0] do_idle+0x38d/0x510 [ 966.366623][ C0] ? __pfx_do_idle+0x10/0x10 [ 966.371216][ C0] cpu_startup_entry+0x4f/0x60 [ 966.376069][ C0] rest_init+0x16b/0x2b0 [ 966.380647][ C0] ? acpi_subsystem_init+0x133/0x180 [ 966.385925][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 966.391465][ C0] start_kernel+0x3ef/0x4d0 [ 966.395961][ C0] x86_64_start_reservations+0x18/0x30 [ 966.401409][ C0] x86_64_start_kernel+0x130/0x190 [ 966.406514][ C0] common_startup_64+0x13e/0x148 [ 966.411457][ C0] [ 967.164235][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.170541][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.179385][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.185894][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.223376][ T11] block nbd0: Possible stuck request ffff888026850000: control (read@0,1024B). Runtime 510 seconds