last executing test programs: 18m44.303534468s ago: executing program 32 (id=695): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020) 18m1.2354466s ago: executing program 33 (id=964): socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x3c9}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xeffffffe, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1302, 0x1, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0xfffffffd, 0x69, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffefefe, 0x40}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x80000, 0x3, 0xffffffff}}], 0x1, &(0x7f00000003c0)={0x2e, 0x4c, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4000, 0xdbd, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) 17m56.12321252s ago: executing program 34 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c250000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 17m36.490788208s ago: executing program 35 (id=1100): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x8000, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000040)=[{r0, 0x35e5}], 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 17m17.57175329s ago: executing program 36 (id=1196): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040210434120001000000010902"], 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 14m42.074294371s ago: executing program 37 (id=2158): syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) 14m36.253225579s ago: executing program 38 (id=2184): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000040)="640f0177f6802c05f30f1a5feb6626650f236c660f38811c6736673685e167d736660f3825a20000f30f1eef0f01df", 0x2f}], 0x1, 0x57, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x7, 0x1, 0x41, 0xc3d, 0x0, 0x2004cb, 0xffffffdfffffffff, 0xa1d, 0x7, 0x100005, 0x79, 0x3, 0x2], 0x3332d000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m16.794614276s ago: executing program 39 (id=2204): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettimeofday(0x0, &(0x7f0000002980)) 12m49.155862965s ago: executing program 40 (id=2704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000007c0)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x198) syz_fuse_handle_req(r0, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)={0x10, 0xfffffffffffffff5, 0x27d3}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 12m37.671649128s ago: executing program 8 (id=2764): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x2, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000280)={0x2c, 0x1, 0x1, 0x0, r0}, 0x10) 12m37.454101399s ago: executing program 8 (id=2765): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x8, 0x8, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x52a1, 0x34}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x9, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000080)={r1}) 12m37.250139921s ago: executing program 8 (id=2766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000000)) 12m35.054340841s ago: executing program 8 (id=2774): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 12m34.57945223s ago: executing program 8 (id=2777): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 12m33.583903312s ago: executing program 8 (id=2784): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x28180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x81d}}, './bus\x00'}) 12m18.491171873s ago: executing program 41 (id=2784): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x28180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x81d}}, './bus\x00'}) 11m46.197380607s ago: executing program 5 (id=3033): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) write(r1, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x1, 0x0, 0x2, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x800, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) close(r1) 11m45.993071765s ago: executing program 5 (id=3035): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd, 0x0, 0x0, 0x0, {0x3208}}) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0xa) fchdir(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r2, 0x2007ffb) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 11m45.651584425s ago: executing program 5 (id=3037): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3e40, 0x0) r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x0, 0x3) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f0000000440)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0x0) 11m45.284616588s ago: executing program 5 (id=3039): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 11m45.006936875s ago: executing program 5 (id=3041): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x82000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x2, r1, 0x80000}) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x3000, 0x1800000, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioprio_set$uid(0x3, 0x0, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11m44.852373244s ago: executing program 5 (id=3042): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x9, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) 11m44.228691673s ago: executing program 42 (id=3042): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x0, 0x9, 0x20) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) 10m55.35630353s ago: executing program 9 (id=3213): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x24, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@new_dev={0x2, 0xc01, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x82}}}, &(0x7f0000000140)) write(0xffffffffffffffff, &(0x7f0000000200)='md0', 0x3) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x1cf7, 0x200, 0x3, 0x255}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9d63, 0x200, 0x2, 0x2ca}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4373, 0x8000, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc02a, 0x2, 0x1, 0x213}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f53, 0x8000, 0x2, 0x2bc}}], 0x4, &(0x7f00000015c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x1, 0x690, 0x0, &(0x7f00000005c0)=@buf_512="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"}}, &(0x7f0000001640)) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x0, 0x0, 0x0}, &(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$vim2m(0x0, 0x8, 0x2) r1 = socket(0x2, 0x3, 0xff) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x50, 0x1, 0xfffffffa, 0x64, 0x8]}, &(0x7f0000000000)=0x54) 10m53.574639428s ago: executing program 9 (id=3224): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x140, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffd17, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0xe0000000, 0x50426000, 0xb, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1a1080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x5, 0xa, 0x800009, 0x9, 0x3, 0x1041, 0x4, 0x0, 0x200000, 0x2000003, 0x2001040100000002, 0x49, 0x8, 0x800005, 0x6b], 0xd000, 0x101052}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m52.917793316s ago: executing program 9 (id=3227): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r2}, 0x38) 10m51.278906378s ago: executing program 9 (id=3229): r0 = epoll_create1(0x80000) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) dup3(r8, r0, 0x0) 10m49.912771685s ago: executing program 9 (id=3237): socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x1e, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./dev/ttyUSB0\x00', 0x41, 0x2) 10m48.150598834s ago: executing program 9 (id=3244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x8805) 10m47.49519502s ago: executing program 43 (id=3244): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008884}, 0x8805) 8m8.690521241s ago: executing program 7 (id=3911): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getrusage(0x1, &(0x7f00000000c0)) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect$midi(0x6, 0x2b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x424a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19, 0x1, 0x1, 0x4, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2, [@midi_out_jack={0x7, 0x24, 0x3, 0x3, 0x8, 0x0, [], 0x40}]}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa4, 0x3, 0x7, 0x8, 0x7}, 0x19, &(0x7f0000000080)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "934e478928b2a5559e1886ed2662e6c1"}]}}) r2 = epoll_create1(0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0x30000004}) timer_create(0x3, &(0x7f0000000240)={0x0, 0x2c, 0x1, @tid=r0}, 0x0) 8m7.827023183s ago: executing program 7 (id=3916): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ptrace$pokeuser(0x6, r2, 0x358, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a00000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x85, &(0x7f0000000140)=""/133}, 0x80) 8m7.344188855s ago: executing program 7 (id=3917): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 8m5.228974253s ago: executing program 7 (id=3926): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(0x0, 0xb) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 8m4.360836408s ago: executing program 7 (id=3928): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0xa000000c, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x0) r3 = socket(0x1a, 0xa, 0x6) recvmmsg(r3, 0x0, 0x0, 0x10041, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, &(0x7f0000000040)) 8m3.66797883s ago: executing program 7 (id=3931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x37}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x1) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x390, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x188, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 8m2.58594265s ago: executing program 44 (id=3931): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0xa4, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x90, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x37}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x2, 0x20000002, 0x1) fcntl$dupfd(r0, 0x406, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x390, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x188, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000000c0)) 2m57.804183889s ago: executing program 0 (id=4958): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f00000002c0)={@broadcast, @random="86082b9827c1", @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x2, 0x0, @private1, @mcast1, [@srh]}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) io_setup(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d07, &(0x7f0000000a00)="0000020000000000000002") r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x4d6, 0x32}, @in=@local, {0x0, 0x0, 0x800000000000000}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xd5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x158}}, 0x0) listen(0xffffffffffffffff, 0xfffffffd) recvmmsg(0xffffffffffffffff, &(0x7f0000001000), 0x41, 0x40010103, 0x0) 2m57.483396397s ago: executing program 0 (id=4960): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$vcsu(0x0, 0x1, 0x117402) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) sendto$packet(r2, &(0x7f00000001c0)="18806c52adc8a4f71898d690f33c03", 0xf, 0x0, &(0x7f00000000c0)={0x11, 0xe, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r4, {0x5, 0x10}, {0x1, 0xb}, {0x8, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 2m54.056049711s ago: executing program 0 (id=4972): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e03200009"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}]}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, r5, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r6 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0x80000000}) 2m51.564829736s ago: executing program 0 (id=4977): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r1, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r0}, 0x20) sendto(r0, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xba}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5c0, 0x0, 0x0}}, 0x0) write$uinput_user_dev(r8, &(0x7f0000000100)={'syz1\x00', {0xfff3, 0x3f8, 0x7, 0xf001}, 0x4e, [0x100, 0xffffff5a, 0x7, 0x4, 0x1ff, 0x8cf, 0x2, 0x8, 0x7701, 0xfffffff7, 0x3a, 0x0, 0x4, 0xffffffc0, 0x1000, 0xbaf, 0x10001, 0x4, 0x0, 0xff, 0x101, 0x8, 0x2, 0x47, 0x100, 0x100, 0x3, 0x5, 0x4, 0x80, 0x7fff, 0x3, 0x4, 0x4e, 0x16, 0x29, 0x10000, 0x4, 0x7fff, 0x8, 0x0, 0xd644, 0xfffffffe, 0x0, 0x0, 0x1, 0x7, 0xca86, 0x7, 0x9, 0x6, 0x5, 0x1, 0x7, 0x4, 0xfffffffd, 0x80000001, 0x8000, 0xf03b, 0x5, 0x3, 0xfffff001, 0x5000, 0x9], [0x1, 0x6, 0x3, 0xffffcb85, 0x3, 0x14178b7b, 0x6, 0x1, 0x3, 0x0, 0x9, 0x80, 0x7, 0x8, 0x8, 0x7, 0x8001, 0x1000, 0x7fffffff, 0xfffffff3, 0x31c, 0x5, 0x0, 0x4, 0x1, 0x2, 0xffff8001, 0x8, 0x9, 0xb2c, 0x3, 0x2, 0x3, 0x1, 0x1, 0xfffffff1, 0x3, 0x8, 0x8, 0x8, 0x6, 0x101, 0xffff, 0x0, 0x100, 0x10, 0x5, 0x9, 0xbf23, 0x10000000, 0x1, 0x1c000000, 0x7ff, 0x6, 0x8001, 0x6, 0x6, 0x1000, 0xe, 0x7, 0x8, 0x3, 0x9], [0x8, 0x5, 0x2, 0x8, 0x5, 0x8, 0x3, 0x1, 0x10, 0x2, 0xf, 0x2, 0x0, 0x3, 0x7f, 0x200, 0x9479, 0x7, 0x40, 0x3, 0xfffffff2, 0x6e, 0x9, 0x5, 0x7, 0x9e, 0x5, 0x5, 0x7, 0x7, 0xdda9, 0x4, 0x8, 0x4, 0x9, 0x0, 0x3, 0xfffffff9, 0x81, 0xffff7fff, 0x100, 0x40, 0x401, 0xd1e4, 0x9, 0x8, 0x8, 0x1, 0xc0000000, 0xfffffff9, 0x8, 0x80000001, 0x6, 0x0, 0xfffff000, 0x6, 0x5, 0x8, 0x175, 0x6, 0x2, 0x8, 0x1, 0x1000], [0xfb, 0x4, 0x3, 0x5, 0x7fffffff, 0xf0, 0x7, 0x9, 0xa1, 0x7f, 0xff, 0x2, 0x1, 0x6, 0x1, 0x100, 0xf42, 0x3, 0x8, 0x4, 0x7, 0x3, 0x1ff, 0x8, 0x5, 0xffff, 0x0, 0x5, 0x602, 0x9, 0x4, 0x101, 0x0, 0x4, 0x0, 0xda2, 0x7, 0xd2ce, 0x4, 0x3, 0x3, 0x8000, 0x8, 0x39, 0x8001, 0x4, 0x6, 0x9, 0xc01, 0xe, 0x1, 0x1, 0x3, 0x27, 0xe, 0x0, 0x7ff, 0x867, 0xfffffff8, 0x80000000, 0x5a, 0xdbdb, 0x9, 0x3]}, 0x45c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_io_uring_setup(0x2eff, 0x0, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0100, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'\x00', 0x1}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000080)=0x1) r10 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) 2m49.340078522s ago: executing program 0 (id=4984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000000906010200000000000000000502ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a3100000000050001"], 0x4c}}, 0x4000080) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cdab01ef0001010203010902270001010080fa0904000003ff0000000705810340000107050202000200"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000000c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r2, &(0x7f0000000800)='abcd ef01', 0x9) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0xd, 0x13, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x4000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x11e, 0x1, 0x0, &(0x7f0000000000)) write(r5, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) 2m45.040285702s ago: executing program 0 (id=5002): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c2", 0x2}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/dummy_udc\x00', 0x802, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x2, 0xfffff000}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @timestamp={0x8, 0xa, 0x957, 0x8}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0xa) syz_usb_connect$midi(0x2, 0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000040ca150101400001020301090228000101061009090400000101030080072401275f070009050902ff030337070625"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe5c5e2d11a21b6e6}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000824}, 0x4800) 2m28.774404381s ago: executing program 45 (id=5002): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="24c2", 0x2}], 0x1}}], 0x2, 0x2000c8c0) syz_emit_ethernet(0x46, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93", 0x1}], 0x1}}], 0x1, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/dummy_udc\x00', 0x802, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xe}}}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x58, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x0, 0x0, 0x400, {[@timestamp={0x8, 0xa, 0x2, 0x98c6}, @generic={0xfe, 0x2}, @window={0x3, 0x3, 0xd7}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x2, 0xfffff000}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @timestamp={0x8, 0xa, 0x957, 0x8}, @sack={0x5, 0x6, [0x6]}]}}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES8=r2], 0xa) syz_usb_connect$midi(0x2, 0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500200000040ca150101400001020301090228000101061009090400000101030080072401275f070009050902ff030337070625"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xe5c5e2d11a21b6e6}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000824}, 0x4800) 20.877062634s ago: executing program 4 (id=5423): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @empty}, {0x6, @random="13e4cf10e209"}, 0x4e, {0x2, 0x4e23, @rand_addr=0x64010100}, 'bridge0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5c71f91b05c413550230b4c817a6", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000240)='b', 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0x5) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="c9273f6a588e06d9965d342faebf43144af3ca89b935b6747f7184", 0x1b, 0x4044880, 0x0, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000000)=0x1) ppoll(&(0x7f0000000180)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) 20.423387768s ago: executing program 2 (id=5427): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x2c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a3100"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x34, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}]}}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x20, r5, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r6 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0x80000000}) 19.879916579s ago: executing program 4 (id=5431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x10001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 19.061071866s ago: executing program 4 (id=5433): syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@private1}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xffffffffffffffdf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000", @ANYRES16, @ANYBLOB="0100230100003402000002000000080001", @ANYRES32=r4], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, 0x0) 18.788875947s ago: executing program 2 (id=5435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$inet6(0xa, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsmount(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) 16.655325779s ago: executing program 3 (id=5439): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x18, 0x140c, 0x95e9d37b56298e73, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x20080000) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), 0x0, 0x0, 0x1) flistxattr(r1, &(0x7f0000000140)=""/28, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) timer_create(0x7, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r3, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, &(0x7f0000000280)) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000440)={r5, r5, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) r7 = fanotify_init(0x0, 0x0) fanotify_mark(r7, 0x65a, 0x40000008, 0xffffffffffffff9c, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r4, &(0x7f0000000138)="000000000000000000800000000000000000000000000000746869", 0x1b) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000009e40)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425"], 0x4c}}, 0x0) 15.891285798s ago: executing program 2 (id=5442): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) syz_emit_ethernet(0x4a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x1}}, {@llc={0x4, {@snap={0xab, 0x0, '`!', "0856bf", 0x88f7, "5b8e11bdec503866f2300152c42aa44fc11af855bde6f08a9b7ecc43b5db8f4abb631050ea230505c87be804667392"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='btrfs\x00', 0xc000, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000300)={'\x00', 0x401, 0x7, 0x1, 0x6, 0x800100000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d1"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) 15.003490665s ago: executing program 2 (id=5443): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) bind$can_j1939(r1, 0x0, 0x0) connect$can_j1939(r1, 0x0, 0x0) writev(r1, &(0x7f0000002840)=[{0x0}], 0x1) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000180)) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) io_uring_setup(0x2c49, &(0x7f0000000240)={0x0, 0x3640, 0x0, 0xfffffffc, 0x0, 0x0, r2}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 14.880920995s ago: executing program 3 (id=5444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd29, 0x25dfdc00, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, 0x0, &(0x7f0000001000)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x1000) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)={0x14, 0x76, 0x1, 0x0, 0x0, "", [@generic="a2"]}, 0x14}], 0x1}, 0x20000084) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000002000a0002000000000000000000080007000008000008000e800400020008000b"], 0x40}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r4, 0x5a) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) close_range(r4, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) arch_prctl$ARCH_GET_GS(0x1004, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 14.467598038s ago: executing program 3 (id=5448): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='//(\x00') bind$tipc(r0, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xffffffff}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000080)='}%{/\x00', 0x1c5a00, &(0x7f0000000180)={@align=0x4, {0xff, 0x6, 0xac5e, 0x1ffffffffffffffe}}, 0x1000, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f00000002c0)=0x8}) 13.50884136s ago: executing program 3 (id=5449): fsopen(0x0, 0x0) syz_usb_connect(0x3, 0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100004893a710fd03beeb639a010203010902340001fb000000090410010334bd1b0609050102"], 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)={@broadcast, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast1, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffe}}}}}}, 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='ro\x00', 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r5, 0x5}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) syz_open_dev$media(0x0, 0x8000, 0x4000) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000080), 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00\x00\x00\x00\x00\x00\x00o\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="1800040000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r8, @ANYBLOB], 0x3c}}, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, 0x0) 13.482051598s ago: executing program 4 (id=5450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x10001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000540)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 12.58835226s ago: executing program 4 (id=5453): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = fanotify_init(0x200, 0x0) writev(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0xc000, 0x1000000, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000040)={0x10000, 0x1f000}) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000040)={0x2020}, 0x229) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) 11.908939046s ago: executing program 1 (id=5456): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) unshare(0x22020600) fadvise64(r2, 0x4, 0x5, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/94) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) 6.09218417s ago: executing program 1 (id=5457): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000002200)={0x7, &(0x7f00000021c0)=[{0x5, 0x6, 0x8, 0xffff}, {0x0, 0xd, 0x2, 0x8}, {0x9, 0x2, 0x1, 0xf}, {0x4c4, 0x2, 0x5, 0x400}, {0xc5, 0xe, 0xd, 0x2}, {0x2, 0xc5, 0x1, 0x7}, {0xb7, 0xb, 0x4, 0x6}]}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="16000000000000000100000006"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) write(r3, &(0x7f0000000300)='1', 0x1) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, 0x0, 0x20000000}, 0x20) timer_delete(0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000002180)={&(0x7f0000002100)=""/117, 0x1022000, 0x800, 0x6}, 0x20) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000040)={0x7, &(0x7f0000002080)=[{0x8000, 0xe, 0x9, 0xb}, {0xd, 0x4, 0x2, 0x4}, {0xffff, 0x1, 0x3, 0x8}, {0xedc5, 0x7f, 0xff, 0x8}, {0xfbff, 0xf, 0x1, 0x7}, {0x8, 0x4, 0x9, 0x3c8e}, {0x5, 0x4, 0x3, 0x5}]}, 0x10) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000002280)={0xd5, 0x0, 0x2}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000020c0)) 5.865931553s ago: executing program 1 (id=5458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) socket$inet6(0xa, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs={0x0, 0x0, 0x20004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsmount(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/4\x00') pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) 5.774575835s ago: executing program 6 (id=5459): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9443c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x26d1, 0x0, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r6, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) r7 = io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x9ddd, 0x10, 0x3, 0x159, 0x0, r0}) ioctl$FE_DISEQC_RESET_OVERLOAD(r1, 0x6f3e, 0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x1c, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) io_submit(r2, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x1, r1, 0x0, 0x0, 0x6}]) 5.563516071s ago: executing program 1 (id=5460): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f00000008c0)={0x0, &(0x7f0000000080)}) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x4002, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYBLOB="7efb88692638abcc4b1dacc55d180a532f5373e91c41190020e87f75a7ad6e7d3145ec8a4344b2132d3b5f1eef"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xcd}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0) 5.149329511s ago: executing program 6 (id=5461): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x80040, 0x0) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[], 0x119) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000440)={'veth0_to_batadv\x00'}) r6 = syz_open_dev$hidraw(0x0, 0x0, 0x14a042) ioctl$HIDIOCGRDESC(r6, 0x90044802, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008894) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000a80)=@nat={'nat\x00', 0x1b, 0x5, 0x5d8, 0x338, 0x0, 0xffffffff, 0x128, 0x248, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, &(0x7f00000002c0), {[{{@ipv6={@local, @dev={0xfe, 0x80, '\x00', 0x22}, [0xffffff00, 0xffffffff, 0x7f8000ff, 0xff], [0xffffff00, 0xffffffff], 'veth1_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x5, 0x4, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@ipv6header={{0x28}, {0x59, 0x40}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x4}, {0x4, 0x4, 0x2}, 0x5, 0x9}}}, {{@ipv6={@local, @private2, [0x7f00007f, 0xffffffff, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xff, 0xffffffff], 'vlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x4, 0x7, 0x4, 0xc}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x11, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@multicast2, @gre_key=0xfff9, @gre_key=0x5}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'geneve0\x00', {0xff}, {0xff}, 0x2c, 0x9f, 0x1, 0x8}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@loopback, @gre_key=0x7, @icmp_id=0x64}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x7, 0x321], 0xf8, 0x4, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev={0xfe, 0x80, '\x00', 0x24}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @remote, @remote, @remote, @remote, @mcast1], 0xf}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @icmp_id=0x67, @icmp_id=0x68}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 5.012471555s ago: executing program 1 (id=5462): io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0xa0) getdents64(r6, 0x0, 0x0) 3.893655969s ago: executing program 6 (id=5463): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r2, 0xcd2e8000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x4, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001840)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x2a0, 0x390, 0x390, 0x390, 0x1c0, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000, 0xffffff00], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, 0x20, 0xc, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0xffffff00, 0x0, 0x0, 0xffffff00], [0x0, 0xffffff00], '\x00', 'veth0\x00', {}, {0xff}, 0x2f, 0x9}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0xffff, 0x44, 0x2}, 0xfdfffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@loopback, 0x1, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x7f, 0xfffffffa, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 3.695398042s ago: executing program 1 (id=5464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x17fc) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="300000006f020003002000000000070000000000000080ffff0000080000000000000000020000000500000000000000"], 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xc8Ng\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) fcntl$addseals(r2, 0x409, 0x8) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000006, 0x11, r2, 0x392fc000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r3 = memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) pwrite64(r3, 0x0, 0x0, 0x100004) r4 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000380)=""/45) setsockopt$packet_int(r4, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) msgget(0x1, 0x200) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000002c0)={0x0, r1, r3, 0x3, 0x3, '\x00', {0x5, 0x7, 0x0, 0x5, 0x6, 0x0, 0x2, 0x3, {0xff, 0x8}, {0xeb, 0x6}, {0xe, 0x7}, 0x3, 0x7, 0x0, 0x64ca6757, 0x5, 0x1, 0x1, 0xc, 0x4, 0xdcf, '\x00', 0x10, 0x6, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000001200)="05010906a101", 0x6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0xa, [[0x9ef8, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff9], [0x10, 0x1, 0x0, 0x80000000, 0xd, 0x9, 0x4], [0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd]], '\x00', [{0x4, 0xf8}, {}, {0xffffffff}, {0xffffffff, 0x1, 0x0, 0x1}, {0x3, 0xfffffffe}, {0x1}, {}, {0x0, 0x4}, {}, {0x2, 0x6}, {0x0, 0x1}, {0xfffffff8, 0x1eae}], '\x00', 0x1, 0x0, 0x0, 0xf8}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000013000300686173683a6e65742c69666163650000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) 3.670662979s ago: executing program 6 (id=5465): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x1c}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) unshare(0x40000000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x9, &(0x7f0000006680)) semget$private(0x0, 0x4, 0x12) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410073697700140033006c6f00"/56], 0x38}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000180)={0x16, 0x110, 0xfa00, {r5, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @loopback}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r5}}, 0x120) ioctl$FIONREAD(r0, 0x541b, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r6, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2.486230808s ago: executing program 6 (id=5466): mkdir(&(0x7f00000020c0)='./file0\x00', 0x111) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x60}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{}], [], 0x2c}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000340), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c727b7472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22"]) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000010201020000000000000000010000056800038006000340000400000c000280050002800500010084000000140001800800010064010100080002007f0000010c00028005000100880000002c00028005000100840000000600034000030000060003400003000006000340000200009c006c5b68e69ef716d2"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 2.216830196s ago: executing program 2 (id=5467): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$packet_int(r6, 0x107, 0x7, &(0x7f0000000100)=0x10001, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) 712.750768ms ago: executing program 2 (id=5468): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80d08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800fb00010400000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000"], &(0x7f0000000080)='GPL\x00', 0x7}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x549}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) close(r4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x87fe, 0x4, 0x7, 0x13d}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140), 0x4) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x60}, {0xffffffffffffffff, 0xd401}], 0x1, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x3ff]}, 0x37) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 614.254649ms ago: executing program 6 (id=5469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000001980)=0x1) read$FUSE(r3, &(0x7f0000006040)={0x2020}, 0x2020) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r7) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$tcp_congestion(r8, &(0x7f00000001c0)='hybla\x00', 0x6) writev(0xffffffffffffffff, 0x0, 0x0) munlockall() 531.972734ms ago: executing program 3 (id=5470): mkdir(0x0, 0x65) inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x1a2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x0, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x8, 0x40040001, 0x334, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 80.109457ms ago: executing program 3 (id=5471): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./mysys\x00', 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = getpid() sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) prctl$PR_SET_MM_MAP(0x26, 0xe, 0x0, 0x0) ioprio_set$pid(0x1, r0, 0x2007) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) nanosleep(0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700000000000010000001c0007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018808000100", @ANYRES32=r2, @ANYBLOB="0c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) mount(0x0, &(0x7f0000000040)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x3, 0x0) 0s ago: executing program 4 (id=5472): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000280)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x16, {0x2, 0x4e22, @private=0xa010102}, 'vlan0\x00'}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="0203040314f400002cbd70fbbfdbdf250100090000000000030006000000000002004e23e0000001000000000000000002000100000000000000000a000000ffffffc2fc000f00000000000000000000000000070018003d70324000000000050017002b8000000a004e2400000000fc020000000000000000000000000000001000000000000002001300080000002dbd700007350000"], 0xa0}, 0x1, 0x7}, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r3, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r2, &(0x7f0000000100), 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f00000004c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000940)=ANY=[@ANYBLOB="180000850000002a000000181c00008fa6e7e634485e949f59c3e11bd65271d020ca46da526ffd80c1dc910d9c0e991cb1ff67d5a6341a9eed76633b74f402d8bb0000000000b002ff06b7740724e6e3111cbdaf360bd4efaed74250604c61032ae7b4ed70f9a42badb0", @ANYRES32, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 61162][T23873] batman_adv: batadv0: Adding interface: veth0 [ 1141.061184][T23873] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.061211][T23873] batman_adv: batadv0: Interface activated: veth0 [ 1141.302028][T23867] random: crng reseeded on system resumption [ 1141.310156][ T30] audit: type=1400 audit(1788272511.387:4178): avc: denied { write } for pid=23854 comm="syz.1.5060" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1141.310198][ T30] audit: type=1400 audit(1788272511.387:4179): avc: denied { open } for pid=23854 comm="syz.1.5060" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1141.998351][ T4920] Bluetooth: hci4: command tx timeout [ 1142.705302][T23783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.728050][ T7919] net_ratelimit: 82 callbacks suppressed [ 1142.728078][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1142.728096][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1142.809714][T23783] veth0_vlan: entered promiscuous mode [ 1142.826516][T23783] veth1_vlan: entered promiscuous mode [ 1142.838130][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1142.859082][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1142.859113][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1142.911437][T23783] veth0_macvtap: entered promiscuous mode [ 1142.925890][T23783] veth1_macvtap: entered promiscuous mode [ 1142.952171][T23783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.969626][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1142.981232][T23783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.989366][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.007956][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.027994][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.038221][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.038888][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.038914][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.038934][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.058476][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1143.118911][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1143.344219][ T7090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.344253][ T7090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.459291][ T7919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.467980][ T7919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.488722][ T30] audit: type=1400 audit(1788272513.567:4180): avc: denied { mounton } for pid=23783 comm="syz-executor" path="/root/syzkaller.LLgRcw/syz-tmp" dev="sda1" ino=2082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1143.526579][ T30] audit: type=1400 audit(1788272513.607:4181): avc: denied { mounton } for pid=23783 comm="syz-executor" path="/root/syzkaller.LLgRcw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1143.562705][ T30] audit: type=1400 audit(1788272513.647:4182): avc: denied { mounton } for pid=23783 comm="syz-executor" path="/root/syzkaller.LLgRcw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=101455 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1143.620303][ T30] audit: type=1400 audit(1788272513.707:4183): avc: denied { mounton } for pid=23783 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1143.646494][ T30] audit: type=1400 audit(1788272513.737:4184): avc: denied { mounton } for pid=23783 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1144.280951][ T5711] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1144.439403][ T5711] usb 7-1: Using ep0 maxpacket: 8 [ 1144.445606][ T5711] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1144.462170][ T5711] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1144.462198][ T5711] usb 7-1: config 0 has no interface number 0 [ 1144.462228][ T5711] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1144.462244][ T5711] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1144.462260][ T5711] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1144.462278][ T5711] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1144.462302][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.545679][ T5711] usb 7-1: config 0 descriptor?? [ 1144.574141][ T5711] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1145.195708][ T5711] usb 7-1: USB disconnect, device number 48 [ 1145.211055][ T5711] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1147.538154][ T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1147.700146][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1147.706398][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1147.718186][ T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1147.718211][ T10] usb 2-1: config 0 has no interface number 0 [ 1147.718241][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1147.718257][ T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1147.718273][ T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1147.718290][ T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1147.718315][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.748438][ T10] usb 2-1: config 0 descriptor?? [ 1147.778660][ T7923] net_ratelimit: 74 callbacks suppressed [ 1147.778677][ T7923] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1147.778691][ T7923] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1147.846612][ T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1147.889735][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1147.901925][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1148.019223][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.019253][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1148.129115][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.129145][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1148.199208][ T2256] usb 2-1: USB disconnect, device number 59 [ 1148.208577][ T2256] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1148.239103][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1148.239132][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1148.345915][T23938] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1149.546482][ T30] audit: type=1400 audit(1788272519.577:4185): avc: denied { open } for pid=23953 comm="syz.1.5087" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1149.546535][ T30] audit: type=1400 audit(1788272519.587:4186): avc: denied { ioctl } for pid=23953 comm="syz.1.5087" path="/dev/ttyq7" dev="devtmpfs" ino=382 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1149.816567][T23964] random: crng reseeded on system resumption [ 1150.320768][ T30] audit: type=1400 audit(1788272520.397:4187): avc: denied { write } for pid=23963 comm="syz.6.5092" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1151.576609][T23986] 9p: Bad value for 'rfdno' [ 1151.594836][ T30] audit: type=1800 audit(1788272521.677:4188): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5097" name="file1" dev="tmpfs" ino=3698 res=0 errno=0 [ 1151.617613][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1151.845232][ T30] audit: type=1400 audit(1788272521.927:4189): avc: denied { view } for pid=23993 comm="syz.3.5096" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1151.873681][T23994] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1152.858278][T21171] net_ratelimit: 63 callbacks suppressed [ 1152.858308][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1152.858325][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1152.968059][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1152.968090][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1153.080261][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1153.080291][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1153.105687][T24018] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1153.105687][T24018] [ 1153.105962][T24018] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 1153.106011][T24018] CIFS: Attempting to mount //127.0.0.1/share [ 1153.180679][T24018] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1153.188976][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1153.188995][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1153.207221][T24018] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1153.298073][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1153.317670][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1153.608529][ T1229] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1153.642046][T24034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5108'. [ 1153.760697][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 1153.766238][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1153.781959][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1153.781984][ T1229] usb 4-1: config 0 has no interface number 0 [ 1153.782021][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1153.782036][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1153.782052][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1153.782069][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1153.782094][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.824538][ T1229] usb 4-1: config 0 descriptor?? [ 1153.871980][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1154.047045][T24036] batman_adv: batadv0: Adding interface: veth0 [ 1154.056472][T24036] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1154.056559][T24036] batman_adv: batadv0: Interface activated: veth0 [ 1154.103999][ T1229] usb 4-1: USB disconnect, device number 19 [ 1154.113209][ T1229] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1154.169408][T24036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1154.169437][T24036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1154.186001][T24036] batman_adv: batadv0: Interface deactivated: veth0 [ 1154.186017][T24036] batman_adv: batadv0: Removing interface: veth0 [ 1154.822617][T24063] bond0: entered promiscuous mode [ 1154.828573][T24063] bond_slave_0: entered promiscuous mode [ 1154.828726][T24063] bond_slave_1: entered promiscuous mode [ 1154.829773][T24063] batadv0: entered promiscuous mode [ 1154.857011][T24063] debugfs: 'hsr1' already exists in 'hsr' [ 1154.865145][T24063] Cannot create hsr debugfs directory [ 1154.875937][T24063] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1154.886917][T24063] bond0: left promiscuous mode [ 1154.886944][T24063] bond_slave_0: left promiscuous mode [ 1154.887058][T24063] bond_slave_1: left promiscuous mode [ 1154.909971][T24063] batadv0: left promiscuous mode [ 1155.935484][ T30] audit: type=1400 audit(1788272525.977:4190): avc: denied { append } for pid=24074 comm="syz.3.5119" name="sg0" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1156.472944][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5122'. [ 1156.869986][T24040] Process accounting resumed [ 1157.049800][ T1229] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1157.208167][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 1157.213598][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1157.224442][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1157.224466][ T1229] usb 4-1: config 0 has no interface number 0 [ 1157.224494][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1157.224510][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1157.224533][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.224550][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1157.224574][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.266019][ T1229] usb 4-1: config 0 descriptor?? [ 1157.320566][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1157.479720][T24088] 9p: Bad value for 'rfdno' [ 1157.491396][ T2256] usb 4-1: USB disconnect, device number 20 [ 1157.502252][ T2256] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1157.624585][T24095] tipc: Resetting bearer [ 1157.897978][ T7919] net_ratelimit: 76 callbacks suppressed [ 1157.898008][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1157.898024][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1158.034739][ T3906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1158.034769][ T3906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1158.114353][T24106] 9p: Bad value for 'rfdno' [ 1158.130420][T24105] netlink: Failed to add batadv0 helper -22 [ 1158.130459][T24105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.138122][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1158.138141][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1158.343578][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1158.343607][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1158.414116][T24114] netlink: 'syz.3.5132': attribute type 4 has an invalid length. [ 1158.631225][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5133'. [ 1159.668553][ T5711] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1159.728031][ T1229] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1159.938282][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 1159.961396][ T5711] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1160.196509][ T5711] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1160.196552][ T5711] usb 4-1: config 0 has no interface number 0 [ 1160.196585][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1160.196601][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1160.196617][ T5711] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1160.196634][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1160.196672][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.944893][ T1229] usb 7-1: Using ep0 maxpacket: 8 [ 1160.978454][ T5711] usb 4-1: config 0 descriptor?? [ 1161.001207][ T1229] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1161.014885][ T1229] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1161.014913][ T1229] usb 7-1: config 0 has no interface number 0 [ 1161.014946][ T1229] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1161.014963][ T1229] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1161.014979][ T1229] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1161.014996][ T1229] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1161.015020][ T1229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.105968][ T1229] usb 7-1: config 0 descriptor?? [ 1161.111793][ T5711] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1161.142159][ T1229] ldusb 7-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1161.191213][T24149] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1161.213742][T24144] 9p: Bad value for 'rfdno' [ 1161.223961][ T5711] usb 4-1: USB disconnect, device number 21 [ 1161.234187][ T5711] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1161.372941][T24147] 9p: Bad value for 'rfdno' [ 1161.385024][ T1229] usb 7-1: USB disconnect, device number 49 [ 1161.394844][ T1229] ldusb 7-1:0.55: LD USB Device #1 now disconnected [ 1161.847901][ T5711] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1162.001000][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 1162.008750][ T5711] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1162.025133][ T5711] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1162.025160][ T5711] usb 2-1: config 0 has no interface number 0 [ 1162.025184][ T5711] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1162.025200][ T5711] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1162.025215][ T5711] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1162.025230][ T5711] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1162.025255][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.204584][ T5711] usb 2-1: config 0 descriptor?? [ 1162.734274][ T5711] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1163.113458][T21171] net_ratelimit: 61 callbacks suppressed [ 1163.124679][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1163.133295][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1163.213406][T24174] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 1163.239390][T24174] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 1163.239416][T24174] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 1163.239430][T24174] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 1163.242901][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1163.242930][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1163.245734][ T50] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 1163.348157][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1163.348188][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1163.368958][ T5711] usb 2-1: USB disconnect, device number 60 [ 1163.376933][ T5711] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1163.459780][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1163.459815][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1163.568456][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1163.569528][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1164.329036][T24201] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1165.679059][T24212] /dev/nullb0: Can't open blockdev [ 1166.046304][ T30] audit: type=1400 audit(1788272536.127:4191): avc: denied { write } for pid=24215 comm="syz.3.5165" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1166.046350][ T30] audit: type=1400 audit(1788272536.127:4192): avc: denied { open } for pid=24215 comm="syz.3.5165" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1166.111897][ T30] audit: type=1400 audit(1788272536.197:4193): avc: denied { ioctl } for pid=24215 comm="syz.3.5165" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x4d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1166.340549][T24217] netlink: 'syz.1.5164': attribute type 19 has an invalid length. [ 1167.005952][T24222] overlayfs: failed to clone upperpath [ 1168.022749][T24232] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1168.187999][ T7094] net_ratelimit: 60 callbacks suppressed [ 1168.188027][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1168.188044][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1168.238273][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1168.298999][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1168.299033][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1168.409423][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1168.409454][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1168.478503][ T1229] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1168.518276][ T3906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1168.518308][ T3906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1168.628715][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1168.628746][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1168.646866][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 1168.653220][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1168.664274][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1168.664299][ T1229] usb 4-1: config 0 has no interface number 0 [ 1168.664328][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1168.664343][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1168.664359][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1168.664376][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1168.664400][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.745400][ T1229] usb 4-1: config 0 descriptor?? [ 1168.757001][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1168.774772][ T30] audit: type=1400 audit(1788272538.857:4194): avc: denied { ioctl } for pid=24247 comm="syz.6.5175" path="socket:[102807]" dev="sockfs" ino=102807 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1168.889570][T24246] netlink: 'syz.4.5174': attribute type 1 has an invalid length. [ 1168.889595][T24246] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5174'. [ 1168.914166][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 1168.914322][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 1168.990438][ T5711] usb 4-1: USB disconnect, device number 22 [ 1169.000385][ T5711] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1169.188022][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 1169.188152][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 1169.448611][T24248] ceph: No mds server is up or the cluster is laggy [ 1169.700406][ T1229] libceph: connect (1)[c::]:6789 error -101 [ 1169.700551][ T1229] libceph: mon0 (1)[c::]:6789 connect error [ 1173.850565][ T5711] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1173.866908][ T7090] net_ratelimit: 34 callbacks suppressed [ 1173.866943][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1173.866960][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1173.969770][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1173.969800][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1174.027912][ T5711] usb 7-1: device descriptor read/all, error -71 [ 1174.083799][ T50] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1174.094932][ T50] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1174.197927][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1174.197958][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1174.489115][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1174.489146][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1175.520586][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1175.520651][T24290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1175.866506][T24294] 9p: Bad value for 'rfdno' [ 1175.979307][T24298] netlink: 'syz.6.5187': attribute type 11 has an invalid length. [ 1175.987906][T24298] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1176.105977][T24302] bridge_slave_0: left allmulticast mode [ 1176.113028][T24302] bridge_slave_0: left promiscuous mode [ 1176.113178][T24302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.138808][T24302] bridge_slave_1: left allmulticast mode [ 1176.145058][T24302] bridge_slave_1: left promiscuous mode [ 1176.145181][T24302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.175138][T24302] veth0_to_bond: left allmulticast mode [ 1176.175169][T24302] veth0_to_bond: left promiscuous mode [ 1176.175277][T24302] bridge1: port 2(veth0_to_bond) entered disabled state [ 1176.214683][T24302] bond0: (slave bond_slave_0): Releasing backup interface [ 1176.264777][T24302] bond0: (slave bond_slave_1): Releasing backup interface [ 1176.293217][T24302] team0: Port device team_slave_0 removed [ 1176.312685][T24302] team0: Port device team_slave_1 removed [ 1176.345210][T24302] veth3: left allmulticast mode [ 1176.433220][T24302] veth3: left promiscuous mode [ 1176.433361][T24302] bridge1: port 1(veth3) entered disabled state [ 1176.620435][T24303] team0: Port device xfrm0 added [ 1177.294203][T24317] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1177.309279][T24304] tipc: Enabled bearer , priority 0 [ 1178.575106][T24331] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 1179.054318][ T7920] net_ratelimit: 77 callbacks suppressed [ 1179.054349][ T7920] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1179.054366][ T7920] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1179.158801][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1179.168127][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1179.179287][T24336] ip_tables: iptables: counters copy to user failed while replacing table [ 1179.290902][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1179.290934][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1179.514800][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1179.525623][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1179.638040][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1180.641675][ T1229] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1180.769235][T24356] 9p: Bad value for 'rfdno' [ 1181.516061][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 1181.522970][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1181.536918][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1181.536950][ T1229] usb 4-1: config 0 has no interface number 0 [ 1181.536981][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.536996][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1181.537013][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1181.537030][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1181.537055][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.578399][ T1229] usb 4-1: config 0 descriptor?? [ 1181.643649][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1181.820773][ T2256] usb 4-1: USB disconnect, device number 23 [ 1181.830208][ T2256] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1182.047462][ T1229] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 1182.531071][ T1229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1182.539699][ T1229] usb 2-1: not running at top speed; connect to a high speed hub [ 1182.539718][ T1229] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1182.549137][ T1229] usb 2-1: config 1 has an invalid descriptor of length 149, skipping remainder of the config [ 1182.549153][ T1229] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1182.585833][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.585851][ T1229] usb 2-1: Product: syz [ 1182.585861][ T1229] usb 2-1: Manufacturer: syz [ 1182.585869][ T1229] usb 2-1: SerialNumber: syz [ 1182.824133][ T1229] usb 2-1: USB disconnect, device number 61 [ 1184.093761][T24403] sit0: entered promiscuous mode [ 1184.108265][T24403] netlink: 'syz.3.5220': attribute type 1 has an invalid length. [ 1184.108295][T24403] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5220'. [ 1184.141040][ T1229] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1184.141211][T21170] net_ratelimit: 52 callbacks suppressed [ 1184.141271][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1184.141287][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1184.247990][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1184.256191][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1184.297472][ T1229] usb 2-1: Using ep0 maxpacket: 16 [ 1184.306250][ T1229] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1184.331336][ T1229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.340144][ T1229] usb 2-1: Product: syz [ 1184.344523][ T1229] usb 2-1: Manufacturer: syz [ 1184.354390][ T1229] usb 2-1: SerialNumber: syz [ 1184.361432][ T1229] usb 2-1: config 0 descriptor?? [ 1184.383376][ T1229] usb 2-1: selecting invalid altsetting 1 [ 1184.389970][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1184.389989][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1184.408165][ T1229] technisat-usb2: could not set alternate setting to 0 [ 1184.499293][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1184.507177][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1184.658598][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1184.658655][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1184.712121][ T1229] technisat-usb2: firmware version: 0.0 [ 1184.712156][ T1229] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1184.879399][ T2256] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1185.038668][ T2256] usb 4-1: Using ep0 maxpacket: 8 [ 1185.044398][ T2256] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1185.055474][ T2256] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1185.055500][ T2256] usb 4-1: config 0 has no interface number 0 [ 1185.055529][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1185.055544][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1185.055561][ T2256] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1185.055592][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1185.055617][ T2256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.139418][ T2256] usb 4-1: config 0 descriptor?? [ 1185.168569][ T2256] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1185.181782][ T1229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1185.192033][ T1229] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 1185.192064][ T1229] usb 2-1: media controller created [ 1185.192093][ T1229] technisat-usb2: i2c-error: out failed 53 = -22 [ 1185.192115][ T1229] dvb-usb: MAC address reading failed. [ 1185.243179][ T1229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1185.311961][ T1229] DVB: Unable to find symbol stv090x_attach() [ 1185.360640][ T1229] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 1185.381724][ T2256] usb 4-1: USB disconnect, device number 24 [ 1185.390662][ T2256] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1185.468346][ T1229] rc_core: IR keymap rc-technisat-usb2 not found [ 1185.468370][ T1229] Registered IR keymap rc-empty [ 1185.481692][ T1229] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1185.494901][ T1229] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input76 [ 1185.509881][ T1229] dvb-usb: schedule remote query interval to 100 msecs. [ 1185.696876][T24429] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1185.872307][T24428] No such timeout policy "s" [ 1185.906007][ T1229] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 1185.974953][ T2256] dvb-usb: error -71 while querying for an remote control event. [ 1185.996648][ T1229] usb 2-1: USB disconnect, device number 62 [ 1186.191444][ T30] audit: type=1400 audit(1788272556.287:4195): avc: denied { map } for pid=24433 comm="syz.3.5227" path="/dev/sda1" dev="devtmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1186.251486][ T1229] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 1187.058270][ T1229] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1187.209172][ T1229] usb 4-1: Using ep0 maxpacket: 8 [ 1187.214699][ T1229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1187.225288][ T1229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1187.225312][ T1229] usb 4-1: config 0 has no interface number 0 [ 1187.225339][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1187.225355][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1187.225371][ T1229] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1187.225396][ T1229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1187.225420][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.304919][ T1229] usb 4-1: config 0 descriptor?? [ 1187.329189][ T1229] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1187.371305][T24443] Process accounting paused [ 1187.540270][ T1229] usb 4-1: USB disconnect, device number 25 [ 1187.552736][ T1229] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1187.561911][T24459] sit0: entered promiscuous mode [ 1187.622237][T24459] netlink: 'syz.1.5233': attribute type 1 has an invalid length. [ 1187.630457][T24459] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5233'. [ 1187.728209][ T30] audit: type=1400 audit(1788272557.817:4196): avc: denied { ioctl } for pid=24457 comm="syz.6.5234" path="socket:[103831]" dev="sockfs" ino=103831 ioctlcmd=0x6e8a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1187.871477][T24471] 9p: Bad value for 'rfdno' [ 1188.368675][ T2256] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1188.532187][ T2256] usb 4-1: Using ep0 maxpacket: 8 [ 1188.538457][ T2256] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1188.550293][ T2256] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1188.550317][ T2256] usb 4-1: config 0 has no interface number 0 [ 1188.550345][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1188.550362][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1188.550378][ T2256] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1188.550395][ T2256] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1188.550420][ T2256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.593310][ T2256] usb 4-1: config 0 descriptor?? [ 1188.642384][ T2256] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1188.913302][ T5711] usb 4-1: USB disconnect, device number 26 [ 1188.928180][ T5711] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1189.065204][ T30] audit: type=1400 audit(1788272559.147:4197): avc: denied { append } for pid=24489 comm="syz.6.5244" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1189.097023][T24488] 9p: Bad value for 'rfdno' [ 1189.221809][ T59] net_ratelimit: 75 callbacks suppressed [ 1189.221838][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1189.221856][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1189.328103][ T3906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1189.328133][ T3906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1189.367980][ T5711] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1189.387160][T24496] sit0: entered promiscuous mode [ 1189.401745][T24496] netlink: 'syz.2.5247': attribute type 1 has an invalid length. [ 1189.410854][T24496] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5247'. [ 1189.440702][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1189.451232][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1189.515084][T24500] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5248'. [ 1189.535826][ T5711] usb 7-1: Using ep0 maxpacket: 16 [ 1189.536835][ T5711] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1189.559717][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1189.559746][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1189.579305][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.579333][ T5711] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.579355][ T5711] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1189.579380][ T5711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.603282][ T5711] usb 7-1: config 0 descriptor?? [ 1189.668502][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1189.668530][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1189.940698][T24498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5245'. [ 1189.950427][T13095] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1189.959765][T24498] team_slave_0: left promiscuous mode [ 1189.959803][T24498] team_slave_1: left promiscuous mode [ 1190.016847][T24512] 9p: Bad value for 'rfdno' [ 1190.076923][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085616][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085652][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085670][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085688][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085705][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085733][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085752][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085769][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.085787][ T5711] microsoft 0003:045E:07DA.003B: unknown main item tag 0x0 [ 1190.139691][T13095] usb 4-1: Using ep0 maxpacket: 8 [ 1190.147880][T13095] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1190.166197][T13095] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1190.166214][T13095] usb 4-1: config 0 has no interface number 0 [ 1190.166244][T13095] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1190.166257][T13095] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1190.166271][T13095] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1190.166287][T13095] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1190.166317][T13095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.212581][T13095] usb 4-1: config 0 descriptor?? [ 1190.279864][T13095] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1190.319483][ T5711] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.003B/input/input77 [ 1190.338090][ T5711] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1190.504499][T13095] usb 4-1: USB disconnect, device number 27 [ 1190.523156][T13095] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1191.546381][T24516] fuse: fd is not a fuse device [ 1191.774676][T13095] usb 7-1: USB disconnect, device number 52 [ 1193.598044][ T1229] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1193.747905][ T1229] usb 7-1: Using ep0 maxpacket: 16 [ 1193.753469][ T1229] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1193.765128][ T1229] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1193.765156][ T1229] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1193.765176][ T1229] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1193.765190][ T1229] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1193.765203][ T1229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1193.765221][ T1229] usb 7-1: config 0 has no interface number 0 [ 1193.765244][ T1229] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1193.765267][ T1229] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1193.765282][ T1229] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1193.765302][ T1229] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1193.765322][ T1229] usb 7-1: config 0 interface 125 has no altsetting 0 [ 1193.765335][ T1229] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1193.905746][ T1229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.914811][ T1229] usb 7-1: Product: syz [ 1193.921490][ T1229] usb 7-1: Manufacturer: syz [ 1193.926368][ T1229] usb 7-1: SerialNumber: syz [ 1193.933357][ T1229] usb 7-1: config 0 descriptor?? [ 1193.960839][ T1229] usb 7-1: selecting invalid altsetting 2 [ 1194.228166][T21170] net_ratelimit: 142 callbacks suppressed [ 1194.228209][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.247837][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.274875][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.293695][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.310857][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.327960][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.348497][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.368943][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.387971][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1194.409438][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1195.408502][ C0] usb 7-1: async_complete: urb error -71 [ 1195.408577][ C0] usb 7-1: async_complete: urb error -71 [ 1195.408631][ C0] usb 7-1: async_complete: urb error -71 [ 1195.408678][ C0] usb 7-1: async_complete: urb error -71 [ 1195.441447][ T1229] get_1284_register: usb error -71 [ 1195.463043][ T1229] usb 7-1: USB disconnect, device number 53 [ 1195.641332][T24498] team0 (unregistering): Port device team_slave_0 removed [ 1195.663791][T24498] team0 (unregistering): Port device team_slave_1 removed [ 1195.676787][T24536] netlink: 'syz.4.5259': attribute type 1 has an invalid length. [ 1195.686393][T24536] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5259'. [ 1195.838026][ T5711] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1196.504963][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 1196.511190][ T5711] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1196.522740][ T5711] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1196.522766][ T5711] usb 4-1: config 0 has no interface number 0 [ 1196.522808][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1196.522824][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1196.522841][ T5711] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1196.522858][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1196.522883][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.531682][ T5711] usb 4-1: config 0 descriptor?? [ 1196.619091][ T5711] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1196.781250][ T5711] usb 4-1: USB disconnect, device number 28 [ 1196.790196][ T5711] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1198.047212][T24562] wlan0 speed is unknown, defaulting to 1000 [ 1199.308247][T21171] net_ratelimit: 54 callbacks suppressed [ 1199.308278][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.308301][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1199.435420][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.435454][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1199.506844][ T30] audit: type=1400 audit(1788272569.577:4198): avc: denied { read } for pid=24567 comm="syz.1.5271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1199.539768][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.558210][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.577907][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.598421][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.618007][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1199.638229][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1200.237914][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1200.982861][T24572] zonefs (nullb0) ERROR: Not a zoned block device [ 1201.028011][ T5711] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1201.189892][ T5711] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1201.200681][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.211632][ T5711] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1201.222075][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1201.222105][ T5711] usb 2-1: SerialNumber: syz [ 1201.243335][ T5711] usb 2-1: 0:2 : does not exist [ 1201.249818][ T5711] usb 2-1: unit 6 not found! [ 1201.624247][ T1229] usb 2-1: USB disconnect, device number 63 [ 1201.797051][T24580] 9p: Bad value for 'rfdno' [ 1201.965144][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5275'. [ 1202.011178][T24584] team0 (unregistering): Port device team_slave_0 removed [ 1202.032171][T24584] team0 (unregistering): Port device team_slave_1 removed [ 1202.829761][T24587] fuse: Bad value for 'fd' [ 1203.814016][T24607] netlink: 'syz.2.5272': attribute type 1 has an invalid length. [ 1203.822552][T24607] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5272'. [ 1204.348889][T21171] net_ratelimit: 62 callbacks suppressed [ 1204.355419][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1204.363473][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1204.468834][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1204.468867][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1204.577941][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1204.577973][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1205.120146][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1205.120180][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1205.474816][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1205.474848][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1207.396815][ T5711] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1207.521715][T24633] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5276'. [ 1207.542527][T24633] tipc: Enabling of bearer rejected, failed to enable media [ 1207.557442][ T5711] usb 4-1: Using ep0 maxpacket: 8 [ 1207.562950][ T5711] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1207.573572][ T5711] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1207.573597][ T5711] usb 4-1: config 0 has no interface number 0 [ 1207.573626][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1207.573642][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1207.573659][ T5711] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1207.573676][ T5711] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1207.573701][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.575147][ T5711] usb 4-1: config 0 descriptor?? [ 1207.658380][ T5711] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1207.886069][ T5711] usb 4-1: USB disconnect, device number 29 [ 1207.892117][ T5711] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1208.181152][T24633] IPVS: Error connecting to the multicast addr [ 1209.416236][T21170] net_ratelimit: 45 callbacks suppressed [ 1209.502858][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1209.528877][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1209.646255][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1209.646292][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1209.802983][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1209.860401][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1209.929624][T24650] tipc: Resetting bearer [ 1209.940535][T24650] batman_adv: batadv0: Interface deactivated: veth0 [ 1209.949043][T24650] batman_adv: batadv0: Removing interface: veth0 [ 1209.962143][T24650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1209.981967][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1209.981986][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1210.041594][T24650] team0: Device xfrm0 failed to enter team mode [ 1210.041621][T24650] team0: Device xfrm0 failed to enter team mode [ 1210.057119][T24650] tipc: Enabling of bearer rejected, failed to enable media [ 1210.853726][ T30] audit: type=1400 audit(1788272580.887:4199): avc: denied { audit_write } for pid=24652 comm="syz.2.5297" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1210.882253][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1210.921146][T24649] CIFS: Attempting to mount //127.0.0.1/share [ 1210.921803][T24649] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1210.921843][T24649] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1210.949199][T24650] IPVS: Unknown mcast interface: dvmrp0 [ 1210.961100][T24649] comedi comedi1: Minor 2 specified more than once! [ 1211.564324][ T30] audit: type=1400 audit(1788272581.637:4200): avc: denied { accept } for pid=24654 comm="syz.3.5298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1215.128522][ T59] net_ratelimit: 15 callbacks suppressed [ 1215.128566][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1215.128584][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1215.247942][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1215.247973][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1215.363046][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1215.363077][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1215.468077][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1215.468109][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1215.578931][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1215.578965][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1218.496684][T24679] Process accounting resumed [ 1220.890504][ T7090] net_ratelimit: 58 callbacks suppressed [ 1220.896385][ T1229] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1220.913757][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1220.913793][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.078117][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.078146][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.163042][ T30] audit: type=1400 audit(1788272591.227:4201): avc: denied { read } for pid=24698 comm="syz.1.5313" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1221.191863][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.191885][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.210161][ T30] audit: type=1400 audit(1788272591.227:4202): avc: denied { open } for pid=24698 comm="syz.1.5313" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1221.236572][ T1229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1221.236612][ T1229] usb 4-1: New USB device found, idVendor=1608, idProduct=020c, bcdDevice=54.9b [ 1221.255698][ T1229] usb 4-1: config 8 has an invalid interface number: 232 but max is 2 [ 1221.265162][ T1229] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1221.274648][ T1229] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1221.284722][ T1229] usb 4-1: config 8 has an invalid interface number: 4 but max is 2 [ 1221.284751][ T1229] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1221.284764][ T1229] usb 4-1: config 8 has 2 interfaces, different from the descriptor's value: 3 [ 1221.284778][ T1229] usb 4-1: config 8 has no interface number 0 [ 1221.284789][ T1229] usb 4-1: config 8 has no interface number 1 [ 1221.284833][ T1229] usb 4-1: config 8 interface 4 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1221.284848][ T1229] usb 4-1: config 8 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1221.284865][ T1229] usb 4-1: config 8 interface 232 has no altsetting 0 [ 1221.284878][ T1229] usb 4-1: config 8 interface 4 has no altsetting 0 [ 1221.305319][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.305339][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.396002][ T1229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.404848][ T1229] usb 4-1: Product: syz [ 1221.404860][ T1229] usb 4-1: Manufacturer: syz [ 1221.404869][ T1229] usb 4-1: SerialNumber: syz [ 1221.412383][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1221.412402][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1221.770689][ T1229] io_ti 4-1:8.232: required endpoints missing [ 1221.803710][ T1229] io_ti 4-1:8.4: required endpoints missing [ 1221.819960][ T1229] usb 4-1: USB disconnect, device number 30 [ 1225.898248][ T197] net_ratelimit: 55 callbacks suppressed [ 1225.898275][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1225.898292][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.133449][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.133491][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.242517][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.242547][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.348023][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.348053][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.459599][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1226.459644][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1226.569814][ T1229] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1227.799091][ T1229] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1227.817375][ T1229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.817415][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.829127][ T1229] usb 4-1: config 0 descriptor?? [ 1227.851089][ T1229] pwc: Askey VC010 type 2 USB webcam detected. [ 1228.008210][ T5711] libceph: connect (1)[c::]:6789 error -101 [ 1228.008389][ T5711] libceph: mon0 (1)[c::]:6789 connect error [ 1228.037937][T24745] ceph: No mds server is up or the cluster is laggy [ 1228.295210][ T1229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1228.306289][ T1229] pwc: recv_control_msg error -32 req 02 val 2700 [ 1228.333988][T24740] random: crng reseeded on system resumption [ 1228.341212][ T30] audit: type=1400 audit(1788272598.417:4203): avc: denied { append } for pid=24739 comm="syz.3.5329" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1228.377056][ T1229] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1229.404817][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5329'. [ 1229.538251][ T1229] pwc: recv_control_msg error -71 req 04 val 1300 [ 1229.545059][ T1229] pwc: recv_control_msg error -71 req 04 val 1400 [ 1229.552565][ T1229] pwc: recv_control_msg error -71 req 02 val 2000 [ 1229.560258][ T1229] pwc: recv_control_msg error -71 req 02 val 2100 [ 1229.567126][ T1229] pwc: recv_control_msg error -71 req 04 val 1500 [ 1229.574698][ T1229] pwc: recv_control_msg error -71 req 02 val 2500 [ 1229.582268][ T1229] pwc: recv_control_msg error -71 req 02 val 2400 [ 1229.589795][ T1229] pwc: recv_control_msg error -71 req 02 val 2600 [ 1229.596631][ T1229] pwc: recv_control_msg error -71 req 02 val 2900 [ 1229.604259][ T1229] pwc: recv_control_msg error -71 req 02 val 2800 [ 1229.611787][ T1229] pwc: recv_control_msg error -71 req 04 val 1100 [ 1229.619351][ T1229] pwc: recv_control_msg error -71 req 04 val 1200 [ 1229.626864][ T1229] pwc: Registered as video103. [ 1229.642698][ T1229] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 1229.667990][ T1229] usb 4-1: USB disconnect, device number 31 [ 1230.122340][T24769] wlan0 speed is unknown, defaulting to 1000 [ 1230.584157][T24778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1230.622045][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5336'. [ 1230.919314][ T7919] net_ratelimit: 50 callbacks suppressed [ 1230.919344][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1230.937937][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1230.973373][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1230.989336][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.009597][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.009626][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1231.118356][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.118387][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1231.155390][T24785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5338'. [ 1231.228445][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1231.236346][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1231.326421][T24789] netlink: 'syz.2.5339': attribute type 1 has an invalid length. [ 1231.338470][T24789] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1233.073486][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.073887][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.074182][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.074481][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.074802][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.075196][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.075558][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.078135][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.078512][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1233.078875][T24791] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1234.089288][T24805] Bluetooth: ISO socket layer initialized [ 1234.308608][T24809] netlink: 'syz.2.5348': attribute type 1 has an invalid length. [ 1234.317792][T24809] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5348'. [ 1235.443777][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5354'. [ 1236.659821][T21171] net_ratelimit: 37 callbacks suppressed [ 1236.659854][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1236.659871][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1236.768711][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1236.768743][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1236.999636][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1236.999668][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1237.108059][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1237.118737][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1237.227916][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1237.227946][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1237.333281][T24830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5358'. [ 1238.245027][T24835] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1238.321463][T13986] Bluetooth: hci0: Frame reassembly failed (-84) [ 1238.352633][T24830] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1238.534378][T24840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24840 comm=syz.2.5362 [ 1239.979427][T24853] netlink: 'syz.4.5352': attribute type 1 has an invalid length. [ 1239.987876][T24853] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5352'. [ 1241.019884][T21645] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1241.559278][ T1229] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1241.717847][ T1229] usb 4-1: Using ep0 maxpacket: 32 [ 1241.723623][ T1229] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1241.734518][ T1229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.745398][ T1229] usb 4-1: config 0 descriptor?? [ 1241.751386][ T7919] net_ratelimit: 36 callbacks suppressed [ 1241.751400][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1241.751415][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1241.804495][ T1229] as10x_usb: device has been detected [ 1241.813110][ T1229] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1241.862628][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1241.871127][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1241.895389][ T1229] usb 4-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1241.930499][ T1229] as10x_usb: error during firmware upload part1 [ 1241.942759][ T1229] Registered device nBox DVB-T Dongle [ 1241.978778][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1241.978809][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1242.088620][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1242.088651][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1242.197853][T21171] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1242.205706][T21171] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1242.236195][ T1229] usb 4-1: USB disconnect, device number 32 [ 1242.309877][ T1229] Unregistered device nBox DVB-T Dongle [ 1242.311477][ T1229] as10x_usb: device has been disconnected [ 1242.642754][T24880] netlink: 'syz.2.5376': attribute type 1 has an invalid length. [ 1242.651464][T24880] netlink: 'syz.2.5376': attribute type 1 has an invalid length. [ 1242.907789][ T1229] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1243.057892][ T1229] usb 2-1: Using ep0 maxpacket: 8 [ 1243.063432][ T1229] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1243.400280][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.939990][ T1229] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1243.940017][ T1229] pvrusb2: ********** [ 1243.940031][ T1229] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1243.940040][ T1229] pvrusb2: Important functionality might not be entirely working. [ 1243.940046][ T1229] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1243.940054][ T1229] pvrusb2: ********** [ 1244.303327][ T2342] pvrusb2: Invalid write control endpoint [ 1244.488861][ T2342] pvrusb2: Invalid write control endpoint [ 1244.494742][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1244.522555][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1244.532052][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1244.543491][ T2342] pvrusb2: Device being rendered inoperable [ 1244.543533][ T2342] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1244.543570][ T2342] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1244.559278][ T2342] pvrusb2: Attached sub-driver cx25840 [ 1244.559289][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1244.559294][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1245.484553][T24903] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24903 comm=syz.4.5382 [ 1245.558216][T13095] usb 2-1: USB disconnect, device number 64 [ 1247.055794][ T59] net_ratelimit: 48 callbacks suppressed [ 1247.074087][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1247.074123][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1247.191337][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1247.191366][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1247.298141][ T3906] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1247.298173][ T3906] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1247.408256][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1247.408286][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1247.517849][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1247.517878][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1247.698628][T13095] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1247.858243][T13095] usb 2-1: Using ep0 maxpacket: 8 [ 1247.864188][T13095] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1247.876252][T13095] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1247.876277][T13095] usb 2-1: config 0 has no interface number 0 [ 1247.876306][T13095] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1247.876322][T13095] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1247.876339][T13095] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1247.876356][T13095] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1247.876380][T13095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.961257][T13095] usb 2-1: config 0 descriptor?? [ 1247.974857][T13095] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1248.285559][T13095] usb 2-1: USB disconnect, device number 65 [ 1248.297078][T13095] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1248.661331][T24931] overlayfs: failed to clone upperpath [ 1249.944088][T24933] kAFS: unable to lookup cell '/,c¾ûL' [ 1249.953566][ T30] audit: type=1400 audit(1788272620.047:4204): avc: denied { set_context_mgr } for pid=24932 comm="syz.3.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1250.044997][T24921] Process accounting paused [ 1250.264699][T24945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1250.308812][T24945] md: array md0 already has disks! [ 1250.318650][T24945] md: invalid raid superblock magic on ram1 [ 1250.329314][T24945] md: ram1 does not have a valid v0.90 superblock, not importing! [ 1250.329371][T24945] md: md_import_device returned -22 [ 1250.358140][T24945] md: could not open device unknown-block(1,0). [ 1250.358182][T24945] md: md_import_device returned -16 [ 1250.771186][T24956] 9p: Bad value for 'version' [ 1250.899327][ T30] audit: type=1400 audit(1788272620.987:4205): avc: denied { watch watch_reads } for pid=24952 comm="syz.6.5402" path="pipe:[56900]" dev="pipefs" ino=56900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1252.039901][T24958] netlink: 'syz.3.5404': attribute type 1 has an invalid length. [ 1252.039928][T24958] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5404'. [ 1252.138622][T13986] net_ratelimit: 70 callbacks suppressed [ 1252.138651][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1252.138668][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1252.166785][T24965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24965 comm=syz.4.5406 [ 1252.247959][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1252.248008][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1252.392347][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1252.392376][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1252.504641][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1252.743319][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1252.883204][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1252.883241][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1254.253741][T24968] netlink: 'syz.3.5407': attribute type 1 has an invalid length. [ 1254.262410][T24968] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1254.280484][T24975] netlink: 160 bytes leftover after parsing attributes in process `syz.6.5418'. [ 1256.085384][T21645] Bluetooth: hci4: command 0x0406 tx timeout [ 1256.788570][T24982] 9p: Bad value for 'rfdno' [ 1256.934863][ T30] audit: type=1400 audit(1788272627.017:4206): avc: denied { mount } for pid=24985 comm="syz.2.5412" name="/" dev="hugetlbfs" ino=106524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1257.965849][ T7919] net_ratelimit: 44 callbacks suppressed [ 1257.965879][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1257.965895][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1258.969375][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1258.969407][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1259.079070][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.079100][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1259.208548][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.216345][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1259.390276][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.399012][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1259.860533][T25004] openvswitch: ovs-system: Dropping previously announced user features [ 1260.589400][ T30] audit: type=1400 audit(1788272630.677:4207): avc: denied { setattr } for pid=25013 comm="syz.3.5424" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1260.852428][T25024] 9p: Bad value for 'rfdno' [ 1262.106825][T13095] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1262.168283][T25038] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5432'. [ 1262.676857][ T30] audit: type=1400 audit(1788272632.757:4208): avc: denied { ioctl } for pid=25016 comm="syz.6.5426" path="socket:[106729]" dev="sockfs" ino=106729 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1262.809285][T25043] kAFS: unable to lookup cell 'ÿ' [ 1262.980844][T21170] net_ratelimit: 42 callbacks suppressed [ 1262.986800][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1262.986855][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1263.088498][ T59] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1263.088552][ T59] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1263.129524][T25047] netlink: Failed to add batadv0 helper -22 [ 1263.129564][T25047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1263.202152][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1263.213778][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1263.318974][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1263.330508][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1264.238729][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1264.688357][ T30] audit: type=1400 audit(1788272634.777:4209): avc: denied { read write } for pid=25055 comm="syz.3.5439" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1264.688401][ T30] audit: type=1400 audit(1788272634.777:4210): avc: denied { open } for pid=25055 comm="syz.3.5439" path="/89/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1264.773020][T25053] tipc: Resetting bearer [ 1264.773853][T25053] vlan0: left promiscuous mode [ 1264.774456][T25053] geneve3: left promiscuous mode [ 1264.820071][ T30] audit: type=1400 audit(1788272634.897:4211): avc: denied { ioctl } for pid=25055 comm="syz.3.5439" path="/89/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1265.060199][T25065] netlink: 4384 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1265.203250][T25067] netlink: 188 bytes leftover after parsing attributes in process `syz.6.5440'. [ 1266.270195][T25073] netlink: 'syz.1.5441': attribute type 1 has an invalid length. [ 1266.270222][T25073] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5441'. [ 1266.506219][ T30] audit: type=1400 audit(1788272636.587:4212): avc: denied { mounton } for pid=25074 comm="syz.6.5445" path="/proc/1459/cgroup" dev="proc" ino=106854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1267.588727][ T30] audit: type=1400 audit(1788272637.617:4213): avc: denied { ioctl } for pid=25084 comm="//(" path="socket:[106882]" dev="sockfs" ino=106882 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1267.677184][T25079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5446'. [ 1268.559753][T21170] net_ratelimit: 40 callbacks suppressed [ 1268.572067][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1268.572102][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1268.772207][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1268.772238][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1268.878663][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1268.878692][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1268.988146][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1268.988175][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1269.283549][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.283583][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1270.699465][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xf8cc instead [ 1270.699494][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x8e3a instead [ 1270.699517][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000008: 0x4dd8 instead [ 1270.699530][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000000c: 0x5a4c instead [ 1270.699541][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000010: 0xaf18 instead [ 1270.699553][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000014: 0xd28a instead [ 1270.699565][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xe445 instead [ 1270.699577][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000001c: 0x0948 instead [ 1270.699588][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000020: 0xeec0 instead [ 1270.699604][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000024: 0xa2de instead [ 1270.699615][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.699872][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x03ab instead [ 1270.699891][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x15a1 instead [ 1270.699902][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001008: 0x33da instead [ 1270.699914][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000100c: 0x730d instead [ 1270.699925][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001010: 0x0c65 instead [ 1270.699936][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001014: 0xa199 instead [ 1270.699948][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x0b00 instead [ 1270.699959][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000101c: 0x894f instead [ 1270.699971][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001020: 0x2b4e instead [ 1270.699983][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001024: 0xcc14 instead [ 1270.699994][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.700232][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xdc19 instead [ 1270.700244][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x119a instead [ 1270.700254][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002008: 0xa620 instead [ 1270.700265][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000200c: 0xe8fe instead [ 1270.700276][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002010: 0x5ce5 instead [ 1270.700287][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002014: 0x0bef instead [ 1270.700299][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0xbd7c instead [ 1270.700310][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000201c: 0x2bbc instead [ 1270.700322][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002020: 0xd6e7 instead [ 1270.700333][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002024: 0x9918 instead [ 1270.700344][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.700606][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xd100 instead [ 1270.700619][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x2722 instead [ 1270.700629][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003008: 0x6e89 instead [ 1270.700640][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000300c: 0x3f18 instead [ 1270.700651][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003010: 0x35bf instead [ 1270.700662][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003014: 0xaafd instead [ 1270.700672][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x8faf instead [ 1270.700684][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000301c: 0x849e instead [ 1270.700696][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003020: 0xd08f instead [ 1270.700708][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003024: 0x443b instead [ 1270.700719][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.700964][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x12ec instead [ 1270.700976][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x2168 instead [ 1270.700986][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004008: 0x8f92 instead [ 1270.700997][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000400c: 0xa9d7 instead [ 1270.701007][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004010: 0x0c43 instead [ 1270.701018][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004014: 0x6c30 instead [ 1270.701028][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0xfc30 instead [ 1270.701039][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000401c: 0x3f91 instead [ 1270.701049][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004020: 0xce9e instead [ 1270.701061][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004024: 0x3686 instead [ 1270.701072][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.701306][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xa6ee instead [ 1270.701317][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x7eec instead [ 1270.701328][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005008: 0xfd81 instead [ 1270.701338][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000500c: 0xe8cc instead [ 1270.701348][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005010: 0x9866 instead [ 1270.701359][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005014: 0x2e55 instead [ 1270.701369][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0xbe0a instead [ 1270.701379][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000501c: 0x7b97 instead [ 1270.701390][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005020: 0x1d02 instead [ 1270.701400][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005024: 0x091a instead [ 1270.701426][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.701670][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4fe4 instead [ 1270.701681][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0989 instead [ 1270.701692][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006008: 0x351b instead [ 1270.701702][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000600c: 0x4ec1 instead [ 1270.701713][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006010: 0xe911 instead [ 1270.701723][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006014: 0x17ac instead [ 1270.701734][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x4f55 instead [ 1270.701744][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000601c: 0x707e instead [ 1270.701755][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006020: 0x8dff instead [ 1270.701766][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006024: 0x5db6 instead [ 1270.701776][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.702025][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x5550 instead [ 1270.702037][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xbccc instead [ 1270.702047][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007008: 0x1861 instead [ 1270.702058][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000700c: 0xac13 instead [ 1270.702068][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007010: 0x8149 instead [ 1270.702079][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007014: 0xf9ec instead [ 1270.702089][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x3d72 instead [ 1270.702100][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000701c: 0x863d instead [ 1270.702111][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007020: 0x7e72 instead [ 1270.702122][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007024: 0x53c1 instead [ 1270.702132][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.702363][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xe1dc instead [ 1270.702374][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xe3c5 instead [ 1270.702384][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008008: 0xb13f instead [ 1270.702395][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000800c: 0x5d94 instead [ 1270.702419][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008010: 0xeee0 instead [ 1270.702431][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008014: 0x1c12 instead [ 1270.702443][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0xbd08 instead [ 1270.702455][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000801c: 0x9e97 instead [ 1270.702467][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008020: 0xeb25 instead [ 1270.702478][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008024: 0x5c22 instead [ 1270.702489][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.702723][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x74f8 instead [ 1270.702734][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x5e52 instead [ 1270.702745][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009008: 0x280e instead [ 1270.702755][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000900c: 0xa5ca instead [ 1270.702766][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009010: 0xa1b5 instead [ 1270.702776][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009014: 0x154b instead [ 1270.702787][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x62f5 instead [ 1270.702797][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000901c: 0xfb23 instead [ 1270.702808][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009020: 0xb88c instead [ 1270.702819][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009024: 0xa7d7 instead [ 1270.702830][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.703088][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x21a5 instead [ 1270.703099][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x28be instead [ 1270.703110][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a008: 0xf5fb instead [ 1270.703120][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a00c: 0x6ab2 instead [ 1270.703131][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a010: 0x3326 instead [ 1270.703141][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a014: 0x4759 instead [ 1270.703152][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x1ebb instead [ 1270.703162][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a01c: 0x1342 instead [ 1270.703173][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a020: 0xd4bb instead [ 1270.703184][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a024: 0xe2e9 instead [ 1270.703194][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.703441][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x3c29 instead [ 1270.703455][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xb4e3 instead [ 1270.703466][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b008: 0xfd34 instead [ 1270.703477][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b00c: 0x304e instead [ 1270.703488][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b010: 0x6f28 instead [ 1270.703498][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b014: 0xad9c instead [ 1270.703509][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0xaae4 instead [ 1270.703520][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b01c: 0x974e instead [ 1270.703531][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b020: 0x75e6 instead [ 1270.703542][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b024: 0xdcb4 instead [ 1270.703552][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.703783][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x6925 instead [ 1270.703794][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x43c9 instead [ 1270.703827][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c008: 0xc1b8 instead [ 1270.703838][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c00c: 0x8dd8 instead [ 1270.703849][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c010: 0xc5b8 instead [ 1270.703859][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c014: 0x0082 instead [ 1270.703870][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x935c instead [ 1270.703885][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c01c: 0x142e instead [ 1270.703896][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c020: 0xec7d instead [ 1270.703907][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c024: 0xea88 instead [ 1270.703917][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.704149][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x15bd instead [ 1270.704160][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0ea9 instead [ 1270.704171][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d008: 0x6b11 instead [ 1270.704182][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d00c: 0x596c instead [ 1270.704193][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d010: 0x7cb0 instead [ 1270.704203][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d014: 0xe460 instead [ 1270.704214][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x67ab instead [ 1270.704229][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d01c: 0xc6c9 instead [ 1270.704240][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d020: 0x839f instead [ 1270.704251][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d024: 0xb6f4 instead [ 1270.704266][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.704506][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x5d08 instead [ 1270.704518][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x8623 instead [ 1270.704529][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e008: 0xedb4 instead [ 1270.704540][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e00c: 0x783f instead [ 1270.704550][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e010: 0xc1f4 instead [ 1270.704561][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e014: 0xac77 instead [ 1270.704572][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0xf358 instead [ 1270.704583][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e01c: 0x20a4 instead [ 1270.704594][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e020: 0x0754 instead [ 1270.704605][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e024: 0x0182 instead [ 1270.704615][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.704847][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x5965 instead [ 1270.704858][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xdf51 instead [ 1270.704869][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f008: 0x8956 instead [ 1270.704884][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f00c: 0x9892 instead [ 1270.704895][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f010: 0xa0a7 instead [ 1270.704906][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f014: 0x64c5 instead [ 1270.704916][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9724 instead [ 1270.704930][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f01c: 0xb637 instead [ 1270.704941][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f020: 0xf1b9 instead [ 1270.704951][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f024: 0x857e instead [ 1270.704962][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.705198][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xeb18 instead [ 1270.705209][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0746 instead [ 1270.705220][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010008: 0x01cc instead [ 1270.705231][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001000c: 0xed4d instead [ 1270.705242][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010010: 0x5e4e instead [ 1270.705253][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010014: 0x234f instead [ 1270.705264][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0xd119 instead [ 1270.705275][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001001c: 0x9d82 instead [ 1270.705285][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010020: 0x0205 instead [ 1270.705296][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010024: 0xfe43 instead [ 1270.705306][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.705504][T25099] jffs2: Old JFFS2 bitmask found at 0x00010d34 [ 1270.705512][T25099] jffs2: You cannot use older JFFS2 filesystems with newer kernels [ 1270.705563][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x9736 instead [ 1270.705574][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xd698 instead [ 1270.705585][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011008: 0xe3d7 instead [ 1270.705596][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001100c: 0x76b0 instead [ 1270.705607][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011010: 0xb665 instead [ 1270.705617][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011014: 0x8941 instead [ 1270.705628][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x53d7 instead [ 1270.705639][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001101c: 0x27f9 instead [ 1270.705650][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011020: 0x5b9b instead [ 1270.705660][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011024: 0x1fdb instead [ 1270.705671][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.705907][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xc321 instead [ 1270.705918][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xedc8 instead [ 1270.705929][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0xc849 instead [ 1270.705940][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0x42a9 instead [ 1270.705951][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0x1e46 instead [ 1270.705961][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xee7f instead [ 1270.705972][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0xfc63 instead [ 1270.705983][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x4cae instead [ 1270.705994][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0x202d instead [ 1270.706004][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x41bc instead [ 1270.706015][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.706244][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x97cc instead [ 1270.706255][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0800 instead [ 1270.706266][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x6231 instead [ 1270.706277][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0xb43c instead [ 1270.706287][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0x2c4c instead [ 1270.706298][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0x2953 instead [ 1270.706309][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x3117 instead [ 1270.706320][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0xab78 instead [ 1270.706330][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x70b1 instead [ 1270.706341][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0xdecd instead [ 1270.706352][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.706593][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x5c46 instead [ 1270.706605][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x6905 instead [ 1270.706616][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x3277 instead [ 1270.706627][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x7369 instead [ 1270.706637][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0x090d instead [ 1270.706648][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xf1ce instead [ 1270.706659][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9078 instead [ 1270.706669][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xe891 instead [ 1270.706680][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x743a instead [ 1270.706691][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x9cc9 instead [ 1270.706701][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.706936][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x3020 instead [ 1270.706948][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0080 instead [ 1270.706959][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0x6d6f instead [ 1270.706969][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0x7505 instead [ 1270.706980][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x1af1 instead [ 1270.706991][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x1a9b instead [ 1270.707002][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x388f instead [ 1270.707012][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0xbe95 instead [ 1270.707023][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0xf56e instead [ 1270.707034][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x200e instead [ 1270.707044][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.707908][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x3e50 instead [ 1270.707922][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xfb01 instead [ 1270.707933][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x5cd7 instead [ 1270.707944][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0xfcff instead [ 1270.707955][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x03d2 instead [ 1270.707965][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x4fe3 instead [ 1270.707976][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1b01 instead [ 1270.707987][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x27ed instead [ 1270.707998][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xae9f instead [ 1270.708009][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x3b39 instead [ 1270.708019][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.708249][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x5c08 instead [ 1270.708260][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xcc7a instead [ 1270.708274][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x6421 instead [ 1270.708285][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0xc78f instead [ 1270.708296][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x2fb4 instead [ 1270.708307][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x51a4 instead [ 1270.708318][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x11dd instead [ 1270.708328][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0x2500 instead [ 1270.708339][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xf733 instead [ 1270.708350][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0xd7e5 instead [ 1270.708360][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.708603][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x6f7a instead [ 1270.708615][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x5a50 instead [ 1270.708626][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0x4d47 instead [ 1270.708636][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0xf10e instead [ 1270.708647][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x9828 instead [ 1270.708658][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x8a24 instead [ 1270.708669][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0xa256 instead [ 1270.708679][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0x09b2 instead [ 1270.708690][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0x01b8 instead [ 1270.708701][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x675c instead [ 1270.708711][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.708947][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x6de9 instead [ 1270.708958][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x472b instead [ 1270.708968][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x14c9 instead [ 1270.708979][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xd8db instead [ 1270.708990][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0xa872 instead [ 1270.709001][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x51c6 instead [ 1270.709011][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0xef42 instead [ 1270.709022][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0xd169 instead [ 1270.709033][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xc4fc instead [ 1270.709044][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xaf16 instead [ 1270.709054][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.709301][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x3e2b instead [ 1270.709313][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x66c8 instead [ 1270.709324][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0x3d0b instead [ 1270.709335][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x1e79 instead [ 1270.709345][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xb070 instead [ 1270.709356][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xb6a3 instead [ 1270.709367][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xe5a2 instead [ 1270.709378][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x1ca4 instead [ 1270.709388][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xff88 instead [ 1270.709399][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0xe18d instead [ 1270.709420][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.709654][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x6188 instead [ 1270.709665][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x69b7 instead [ 1270.709676][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x0912 instead [ 1270.709687][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0xc851 instead [ 1270.709698][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0x8b10 instead [ 1270.709709][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0xd7d9 instead [ 1270.709719][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xe46b instead [ 1270.709730][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0xa260 instead [ 1270.709741][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0x9236 instead [ 1270.709752][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0xce91 instead [ 1270.709762][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.710007][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x1a18 instead [ 1270.710019][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xf76b instead [ 1270.710030][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0xb4fb instead [ 1270.710041][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0xf56a instead [ 1270.710052][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x842c instead [ 1270.710063][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x5d99 instead [ 1270.710073][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x5afb instead [ 1270.710084][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0xf6a3 instead [ 1270.710095][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x865d instead [ 1270.710106][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x9f8e instead [ 1270.710116][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.710350][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xd8ba instead [ 1270.710361][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xfbbb instead [ 1270.710372][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x3da3 instead [ 1270.710383][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x537f instead [ 1270.710394][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xcc1a instead [ 1270.710405][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xcf82 instead [ 1270.710426][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x773c instead [ 1270.710437][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0x5b11 instead [ 1270.710448][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xab98 instead [ 1270.710459][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0xbd0f instead [ 1270.710469][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.710702][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x0a74 instead [ 1270.710713][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0c38 instead [ 1270.710724][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x685b instead [ 1270.710734][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x5d59 instead [ 1270.710745][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x363c instead [ 1270.710756][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x5f2a instead [ 1270.710767][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2134 instead [ 1270.710778][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0xe882 instead [ 1270.710788][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x2be0 instead [ 1270.710799][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0xc45b instead [ 1270.710809][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.711047][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x27bd instead [ 1270.711059][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x316b instead [ 1270.711070][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0x9732 instead [ 1270.711080][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x4ef8 instead [ 1270.711091][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x4053 instead [ 1270.711102][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0xd6bb instead [ 1270.711113][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x1c36 instead [ 1270.711123][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x3c77 instead [ 1270.711134][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0x18b0 instead [ 1270.711145][T25099] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0xec80 instead [ 1270.711156][T25099] jffs2: Further such events for this erase block will not be printed [ 1270.711381][T25099] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 1270.711388][T25099] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 1273.694356][T13986] net_ratelimit: 54 callbacks suppressed [ 1273.694370][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1273.694385][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1273.843597][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1273.843617][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1273.973250][T13986] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1273.973270][T13986] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1274.089755][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.089776][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1274.203904][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.203926][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1275.882167][T25115] affs: No valid root block on device nullb0 [ 1275.913161][ T30] audit: type=1400 audit(1788272645.997:4214): avc: denied { write } for pid=25112 comm="syz.1.5460" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1277.450305][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5463'. [ 1277.752756][T25137] siw: device registration error -23 [ 1277.794066][T25134] wlan0 speed is unknown, defaulting to 1000 [ 1277.908349][T13095] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1278.067768][T13095] usb 4-1: Using ep0 maxpacket: 16 [ 1278.073549][T13095] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=9a.63 [ 1278.090789][T13095] usb 4-1: config 251 has an invalid interface number: 16 but max is 0 [ 1278.090815][T13095] usb 4-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.090836][T13095] usb 4-1: config 251 has no interface number 0 [ 1278.090860][T13095] usb 4-1: config 251 interface 16 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1278.090875][T13095] usb 4-1: config 251 interface 16 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1278.090890][T13095] usb 4-1: config 251 interface 16 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1278.090907][T13095] usb 4-1: config 251 interface 16 has no altsetting 0 [ 1278.172661][T13095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.181493][T13095] usb 4-1: Product: syz [ 1278.181518][T13095] usb 4-1: Manufacturer: syz [ 1278.181530][T13095] usb 4-1: SerialNumber: syz [ 1278.564382][T25135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25135 comm=syz.3.5449 [ 1278.613573][T13095] usb 4-1: USB disconnect, device number 34 [ 1278.719239][T21170] net_ratelimit: 73 callbacks suppressed [ 1278.719266][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.737351][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.757891][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.780696][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.798166][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.826307][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.839399][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.869572][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.899371][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1278.907876][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1279.010563][T25146] overlayfs: missing 'lowerdir' [ 1279.666770][T25146] nfs4: Unknown parameter 'r{trans' [ 1280.536558][T25148] Process accounting resumed [ 1280.564954][ T30] audit: type=1400 audit(1788272650.647:4215): avc: denied { unmount } for pid=14857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1281.214415][ T30] audit: type=1400 audit(1788272651.297:4216): avc: denied { write } for pid=25154 comm="syz.3.5471" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1282.375267][T25157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1282.385978][T25157] netlink: 'syz.4.5472': attribute type 5 has an invalid length. [ 1282.399126][T25157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5472'. [ 1282.450392][T25157] geneve2: entered promiscuous mode [ 1282.456440][T25157] geneve2: entered allmulticast mode [ 1282.467847][ T197] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1282.467884][ T197] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1282.467906][ T197] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1282.467926][ T197] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1282.539390][T25155] nbd: socks must be embedded in a SOCK_ITEM attr [ 1282.539584][T25155] [ 1282.548298][T25155] ====================================================== [ 1282.555286][T25155] WARNING: possible circular locking dependency detected [ 1282.562277][T25155] syzkaller #0 Tainted: G L [ 1282.568225][T25155] ------------------------------------------------------ [ 1282.575211][T25155] syz.3.5471/25155 is trying to acquire lock: [ 1282.581246][T25155] ffff888045d80fe0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 1282.590608][T25155] [ 1282.590608][T25155] but task is already holding lock: [ 1282.597955][T25155] ffff88807395cc68 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 1282.606974][T25155] [ 1282.606974][T25155] which lock already depends on the new lock. [ 1282.606974][T25155] [ 1282.617364][T25155] [ 1282.617364][T25155] the existing dependency chain (in reverse order) is: [ 1282.626348][T25155] [ 1282.626348][T25155] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1282.633987][T25155] lock_acquire+0x1d1/0x380 [ 1282.638988][T25155] __mutex_lock+0x1a4/0x1bd0 [ 1282.644075][T25155] nbd_queue_rq+0x42d/0xfa0 [ 1282.649073][T25155] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 1282.655132][T25155] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1282.661989][T25155] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1282.668485][T25155] blk_mq_run_work_fn+0x135/0x380 [ 1282.674019][T25155] process_one_work+0xac7/0x1b10 [ 1282.679459][T25155] worker_thread+0x5ef/0xe50 [ 1282.684552][T25155] kthread+0x373/0x450 [ 1282.689129][T25155] ret_from_fork+0x730/0xd60 [ 1282.694234][T25155] ret_from_fork_asm+0x1a/0x30 [ 1282.699549][T25155] [ 1282.699549][T25155] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1282.706742][T25155] lock_acquire+0x1d1/0x380 [ 1282.711751][T25155] __mutex_lock+0x1a4/0x1bd0 [ 1282.716846][T25155] nbd_queue_rq+0xba/0xfa0 [ 1282.721791][T25155] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 1282.727856][T25155] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 1282.734696][T25155] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 1282.741176][T25155] blk_mq_run_work_fn+0x135/0x380 [ 1282.746700][T25155] process_one_work+0xac7/0x1b10 [ 1282.752146][T25155] worker_thread+0x5ef/0xe50 [ 1282.757236][T25155] kthread+0x373/0x450 [ 1282.761811][T25155] ret_from_fork+0x730/0xd60 [ 1282.766919][T25155] ret_from_fork_asm+0x1a/0x30 [ 1282.772192][T25155] [ 1282.772192][T25155] -> #4 (set->srcu){.+.+}-{0:0}: [ 1282.779373][T25155] lock_sync+0xb5/0x120 [ 1282.784024][T25155] __synchronize_srcu+0xa2/0x300 [ 1282.789453][T25155] blk_mq_quiesce_queue+0x149/0x1c0 [ 1282.795146][T25155] elevator_switch+0x17b/0x7e0 [ 1282.800407][T25155] elevator_change+0x352/0x530 [ 1282.805664][T25155] elevator_set_default+0x29e/0x360 [ 1282.811357][T25155] blk_register_queue+0x48e/0x630 [ 1282.816875][T25155] __add_disk+0x73f/0xe40 [ 1282.821697][T25155] add_disk_fwnode+0x118/0x480 [ 1282.826963][T25155] nbd_dev_add+0x779/0xb10 [ 1282.831872][T25155] nbd_init+0x2c5/0x2e0 [ 1282.836536][T25155] do_one_initcall+0x11c/0x6f0 [ 1282.841796][T25155] kernel_init_freeable+0x6ea/0x7b0 [ 1282.847491][T25155] kernel_init+0x21/0x1e0 [ 1282.852316][T25155] ret_from_fork+0x730/0xd60 [ 1282.857398][T25155] ret_from_fork_asm+0x1a/0x30 [ 1282.862654][T25155] [ 1282.862654][T25155] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1282.870440][T25155] lock_acquire+0x1d1/0x380 [ 1282.875447][T25155] __mutex_lock+0x1a4/0x1bd0 [ 1282.880529][T25155] elevator_change+0x1bc/0x530 [ 1282.885796][T25155] elv_iosched_store+0x3be/0x460 [ 1282.891229][T25155] queue_attr_store+0x25f/0x2f0 [ 1282.896570][T25155] sysfs_kf_write+0xf2/0x150 [ 1282.901650][T25155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1282.907431][T25155] vfs_write+0x6af/0x1050 [ 1282.912256][T25155] ksys_write+0x12a/0x250 [ 1282.917074][T25155] do_syscall_64+0x123/0x790 [ 1282.922154][T25155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.928538][T25155] [ 1282.928538][T25155] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 1282.937107][T25155] lock_acquire+0x1d1/0x380 [ 1282.942103][T25155] blk_alloc_queue+0x610/0x790 [ 1282.947360][T25155] blk_mq_alloc_queue+0x174/0x290 [ 1282.952884][T25155] __blk_mq_alloc_disk+0x29/0x120 [ 1282.958399][T25155] null_add_dev+0xdf8/0x1df0 [ 1282.963492][T25155] null_init+0x36b/0x460 [ 1282.968254][T25155] do_one_initcall+0x11c/0x6f0 [ 1282.973514][T25155] kernel_init_freeable+0x6ea/0x7b0 [ 1282.979208][T25155] kernel_init+0x21/0x1e0 [ 1282.984034][T25155] ret_from_fork+0x730/0xd60 [ 1282.989113][T25155] ret_from_fork_asm+0x1a/0x30 [ 1282.994369][T25155] [ 1282.994369][T25155] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1283.001546][T25155] lock_acquire+0x1d1/0x380 [ 1283.006541][T25155] fs_reclaim_acquire+0xc4/0x100 [ 1283.011972][T25155] __kmalloc_noprof+0xce/0x840 [ 1283.017227][T25155] tls_sw_sendmsg+0x11ee/0x2e00 [ 1283.022576][T25155] inet6_sendmsg+0x11c/0x140 [ 1283.027660][T25155] sock_sendmsg+0x28c/0x410 [ 1283.032659][T25155] splice_to_socket+0xb3c/0x11a0 [ 1283.038090][T25155] direct_splice_actor+0x192/0x690 [ 1283.043692][T25155] splice_direct_to_actor+0x345/0xa30 [ 1283.049555][T25155] do_splice_direct+0x174/0x240 [ 1283.054896][T25155] do_sendfile+0xadc/0xe20 [ 1283.059827][T25155] __x64_sys_sendfile64+0x1d8/0x220 [ 1283.065532][T25155] do_syscall_64+0x123/0x790 [ 1283.070616][T25155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.077001][T25155] [ 1283.077001][T25155] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 1283.085046][T25155] check_prev_add+0xeb/0xe60 [ 1283.090126][T25155] __lock_acquire+0x1492/0x1ec0 [ 1283.095467][T25155] lock_acquire+0x1d1/0x380 [ 1283.100460][T25155] lock_sock_nested+0x41/0xf0 [ 1283.105634][T25155] inet_shutdown+0x67/0x410 [ 1283.110630][T25155] nbd_mark_nsock_dead+0xae/0x5c0 [ 1283.116148][T25155] sock_shutdown+0x16b/0x200 [ 1283.121233][T25155] nbd_config_put+0x3d5/0x9b0 [ 1283.126400][T25155] nbd_genl_connect+0xd72/0x1760 [ 1283.131828][T25155] genl_family_rcv_msg_doit+0x214/0x300 [ 1283.137865][T25155] genl_rcv_msg+0x560/0x800 [ 1283.142856][T25155] netlink_rcv_skb+0x159/0x420 [ 1283.148115][T25155] genl_rcv+0x28/0x40 [ 1283.152594][T25155] netlink_unicast+0x585/0x850 [ 1283.157853][T25155] netlink_sendmsg+0x8b0/0xda0 [ 1283.163110][T25155] ____sys_sendmsg+0xa4d/0xbe0 [ 1283.168371][T25155] ___sys_sendmsg+0x190/0x1e0 [ 1283.173627][T25155] __sys_sendmsg+0x160/0x210 [ 1283.178709][T25155] do_syscall_64+0x123/0x790 [ 1283.184052][T25155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.190435][T25155] [ 1283.190435][T25155] other info that might help us debug this: [ 1283.190435][T25155] [ 1283.200630][T25155] Chain exists of: [ 1283.200630][T25155] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 1283.200630][T25155] [ 1283.213627][T25155] Possible unsafe locking scenario: [ 1283.213627][T25155] [ 1283.221045][T25155] CPU0 CPU1 [ 1283.226381][T25155] ---- ---- [ 1283.231716][T25155] lock(&nsock->tx_lock); [ 1283.236106][T25155] lock(&cmd->lock); [ 1283.242586][T25155] lock(&nsock->tx_lock); [ 1283.249489][T25155] lock(sk_lock-AF_INET6-NBD); [ 1283.254310][T25155] [ 1283.254310][T25155] *** DEADLOCK *** [ 1283.254310][T25155] [ 1283.262420][T25155] locks held by syz.3.5471/25155: 4, last CPU#0: [ 1283.268719][T25155] #0: ffffffff90d7e748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1283.276880][T25155] #1: ffffffff90d7e800 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x57b/0x800 [ 1283.285823][T25155] #2: ffff888027dac260 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x51/0x100 [ 1283.296593][T25155] #3: ffff88807395cc68 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x15e/0x200 [ 1283.306050][T25155] [ 1283.306050][T25155] stack backtrace: [ 1283.311915][T25155] CPU: 0 UID: 0 PID: 25155 Comm: syz.3.5471 Tainted: G L syzkaller #0 PREEMPT(full) [ 1283.322817][T25155] Tainted: [L]=SOFTLOCKUP [ 1283.327110][T25155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1283.337151][T25155] Call Trace: [ 1283.340404][T25155] [ 1283.343311][T25155] dump_stack_lvl+0x100/0x190 [ 1283.347967][T25155] print_circular_bug.cold+0x178/0x1be [ 1283.353404][T25155] check_noncircular+0x146/0x160 [ 1283.358321][T25155] check_prev_add+0xeb/0xe60 [ 1283.362882][T25155] ? lock_acquire+0x1d1/0x380 [ 1283.367531][T25155] __lock_acquire+0x1492/0x1ec0 [ 1283.372354][T25155] ? __mutex_lock+0x26c/0x1bd0 [ 1283.377094][T25155] lock_acquire+0x1d1/0x380 [ 1283.381569][T25155] ? inet_shutdown+0x67/0x410 [ 1283.386217][T25155] lock_sock_nested+0x41/0xf0 [ 1283.390870][T25155] ? inet_shutdown+0x67/0x410 [ 1283.395518][T25155] inet_shutdown+0x67/0x410 [ 1283.399996][T25155] nbd_mark_nsock_dead+0xae/0x5c0 [ 1283.404999][T25155] sock_shutdown+0x16b/0x200 [ 1283.409568][T25155] nbd_config_put+0x3d5/0x9b0 [ 1283.414217][T25155] ? __wake_up_klogd+0xe5/0x140 [ 1283.419056][T25155] ? __pfx_nbd_config_put+0x10/0x10 [ 1283.424251][T25155] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1283.430050][T25155] ? __init_waitqueue_head+0xca/0x150 [ 1283.435420][T25155] nbd_genl_connect+0xd72/0x1760 [ 1283.440341][T25155] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1283.445691][T25155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 1283.452604][T25155] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 1283.459512][T25155] genl_family_rcv_msg_doit+0x214/0x300 [ 1283.465032][T25155] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1283.471071][T25155] ? genl_get_cmd+0x3e7/0x760 [ 1283.475733][T25155] ? netlink_sendmsg+0x680/0xda0 [ 1283.480657][T25155] ? ____sys_sendmsg+0xa4d/0xbe0 [ 1283.485577][T25155] ? __radix_tree_lookup+0x217/0x2b0 [ 1283.490833][T25155] genl_rcv_msg+0x560/0x800 [ 1283.495311][T25155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1283.500304][T25155] ? __lock_acquire+0x4c5/0x1ec0 [ 1283.505212][T25155] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1283.510559][T25155] ? __lock_acquire+0x4c5/0x1ec0 [ 1283.515466][T25155] netlink_rcv_skb+0x159/0x420 [ 1283.520212][T25155] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1283.525207][T25155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1283.530469][T25155] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1283.535729][T25155] genl_rcv+0x28/0x40 [ 1283.539690][T25155] netlink_unicast+0x585/0x850 [ 1283.544428][T25155] ? __pfx_netlink_unicast+0x10/0x10 [ 1283.549692][T25155] netlink_sendmsg+0x8b0/0xda0 [ 1283.554432][T25155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.559697][T25155] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1283.565224][T25155] ____sys_sendmsg+0xa4d/0xbe0 [ 1283.569966][T25155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1283.575231][T25155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1283.580496][T25155] ___sys_sendmsg+0x190/0x1e0 [ 1283.585150][T25155] ? __pfx____sys_sendmsg+0x10/0x10 [ 1283.590324][T25155] ? futex_wait+0x11e/0x370 [ 1283.594809][T25155] ? find_held_lock+0x2b/0x80 [ 1283.599467][T25155] __sys_sendmsg+0x160/0x210 [ 1283.604029][T25155] ? __pfx___sys_sendmsg+0x10/0x10 [ 1283.609118][T25155] do_syscall_64+0x123/0x790 [ 1283.613685][T25155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1283.619548][T25155] RIP: 0033:0x7f1aaf59e159 [ 1283.623938][T25155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1283.643519][T25155] RSP: 002b:00007f1ab04a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1283.651902][T25155] RAX: ffffffffffffffda RBX: 00007f1aaf825fa0 RCX: 00007f1aaf59e159 [ 1283.659845][T25155] RDX: 000000000000c844 RSI: 0000200000001ac0 RDI: 000000000000000d [ 1283.667789][T25155] RBP: 00007f1aaf635024 R08: 0000000000000000 R09: 0000000000000000 [ 1283.675733][T25155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1283.683780][T25155] R13: 00007f1aaf826038 R14: 00007f1aaf825fa0 R15: 00007fff39387b68 [ 1283.691750][T25155] [ 1283.720528][ T30] audit: type=1400 audit(1788272653.797:4217): avc: denied { write } for pid=5586 comm="syz-executor" path="pipe:[4819]" dev="pipefs" ino=4819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1283.750094][T25155] block nbd1: shutting down sockets [ 1283.809436][ T7919] net_ratelimit: 43 callbacks suppressed [ 1283.809462][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1283.809478][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1283.919130][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1283.919162][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1284.065735][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.065764][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1284.099506][T21170] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1284.169953][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.169980][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1284.278081][ T7919] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.278108][ T7919] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1284.311286][T21170] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1284.415128][T21170] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1284.457108][T21170] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1284.543765][ T5264] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1284.807020][ T5264] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1285.160443][T21170] bond0 (unregistering): (slave gretap2): Releasing active interface [ 1285.214331][T21170] bond1 (unregistering): Released all slaves [ 1285.223738][T21170] bond2 (unregistering): Released all slaves [ 1285.232427][T21170] bond4 (unregistering): Released all slaves [ 1285.246206][T21170] bond3 (unregistering): Released all slaves [ 1285.254728][T21170] bond5 (unregistering): Released all slaves [ 1285.265280][T21170] bond0 (unregistering): Released all slaves [ 1285.317022][ T5264] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1285.366038][ T5264] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1285.374896][T21170] tipc: Disabling bearer [ 1285.374954][T21170] tipc: Left network mode [ 1286.023082][T21170] IPVS: stop unused estimator thread 0... [ 1286.061708][T21170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.100027][T21170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.151038][T21170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.189545][T21170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.260589][ T5264] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1286.281622][T21170] bridge_slave_1: left allmulticast mode [ 1286.288055][T21170] bridge_slave_1: left promiscuous mode [ 1286.295310][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.303332][T21170] bridge_slave_0: left allmulticast mode [ 1286.309292][T21170] bridge_slave_0: left promiscuous mode [ 1286.315889][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.360676][T21170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.370133][T21170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.382873][T21170] bond0 (unregistering): Released all slaves [ 1286.396032][ T5264] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1286.434775][ T5264] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1286.476119][T21170] hsr_slave_0: left promiscuous mode [ 1286.482169][T21170] hsr_slave_1: left promiscuous mode [ 1286.482455][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.482473][T21170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.504160][T21170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.504181][T21170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.524144][T21170] veth1_macvtap: left promiscuous mode [ 1286.524170][T21170] veth0_macvtap: left promiscuous mode [ 1286.524210][T21170] veth1_vlan: left promiscuous mode [ 1286.524256][T21170] veth0_vlan: left promiscuous mode [ 1286.668042][ T5264] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1288.857330][T21170] net_ratelimit: 103 callbacks suppressed [ 1288.863267][T21170] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1288.871315][T21170] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1288.987398][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1288.987425][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1289.097377][ T7090] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1289.105154][ T7090] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1289.207285][ T197] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1289.207311][ T197] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 1289.317566][ T7094] bond5: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1289.325350][ T7094] bond5: (slave ip6gretap1): failed to get link speed/duplex